last executing test programs: 6.705535591s ago: executing program 1 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 6.489518216s ago: executing program 1 (id=389): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x80003, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000010401010000000000000000010004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 5.995855158s ago: executing program 1 (id=394): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 4.589591711s ago: executing program 2 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.412041946s ago: executing program 2 (id=407): r0 = syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040710408060000000000010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.329110141s ago: executing program 4 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.141400116s ago: executing program 4 (id=415): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setns(r1, 0x6c020000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000840), &(0x7f0000000140)=r3}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 3.110890666s ago: executing program 4 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431203120382032202d202f6465762f6e756c6c6230202d202f6465762f6e756c6c623100") 2.997588309s ago: executing program 4 (id=417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.928431561s ago: executing program 4 (id=419): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) fsopen(0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10013, 0xbf}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x2000}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$KVM_TDX_CAPABILITIES(r8, 0xc004aeba, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r6, 0xfffff000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 2.568880959s ago: executing program 4 (id=425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.625429721s ago: executing program 3 (id=427): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d00", 0x16}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x22) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.557076793s ago: executing program 3 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x4, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x83, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x7, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 1.556935523s ago: executing program 0 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.526017444s ago: executing program 0 (id=431): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.410088826s ago: executing program 0 (id=432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.336737618s ago: executing program 0 (id=433): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r0 = semget$private(0x0, 0x1, 0x223) semop(r0, &(0x7f0000000340)=[{0x2, 0x7d, 0x1800}], 0x1) 1.336511988s ago: executing program 2 (id=434): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) 1.336103568s ago: executing program 3 (id=435): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) fsopen(0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10013, 0xbf}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x2000}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$KVM_TDX_CAPABILITIES(r8, 0xc004aeba, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r6, 0xfffff000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 1.28149622s ago: executing program 1 (id=436): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x60000010}) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1) r3 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000001fc0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x12, {0x2, 0x4e24, @multicast1}, 'veth1_macvtap\x00'}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000200)) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 1.203214062s ago: executing program 2 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) 1.088058834s ago: executing program 2 (id=438): r0 = socket$packet(0x11, 0x2, 0x300) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1", 0x1}, {&(0x7f0000000040)}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf250400000008000400020000000400"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) write(0xffffffffffffffff, &(0x7f0000000140)="6469dfede5a825ecb0607361626c653d2073697a653d307834303030303030302074", 0x22) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) syz_open_procfs(r1, &(0x7f00000002c0)='personality\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0e00, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000700)={@local, 0x0}, &(0x7f0000000740)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2a, &(0x7f0000001180)=@raw=[@call={0x85, 0x0, 0x0, 0xbb}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], 0x0, 0x80000001, 0xdf, &(0x7f0000000600)=""/223, 0x41100, 0xf, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xe, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000009c0)=[0xffffffffffffffff, r5, r7], &(0x7f0000000a00)=[{0x0, 0x2, 0x3, 0x8}, {0x2, 0x4, 0x10}, {0x5, 0x5, 0x0, 0x3}, {0x2, 0x5, 0x2, 0x1}, {0x0, 0x3, 0x4, 0x2}], 0x10, 0x4}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x7, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0xc0, &(0x7f00000003c0)={@local, @local, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "eb00", 'k3\"', 0x0, "0cda6b37bff3bdf0d50f3db0d57104e3b403e67b0919aed5b4e5b8c277ccaa9f47ab634d0e6870d8bfafdcb3657aaaddd041b1cebb2c3c0a0f79ef6c5b7a4d852c1ddc1da4cf572a4ff99b24af1ebf059eb79fa09ee40c81bf988c09b9a0eda46a0dab670d24667515bdfee956ec5cfa5eb9eae423d844d95fc0f4578a1cbe8fd6baaa9b8074869b5352bd7f36c432322c607145ea3cbcad41e63adbdd01909b231507cf80ca9ce739"}}}}}, 0x0) 621.420755ms ago: executing program 3 (id=439): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setns(r1, 0x6c020000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000840), &(0x7f0000000140)=r3}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 219.451775ms ago: executing program 0 (id=440): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'batadv_slave_0\x00', @random="010000201000"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010105}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRESHEX=r0], 0x48}, 0x0) 179.063056ms ago: executing program 1 (id=441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 136.164887ms ago: executing program 2 (id=442): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 126.671677ms ago: executing program 3 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) 69.479898ms ago: executing program 0 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x803, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xa3, 0xd) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/110, 0x6e}, {0x0}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000001fc0)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) write(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) 46.131399ms ago: executing program 1 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x4, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x83, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x7, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 0s ago: executing program 3 (id=446): socket$nl_xfrm(0x10, 0x3, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="802bb5e0b2af5ab45285f1529cfa7acc64021e413e1bcb8c112fe5ee422fd7940a074f1e701acc159e2de08f48243187e589b1837a50477b", 0x38}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 57.497539][ T4173] cgroup: Unknown subsys name 'net' [ 57.625675][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.877857][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.172313][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.254956][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.271813][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 60.354855][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.372936][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.380008][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.388580][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.398010][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.405212][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.413230][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.466111][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.487332][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.494548][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.502668][ T4195] device bridge_slave_0 entered promiscuous mode [ 60.516364][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.523466][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.531438][ T4195] device bridge_slave_1 entered promiscuous mode [ 60.547490][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.558660][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.568436][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.575647][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.583370][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.596728][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.604019][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.612225][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.667501][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.686990][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.694234][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.702772][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.712321][ T4188] team0: Port device team_slave_0 added [ 60.718292][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.725451][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.733549][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.742837][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.753566][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.773497][ T4188] team0: Port device team_slave_1 added [ 60.789641][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.809324][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.820581][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.866794][ T4195] team0: Port device team_slave_0 added [ 60.879686][ T4186] team0: Port device team_slave_0 added [ 60.887653][ T4186] team0: Port device team_slave_1 added [ 60.894044][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.901304][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.927241][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.946494][ T4195] team0: Port device team_slave_1 added [ 60.952489][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.959622][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.967794][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.981809][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.988750][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.015163][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.028360][ T4193] team0: Port device team_slave_0 added [ 61.041421][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.048471][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.056704][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.076645][ T4193] team0: Port device team_slave_1 added [ 61.095343][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.102337][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.128637][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.140673][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.147615][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.173609][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.190682][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.197633][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.223981][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.257927][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.264980][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.290975][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.317266][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.326160][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.335324][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.345567][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.352609][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.378687][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.393914][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.400890][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.427451][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.454358][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.479026][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.485952][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.492702][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.500690][ T4186] Cannot create hsr debugfs directory [ 61.557286][ T4187] team0: Port device team_slave_0 added [ 61.569477][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.576298][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.583648][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.591273][ T4193] Cannot create hsr debugfs directory [ 61.605287][ T4195] device hsr_slave_0 entered promiscuous mode [ 61.612404][ T4195] device hsr_slave_1 entered promiscuous mode [ 61.618885][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.626519][ T4195] Cannot create hsr debugfs directory [ 61.633193][ T4187] team0: Port device team_slave_1 added [ 61.705363][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.712716][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.739357][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.751834][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.758785][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.784780][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.921606][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.928267][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.935111][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.942967][ T4187] Cannot create hsr debugfs directory [ 61.951448][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 61.958091][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 61.970149][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 61.976182][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 61.982632][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 62.091652][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.102516][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.114880][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.141827][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.180245][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.202111][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.216098][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.233203][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.251483][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.262849][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.283356][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.293194][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.383336][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.396211][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.418522][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.458331][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.476979][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.485585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.497462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.505801][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.514777][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.526365][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.548546][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.558592][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.576905][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.587672][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.597107][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.609197][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.616414][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.624841][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.634248][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.643299][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.653240][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.669473][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.679304][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.696973][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.705846][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.714587][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.721678][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.730472][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.738510][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.746785][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.755933][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.765319][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.772437][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.781000][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.789616][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.798039][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.805092][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.813704][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.823786][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.848800][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.859940][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.880851][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.889395][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.898892][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.908518][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.917145][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.925878][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.935882][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.944195][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.953226][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.961727][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.969805][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.978370][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.986900][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.993992][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.002226][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.010874][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.019157][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.026341][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.034505][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.043382][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.052241][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.085882][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.095746][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.114588][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.125785][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.138017][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.146692][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.177464][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.189332][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.204642][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.217135][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.228618][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.237894][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.246282][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.256853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.265855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.291575][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.313080][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.325310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.334176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.342992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.351932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.359323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.367838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.377905][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.386696][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.407495][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.415816][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.429681][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.438121][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.463718][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.473561][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.483199][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.490286][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.497829][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.506829][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.515549][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.524379][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.533069][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.540155][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.548368][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.559843][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.588542][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.604548][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.615594][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.629887][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.638588][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.646987][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.655992][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.665005][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.678445][ T4188] device veth0_vlan entered promiscuous mode [ 63.696953][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.709674][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.723356][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.732640][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.740902][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.748832][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.759953][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.771521][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.779901][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.788843][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.817036][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.829110][ T4188] device veth1_vlan entered promiscuous mode [ 63.847220][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.856480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.869134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.881625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.889432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.901896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.916747][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.925532][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.947445][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.978995][ T4188] device veth0_macvtap entered promiscuous mode [ 63.996306][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.005176][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.019793][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.028609][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.030452][ T4175] Bluetooth: hci2: command 0x041b tx timeout [ 64.035694][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.042203][ T4175] Bluetooth: hci0: command 0x041b tx timeout [ 64.050371][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.060831][ T4175] Bluetooth: hci4: command 0x041b tx timeout [ 64.062597][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.066970][ T4175] Bluetooth: hci1: command 0x041b tx timeout [ 64.075764][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.090267][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.097314][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.105359][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.114938][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.124592][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.135867][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.148189][ T4188] device veth1_macvtap entered promiscuous mode [ 64.156535][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.165293][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.173816][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.182640][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.224992][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.237791][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.247433][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.256881][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.265848][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.274470][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.283616][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.291991][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.300473][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.315005][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.348455][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.364417][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.378407][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.390625][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.399381][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.407559][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.418939][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.429681][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.446155][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.455226][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.464222][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.488147][ T4186] device veth0_vlan entered promiscuous mode [ 64.499249][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.514572][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.527788][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.540250][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.548865][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.559933][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.568683][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.577756][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.586815][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.607320][ T4186] device veth1_vlan entered promiscuous mode [ 64.646621][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.655832][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.665819][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.675433][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.683181][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.690882][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.698603][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.712911][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.721795][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.740035][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.751623][ T4193] device veth0_vlan entered promiscuous mode [ 64.797093][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.808033][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.816991][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.846750][ T4195] device veth0_vlan entered promiscuous mode [ 64.857131][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.865258][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.874210][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.882891][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.892456][ T4186] device veth0_macvtap entered promiscuous mode [ 64.902314][ T4186] device veth1_macvtap entered promiscuous mode [ 64.916645][ T4195] device veth1_vlan entered promiscuous mode [ 64.932379][ T4193] device veth1_vlan entered promiscuous mode [ 64.950664][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.958628][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.005355][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.016262][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.027781][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.035584][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.044363][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.052823][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.064492][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.073964][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.083259][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.091458][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.099088][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.108014][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.144035][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.163242][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.179483][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.199726][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.208896][ T4193] device veth0_macvtap entered promiscuous mode [ 65.210701][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.224757][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.233686][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.242852][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.251538][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.259955][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.268482][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.277474][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.286432][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.302828][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.313247][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.322257][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.331198][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.343956][ T4195] device veth0_macvtap entered promiscuous mode [ 65.353520][ T4193] device veth1_macvtap entered promiscuous mode [ 65.364100][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.372472][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.395805][ T4195] device veth1_macvtap entered promiscuous mode [ 65.431855][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.451912][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.487852][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.498859][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.509547][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.521349][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.532389][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.545135][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.554178][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.563884][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.574446][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.596032][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.606223][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.622635][ T4187] device veth0_vlan entered promiscuous mode [ 65.636690][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.648809][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.659590][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.671257][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.683056][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.694800][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.706423][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.719451][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.734111][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.744729][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.755662][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.767124][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.792900][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.804840][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.815449][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.826237][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.837999][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.847595][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.858832][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.871851][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.889480][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.901180][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.911720][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.922254][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.934824][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.945872][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.958329][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.983287][ T4187] device veth1_vlan entered promiscuous mode [ 65.991522][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.999377][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.014653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.023829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.038639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.049627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.100989][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.108825][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.110890][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 66.130570][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 66.138978][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.149334][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.151076][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 66.164981][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 66.171593][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 66.179061][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.193415][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.213492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.223901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.237735][ T4187] device veth0_macvtap entered promiscuous mode [ 66.267887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.279637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.289275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.327589][ T4187] device veth1_macvtap entered promiscuous mode [ 66.393402][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.417713][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.431712][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.452785][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.465143][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.479136][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.491782][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.511236][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.539427][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.567017][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.578003][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.587028][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.606061][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.625051][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.636221][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.649732][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.660192][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.671813][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.681712][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.693014][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.705685][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.726595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.745494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.763019][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.772567][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.781601][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.790402][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.817455][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.833356][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.857844][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.875028][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.887592][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.895538][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.935250][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.946384][ T3056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.965803][ T3056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.974380][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.990772][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.005604][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.048336][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.083161][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.093024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.139859][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.168047][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.195059][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.261574][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.448175][ T25] audit: type=1326 audit(1789002785.888:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.535481][ T25] audit: type=1326 audit(1789002785.888:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.589596][ T25] audit: type=1326 audit(1789002785.918:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.680887][ T25] audit: type=1326 audit(1789002785.918:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.729979][ T25] audit: type=1326 audit(1789002785.918:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.793400][ T25] audit: type=1326 audit(1789002785.918:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.852022][ T25] audit: type=1326 audit(1789002785.918:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.879780][ T25] audit: type=1326 audit(1789002785.938:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.911048][ T25] audit: type=1326 audit(1789002785.938:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 67.986509][ T25] audit: type=1326 audit(1789002785.938:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b953d6159 code=0x7ffc0000 [ 68.190772][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 68.196864][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 68.230873][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 68.255290][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 68.284969][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 70.326071][ T4417] process 'syz.2.56' launched '/dev/fd/5' with NULL argv: empty string added [ 71.046531][ T4454] kvm: pic: non byte read [ 71.091299][ T4454] kvm: pic: non byte read [ 71.097871][ T4454] kvm: pic: non byte read [ 71.153906][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.163956][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.180614][ T4454] kvm: pic: non byte read [ 71.185361][ T4454] kvm: pic: level sensitive irq not supported [ 71.185456][ T4454] kvm: pic: non byte read [ 71.218063][ T4454] kvm: pic: non byte read [ 71.253031][ T4454] kvm: pic: single mode not supported [ 71.253055][ T4454] kvm: pic: level sensitive irq not supported [ 71.307565][ T4454] kvm: pic: non byte read [ 71.595322][ T4473] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 71.643797][ T4473] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 71.969237][ T4486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 71.994801][ T4486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.016321][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.038706][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.092067][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.144843][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.178143][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.228432][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.290546][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.352396][ T4484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 73.304362][ T4513] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.836997][ T4522] binder: 4521:4522 ioctl c0306201 0 returned -14 [ 74.697927][ T4543] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 76.159715][ T4587] loop5: detected capacity change from 0 to 7 [ 76.217597][ T4588] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 76.789588][ T4587] Dev loop5: unable to read RDB block 7 [ 76.830221][ T4587] loop5: unable to read partition table [ 76.836015][ T4587] loop5: partition table beyond EOD, truncated [ 76.933347][ T4587] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 76.966183][ T4596] netlink: 'syz.0.118': attribute type 31 has an invalid length. [ 77.016267][ T4596] netlink: 'syz.0.118': attribute type 29 has an invalid length. [ 77.034484][ T4599] Zero length message leads to an empty skb [ 77.054285][ T4596] netlink: 'syz.0.118': attribute type 31 has an invalid length. [ 77.160577][ T4596] netlink: 'syz.0.118': attribute type 29 has an invalid length. [ 77.298657][ T4604] binder: 4603:4604 ioctl c0306201 0 returned -14 [ 77.317787][ T4606] __nla_validate_parse: 29 callbacks suppressed [ 77.317803][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 77.370352][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 77.400554][ T4606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 77.770351][ T4615] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 78.466725][ T4630] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 79.491447][ T4643] loop5: detected capacity change from 0 to 7 [ 79.536729][ T4176] Dev loop5: unable to read RDB block 7 [ 79.543636][ T4176] loop5: unable to read partition table [ 79.564446][ T4176] loop5: partition table beyond EOD, truncated [ 79.598880][ T4643] Dev loop5: unable to read RDB block 7 [ 79.632956][ T4643] loop5: unable to read partition table [ 79.655939][ T4643] loop5: partition table beyond EOD, truncated [ 79.696627][ T4643] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 80.509788][ T4669] TCP: MD5 Hash failed for (172.30.1.2, 20002)->(172.20.20.187, 20002) L3 index 0 [ 80.646205][ T4672] netlink: 'syz.2.143': attribute type 4 has an invalid length. [ 81.674137][ T4684] loop5: detected capacity change from 0 to 7 [ 81.694812][ T4176] Dev loop5: unable to read RDB block 7 [ 81.700473][ T4176] loop5: unable to read partition table [ 81.720231][ T4176] loop5: partition table beyond EOD, truncated [ 81.741630][ T4684] Dev loop5: unable to read RDB block 7 [ 81.747279][ T4684] loop5: unable to read partition table [ 81.775519][ T4684] loop5: partition table beyond EOD, truncated [ 81.814214][ T4684] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.005522][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.053917][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 82.108835][ T4702] syz.0.155 uses obsolete (PF_INET,SOCK_PACKET) [ 82.620915][ T4231] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.630290][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.638280][ T4231] usb 5-1: Product: syz [ 82.642497][ T4231] usb 5-1: Manufacturer: syz [ 82.647090][ T4231] usb 5-1: SerialNumber: syz [ 82.800147][ T4232] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.079040][ T4715] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 83.130689][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 83.876472][ T4203] Bluetooth: hci2: hardware error 0x04 [ 83.880361][ T4232] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.916422][ T4232] usb 3-1: config 0 has no interface number 0 [ 83.925280][ T4736] loop5: detected capacity change from 0 to 7 [ 83.962454][ T4232] usb 3-1: config 0 interface 41 has no altsetting 0 [ 83.979350][ T4179] Dev loop5: unable to read RDB block 7 [ 83.987409][ T4179] loop5: unable to read partition table [ 84.026991][ T4179] loop5: partition table beyond EOD, truncated [ 84.038401][ T4736] Dev loop5: unable to read RDB block 7 [ 84.051997][ T4736] loop5: unable to read partition table [ 84.060488][ T4736] loop5: partition table beyond EOD, truncated [ 84.068713][ T4736] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 84.143459][ T4232] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 84.169720][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.190230][ T4232] usb 3-1: Product: syz [ 84.194425][ T4232] usb 3-1: Manufacturer: syz [ 84.199025][ T4232] usb 3-1: SerialNumber: syz [ 84.213526][ T4232] usb 3-1: config 0 descriptor?? [ 84.550281][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.600452][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 84.790174][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 84.890393][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 84.911604][ T26] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 84.919912][ T26] usb 4-1: config 0 has no interface number 0 [ 84.926103][ T26] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 84.930229][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 84.971534][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 85.000344][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 85.040320][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 85.071682][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 85.090475][ T26] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 85.100806][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 85.108764][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.114870][ T4753] device syzkaller1 entered promiscuous mode [ 85.124709][ T26] usb 4-1: Product: syz [ 85.131413][ T26] usb 4-1: Manufacturer: syz [ 85.136018][ T26] usb 4-1: SerialNumber: syz [ 85.148941][ T26] usb 4-1: config 0 descriptor?? [ 85.154595][ T4232] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 85.160338][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 85.180744][ T4748] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.190750][ T4231] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 85.201693][ T4231] lan78xx: probe of 5-1:1.0 failed with error -71 [ 85.221801][ T4231] usb 5-1: USB disconnect, device number 2 [ 85.428948][ T4748] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 85.540277][ T4763] netlink: 'syz.1.176': attribute type 4 has an invalid length. [ 86.390374][ T4768] mmap: syz.4.179 (4768) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 86.406482][ T4782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 86.417222][ T4782] 8021q: VLANs not supported on ip6tnl0 [ 86.512701][ T1106] cfg80211: failed to load regulatory.db [ 86.919350][ T4803] netlink: 'syz.1.193': attribute type 4 has an invalid length. [ 87.231151][ T4232] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 87.300786][ T4232] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 87.424891][ T4232] CoreChips: probe of 3-1:0.41 failed with error -71 [ 87.501618][ T4232] usb 3-1: USB disconnect, device number 2 [ 87.593497][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 87.606940][ T4807] 8021q: VLANs not supported on ip6tnl0 [ 87.676596][ T4811] loop5: detected capacity change from 0 to 7 [ 87.681847][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 87.685648][ T4811] Dev loop5: unable to read RDB block 7 [ 87.703959][ T4811] loop5: unable to read partition table [ 87.709886][ T4811] loop5: partition table beyond EOD, truncated [ 87.716533][ T4811] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.910610][ T1106] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.120204][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.150434][ T1106] usb 2-1: Using ep0 maxpacket: 16 [ 88.270324][ T1106] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 88.281436][ T1106] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 88.294620][ T1106] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.301289][ T1106] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 88.310493][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.320915][ T1106] usb 2-1: config 0 descriptor?? [ 88.370236][ T26] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 88.380903][ T26] asix: probe of 4-1:0.188 failed with error -71 [ 88.390299][ T26] usb 4-1: USB disconnect, device number 2 [ 88.478642][ T4828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.488726][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.500851][ T4233] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.509893][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.519606][ T4233] usb 3-1: config 0 descriptor?? [ 88.806699][ T1106] maltron 0003:058F:9410.0001: ignoring exceeding usage max [ 88.818287][ T1106] maltron 0003:058F:9410.0001: hidraw0: USB HID v0.01 Device [HID 058f:9410] on usb-dummy_hcd.1-1/input0 [ 89.001462][ T4233] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 89.018226][ T13] usb 2-1: USB disconnect, device number 2 [ 89.021400][ T4233] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 89.186288][ T4233] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 89.279416][ T4843] netlink: 'syz.4.208': attribute type 4 has an invalid length. [ 90.031064][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.209'. [ 90.046094][ T4233] usb 3-1: USB disconnect, device number 3 [ 90.074987][ T4852] loop5: detected capacity change from 0 to 7 [ 90.098217][ T4852] Dev loop5: unable to read RDB block 7 [ 90.108838][ T4852] loop5: unable to read partition table [ 90.120279][ T4852] loop5: partition table beyond EOD, truncated [ 90.127172][ T4852] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.388004][ T4194] Bluetooth: hci1: Unknown advertising packet type: 0xff00 [ 90.550178][ T1106] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 90.750318][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.010151][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 91.080268][ T1106] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 91.089471][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.101410][ T1106] usb 4-1: Product: syz [ 91.105598][ T1106] usb 4-1: Manufacturer: syz [ 91.110297][ T1106] usb 4-1: SerialNumber: syz [ 91.116347][ T1106] usb 4-1: config 0 descriptor?? [ 91.162320][ T1106] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 91.175884][ T4875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.180389][ T4229] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 91.194073][ T4229] usb 5-1: config 0 has no interface number 0 [ 91.200304][ T4229] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 91.211149][ T4229] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 91.420302][ T4229] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 91.429491][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.437551][ T4229] usb 5-1: Product: syz [ 91.441879][ T4229] usb 5-1: Manufacturer: syz [ 91.446483][ T4229] usb 5-1: SerialNumber: syz [ 91.467221][ T4229] usb 5-1: config 0 descriptor?? [ 91.500455][ T4871] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.507626][ T4871] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.723926][ T4871] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.731551][ T4871] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.854584][ T4884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.224'. [ 91.857338][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.869532][ T4884] 8021q: VLANs not supported on ip6tnl0 [ 91.971184][ T4229] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 91.987353][ T4888] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 92.960293][ T4232] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.969350][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.977509][ T4589] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.985046][ T4232] usb 3-1: Product: syz [ 92.989203][ T4232] usb 3-1: Manufacturer: syz [ 92.994121][ T4232] usb 3-1: SerialNumber: syz [ 93.230274][ T4589] usb 2-1: Using ep0 maxpacket: 16 [ 93.350242][ T4589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.363948][ T4589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.374933][ T4589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.384725][ T4589] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.394434][ T4589] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.480315][ T4232] net_ratelimit: 2 callbacks suppressed [ 93.480336][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 93.497564][ T4589] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.506678][ T4589] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.514817][ T4589] usb 2-1: Manufacturer: syz [ 93.521861][ T4589] usb 2-1: config 0 descriptor?? [ 93.540255][ T1106] gspca_stk1135: reg_w 0x203 err -71 [ 93.546585][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.556602][ T1106] gspca_stk1135: Sensor write failed [ 93.567002][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.573478][ T1106] gspca_stk1135: Sensor write failed [ 93.578900][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.585472][ T1106] gspca_stk1135: Sensor read failed [ 93.591395][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.598011][ T1106] gspca_stk1135: Sensor read failed [ 93.603361][ T1106] gspca_stk1135: Detected sensor type unknown (0x0) [ 93.609974][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.616441][ T1106] gspca_stk1135: Sensor read failed [ 93.621788][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.628514][ T1106] gspca_stk1135: Sensor read failed [ 93.638430][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.644901][ T1106] gspca_stk1135: Sensor write failed [ 93.650396][ T1106] gspca_stk1135: serial bus timeout: status=0x00 [ 93.656818][ T1106] gspca_stk1135: Sensor write failed [ 93.664072][ T1106] stk1135: probe of 4-1:0.0 failed with error -71 [ 93.681397][ T1106] usb 4-1: USB disconnect, device number 3 [ 93.736230][ T4911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 93.745585][ T4911] 8021q: VLANs not supported on ip6tnl0 [ 93.929559][ T4589] rc_core: IR keymap rc-hauppauge not found [ 93.936393][ T4589] Registered IR keymap rc-empty [ 93.942272][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.970720][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.040716][ T4229] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 94.053071][ T4920] netlink: 'syz.0.238': attribute type 4 has an invalid length. [ 94.096961][ T4229] asix: probe of 5-1:0.34 failed with error -71 [ 94.257251][ T4229] usb 5-1: USB disconnect, device number 3 [ 94.612704][ T4589] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 94.641188][ T4589] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 94.664463][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.766341][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.820422][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.850175][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.880495][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.912088][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.950194][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.959362][ T4937] ima: policy update failed [ 95.000348][ T4941] loop5: detected capacity change from 0 to 7 [ 95.000489][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.024988][ T25] kauditd_printk_skb: 27 callbacks suppressed [ 95.025001][ T25] audit: type=1802 audit(1789002813.468:39): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.245" res=0 errno=0 [ 95.056458][ T4941] Dev loop5: unable to read RDB block 7 [ 95.064685][ T4941] loop5: unable to read partition table [ 95.075869][ T4941] loop5: partition table beyond EOD, truncated [ 95.107738][ T4941] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 95.110587][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.128909][ T4945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 95.190272][ T4589] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.231567][ T4589] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 95.256372][ T4589] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.265415][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 95.291710][ T4951] FAULT_INJECTION: forcing a failure. [ 95.291710][ T4951] name failslab, interval 1, probability 0, space 0, times 1 [ 95.327456][ T4951] CPU: 1 PID: 4951 Comm: syz.4.250 Not tainted syzkaller #0 [ 95.334773][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.344860][ T4951] Call Trace: [ 95.348144][ T4951] [ 95.351080][ T4951] dump_stack_lvl+0x188/0x250 [ 95.355778][ T4951] ? show_regs_print_info+0x20/0x20 [ 95.360985][ T4951] ? load_image+0x410/0x410 [ 95.365505][ T4951] ? __lock_acquire+0x7b50/0x7b50 [ 95.370541][ T4951] ? stack_trace_save+0xf0/0xf0 [ 95.375404][ T4951] should_fail+0x383/0x4b0 [ 95.379843][ T4951] should_failslab+0x5/0x20 [ 95.384353][ T4951] slab_pre_alloc_hook+0x51/0xc0 [ 95.389305][ T4951] ? sockfs_init_fs_context+0xa0/0xa0 [ 95.394691][ T4951] ? sock_alloc_inode+0x17/0xb0 [ 95.399539][ T4951] kmem_cache_alloc+0x3d/0x280 [ 95.404300][ T4951] ? sockfs_init_fs_context+0xa0/0xa0 [ 95.409672][ T4951] sock_alloc_inode+0x17/0xb0 [ 95.414350][ T4951] ? sockfs_init_fs_context+0xa0/0xa0 [ 95.419711][ T4951] new_inode_pseudo+0x5f/0x210 [ 95.424466][ T4951] sock_create_lite+0x87/0x500 [ 95.429219][ T4951] __netlink_kernel_create+0xfa/0x7d0 [ 95.434582][ T4951] ? __lock_acquire+0x7b50/0x7b50 [ 95.439597][ T4951] ? netlink_set_err+0x3c0/0x3c0 [ 95.444530][ T4951] audit_net_init+0xc7/0x1f0 [ 95.449104][ T4951] ? kauditd_thread+0xb20/0xb20 [ 95.453942][ T4951] ? audit_net_exit+0x40/0x40 [ 95.458693][ T4951] ? audit_receive+0x2d20/0x2d20 [ 95.463618][ T4951] ? audit_multicast_bind+0x30/0x30 [ 95.468809][ T4951] ops_init+0x360/0x5f0 [ 95.472962][ T4951] setup_net+0x39e/0xa10 [ 95.477188][ T4951] ? copy_net_ns+0x5b0/0x5b0 [ 95.481762][ T4951] ? copy_net_ns+0x324/0x5b0 [ 95.486333][ T4951] ? down_read_killable+0x1ce/0x340 [ 95.491515][ T4951] copy_net_ns+0x33e/0x5b0 [ 95.495913][ T4951] create_new_namespaces+0x3ce/0x700 [ 95.501186][ T4951] unshare_nsproxy_namespaces+0x116/0x160 [ 95.506892][ T4951] ksys_unshare+0x4f6/0x8e0 [ 95.511382][ T4951] ? __lock_acquire+0x7b50/0x7b50 [ 95.516396][ T4951] ? sighand_ctor+0x40/0x40 [ 95.520880][ T4951] ? lock_chain_count+0x20/0x20 [ 95.525717][ T4951] ? syscall_enter_from_user_mode+0x21/0x70 [ 95.531596][ T4951] __x64_sys_unshare+0x34/0x40 [ 95.536348][ T4951] do_syscall_64+0x4c/0xa0 [ 95.540746][ T4951] ? clear_bhb_loop+0x30/0x80 [ 95.545410][ T4951] ? clear_bhb_loop+0x30/0x80 [ 95.550075][ T4951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.555967][ T4951] RIP: 0033:0x7f8a53f44159 [ 95.560364][ T4951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.579949][ T4951] RSP: 002b:00007f8a5219c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.588346][ T4951] RAX: ffffffffffffffda RBX: 00007f8a541cbfa0 RCX: 00007f8a53f44159 [ 95.596298][ T4951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 95.604252][ T4951] RBP: 00007f8a53fdb03b R08: 0000000000000000 R09: 0000000000000000 [ 95.612204][ T4951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.620157][ T4951] R13: 00007f8a541cc038 R14: 00007f8a541cbfa0 R15: 00007fffdd51ac88 [ 95.628125][ T4951] [ 95.666807][ T4589] usb 2-1: USB disconnect, device number 3 [ 95.759926][ T4951] audit: cannot initialize netlink socket in namespace [ 95.878117][ T4961] netlink: 'syz.1.252': attribute type 4 has an invalid length. [ 96.560351][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 96.607122][ T4972] loop4: detected capacity change from 0 to 2048 [ 96.610657][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 96.677865][ T4976] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.678618][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 96.724409][ T4972] loop4: p1 < > p4 [ 96.748258][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 96.759188][ T4972] loop4: p4 size 8388608 extends beyond EOD, truncated [ 96.776451][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 96.785447][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 96.790431][ T4983] FAULT_INJECTION: forcing a failure. [ 96.790431][ T4983] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 96.811066][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 96.816548][ T4981] 8021q: VLANs not supported on ip6tnl0 [ 96.829762][ T4983] CPU: 0 PID: 4983 Comm: syz.3.262 Not tainted syzkaller #0 [ 96.837058][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.840308][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 96.847107][ T4983] Call Trace: [ 96.847115][ T4983] [ 96.847123][ T4983] dump_stack_lvl+0x188/0x250 [ 96.847152][ T4983] ? show_regs_print_info+0x20/0x20 [ 96.874587][ T4983] ? load_image+0x410/0x410 [ 96.879096][ T4983] ? __lock_acquire+0x7b50/0x7b50 [ 96.884121][ T4983] should_fail+0x383/0x4b0 [ 96.888537][ T4983] prepare_alloc_pages+0x1e3/0x5b0 [ 96.893637][ T4983] __alloc_pages+0x11b/0x480 [ 96.898218][ T4983] ? zone_statistics+0x170/0x170 [ 96.903148][ T4983] ? __phys_addr+0xb6/0x170 [ 96.907638][ T4983] kmalloc_large_node+0x7d/0x1a0 [ 96.912562][ T4983] __kmalloc_node+0x21e/0x3a0 [ 96.917225][ T4983] kvmalloc_node+0x84/0x130 [ 96.921709][ T4983] kvm_dev_ioctl+0x508/0x20a0 [ 96.926385][ T4983] ? hardware_enable_nolock+0x130/0x130 [ 96.931918][ T4983] ? bpf_lsm_file_ioctl+0x5/0x10 [ 96.936841][ T4983] ? security_file_ioctl+0x7c/0xa0 [ 96.941944][ T4983] ? hardware_enable_nolock+0x130/0x130 [ 96.947477][ T4983] __se_sys_ioctl+0xfa/0x170 [ 96.952051][ T4983] do_syscall_64+0x4c/0xa0 [ 96.956455][ T4983] ? clear_bhb_loop+0x30/0x80 [ 96.961113][ T4983] ? clear_bhb_loop+0x30/0x80 [ 96.965778][ T4983] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.971745][ T4983] RIP: 0033:0x7f371a77d159 [ 96.976149][ T4983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.995737][ T4983] RSP: 002b:00007f37189d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.004131][ T4983] RAX: ffffffffffffffda RBX: 00007f371aa04fa0 RCX: 00007f371a77d159 [ 97.012091][ T4983] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 97.020049][ T4983] RBP: 00007f371a81403b R08: 0000000000000000 R09: 0000000000000000 [ 97.028019][ T4983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.035969][ T4983] R13: 00007f371aa05038 R14: 00007f371aa04fa0 R15: 00007ffc4e0550c8 [ 97.043981][ T4983] [ 97.079181][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 97.096066][ T4972] EXT4-fs (loop4p1): unable to read superblock [ 97.120198][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 97.135870][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 97.165308][ T4232] lan78xx: probe of 3-1:1.0 failed with error -71 [ 97.183485][ T4232] usb 3-1: USB disconnect, device number 4 [ 97.347566][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 97.508209][ T5000] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 97.571234][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.153469][ T5006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 98.163498][ T5005] FAULT_INJECTION: forcing a failure. [ 98.163498][ T5005] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.181636][ T5005] CPU: 1 PID: 5005 Comm: syz.3.270 Not tainted syzkaller #0 [ 98.189034][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.199093][ T5005] Call Trace: [ 98.202373][ T5005] [ 98.205303][ T5005] dump_stack_lvl+0x188/0x250 [ 98.209998][ T5005] ? show_regs_print_info+0x20/0x20 [ 98.215205][ T5005] ? load_image+0x410/0x410 [ 98.219727][ T5005] ? __lock_acquire+0x7b50/0x7b50 [ 98.224769][ T5005] should_fail+0x383/0x4b0 [ 98.229196][ T5005] _copy_from_user+0x2e/0x170 [ 98.233877][ T5005] ipv6_set_mcast_msfilter+0x118/0x2c0 [ 98.239342][ T5005] ipv6_setsockopt+0xe3a/0x3cc0 [ 98.244191][ T5005] ? finish_lock_switch+0x12d/0x290 [ 98.249398][ T5005] ? ipv6_setsockopt+0x3d0/0x3cc0 [ 98.254440][ T5005] ? ipv6_update_options+0x400/0x400 [ 98.259759][ T5005] ? release_firmware_map_entry+0x190/0x190 [ 98.265668][ T5005] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.271661][ T5005] ? lock_chain_count+0x20/0x20 [ 98.276519][ T5005] ? preempt_schedule+0xbc/0xd0 [ 98.281379][ T5005] ? mark_lock+0x94/0x320 [ 98.285717][ T5005] ? __lock_acquire+0x1305/0x7b50 [ 98.290764][ T5005] ? mark_lock+0x94/0x320 [ 98.295103][ T5005] ? verify_lock_unused+0x140/0x140 [ 98.300291][ T5005] ? aa_label_sk_perm+0x3e6/0x540 [ 98.305312][ T5005] ? aa_sk_perm+0x910/0x910 [ 98.309811][ T5005] ? __might_sleep+0xf0/0xf0 [ 98.314390][ T5005] ? rcu_lock_release+0x9/0x20 [ 98.319143][ T5005] tcp_setsockopt+0x229/0x1e60 [ 98.323891][ T5005] ? aa_sk_perm+0x7dc/0x910 [ 98.328377][ T5005] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 98.333738][ T5005] ? aa_af_perm+0x340/0x340 [ 98.338227][ T5005] ? __fget_files+0x402/0x470 [ 98.342891][ T5005] ? aa_sock_opt_perm+0x74/0x100 [ 98.347813][ T5005] ? sock_common_setsockopt+0x32/0xb0 [ 98.353166][ T5005] ? sock_common_recvmsg+0x1c0/0x1c0 [ 98.358433][ T5005] __sys_setsockopt+0x2bf/0x3d0 [ 98.363272][ T5005] __x64_sys_setsockopt+0xb1/0xc0 [ 98.368282][ T5005] do_syscall_64+0x4c/0xa0 [ 98.372680][ T5005] ? clear_bhb_loop+0x30/0x80 [ 98.377341][ T5005] ? clear_bhb_loop+0x30/0x80 [ 98.382006][ T5005] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.387895][ T5005] RIP: 0033:0x7f371a77d159 [ 98.392304][ T5005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.411891][ T5005] RSP: 002b:00007f37189d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.420289][ T5005] RAX: ffffffffffffffda RBX: 00007f371aa04fa0 RCX: 00007f371a77d159 [ 98.428242][ T5005] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004 [ 98.436194][ T5005] RBP: 00007f371a81403b R08: 0000000000000090 R09: 0000000000000000 [ 98.444148][ T5005] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 98.452104][ T5005] R13: 00007f371aa05038 R14: 00007f371aa04fa0 R15: 00007ffc4e0550c8 [ 98.460080][ T5005] [ 98.523507][ T5013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.274'. [ 98.624799][ T4232] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 98.641804][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.655523][ T4232] usb 3-1: Product: syz [ 98.659692][ T4232] usb 3-1: Manufacturer: syz [ 98.665433][ T4232] usb 3-1: SerialNumber: syz [ 98.713068][ T5026] loop1: detected capacity change from 0 to 2048 [ 98.763614][ T5026] loop1: p1 < > p4 [ 98.769941][ T5026] loop1: p4 size 8388608 extends beyond EOD, truncated [ 98.782004][ T5026] EXT4-fs (loop1p1): unable to read superblock [ 98.820298][ T4175] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.891048][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 98.891228][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 99.170230][ T4232] net_ratelimit: 1 callbacks suppressed [ 99.170244][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 99.180194][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.187612][ T4175] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 99.203576][ T4175] usb 5-1: config 1 has no interface number 0 [ 99.210285][ T1330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.360433][ T4175] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 99.369496][ T4175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.377595][ T4175] usb 5-1: Product: syz [ 99.381795][ T4175] usb 5-1: Manufacturer: syz [ 99.386373][ T4175] usb 5-1: SerialNumber: syz [ 99.450293][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 99.610391][ T1330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.626118][ T1330] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.641218][ T1330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.663816][ T1330] usb 2-1: config 0 descriptor?? [ 99.717379][ T1330] pwc: Askey VC010 type 2 USB webcam detected. [ 99.733016][ T4175] usb 5-1: 3:1 : does not exist [ 99.771144][ T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 99.789257][ T5040] netlink: 'syz.0.283': attribute type 4 has an invalid length. [ 99.818318][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.861329][ T13] usb 4-1: Product: syz [ 99.883359][ T13] usb 4-1: Manufacturer: syz [ 99.914698][ T13] usb 4-1: SerialNumber: syz [ 100.039013][ T13] usb 4-1: config 0 descriptor?? [ 100.210534][ T1330] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.300501][ T1330] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.324522][ T4175] usb 5-1: 3:2 : does not exist [ 100.340382][ T13] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.354407][ T4175] usb 5-1: USB disconnect, device number 4 [ 100.394954][ T1330] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.428740][ T5043] FAULT_INJECTION: forcing a failure. [ 100.428740][ T5043] name failslab, interval 1, probability 0, space 0, times 0 [ 100.449321][ T5043] CPU: 1 PID: 5043 Comm: syz.4.284 Not tainted syzkaller #0 [ 100.456629][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.466686][ T5043] Call Trace: [ 100.469960][ T5043] [ 100.472888][ T5043] dump_stack_lvl+0x188/0x250 [ 100.477583][ T5043] ? show_regs_print_info+0x20/0x20 [ 100.482789][ T5043] ? load_image+0x410/0x410 [ 100.487303][ T5043] ? __might_sleep+0xf0/0xf0 [ 100.491896][ T5043] ? __lock_acquire+0x7b50/0x7b50 [ 100.496912][ T5043] should_fail+0x383/0x4b0 [ 100.501322][ T5043] should_failslab+0x5/0x20 [ 100.505812][ T5043] slab_pre_alloc_hook+0x51/0xc0 [ 100.510734][ T5043] __kmalloc_node+0x6d/0x3a0 [ 100.515308][ T5043] ? kvmalloc_node+0x84/0x130 [ 100.519971][ T5043] kvmalloc_node+0x84/0x130 [ 100.524456][ T5043] __nf_hook_entries_try_shrink+0x34c/0x750 [ 100.530347][ T5043] __nf_unregister_net_hook+0x45a/0x610 [ 100.535886][ T5043] nf_unregister_net_hook+0x96/0xf0 [ 100.541070][ T5043] nf_tables_abort+0x4a42/0x6480 [ 100.546008][ T5043] ? nf_tables_commit+0x73e0/0x73e0 [ 100.551198][ T5043] nfnetlink_rcv+0x1d00/0x2450 [ 100.555967][ T5043] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 100.561522][ T5043] ? skb_clone+0x1f1/0x350 [ 100.565923][ T5043] ? rcu_lock_release+0x5/0x20 [ 100.570696][ T5043] ? __lock_acquire+0x7b50/0x7b50 [ 100.575715][ T5043] netlink_unicast+0x78f/0x940 [ 100.580471][ T5043] netlink_sendmsg+0x8ba/0xbe0 [ 100.585226][ T5043] ? netlink_getsockopt+0x570/0x570 [ 100.590404][ T5043] ? aa_sock_msg_perm+0x94/0x150 [ 100.595323][ T5043] ? apparmor_socket_sendmsg+0x88/0x230 [ 100.600849][ T5043] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.606146][ T5043] ? security_socket_sendmsg+0x7c/0xa0 [ 100.611586][ T5043] ? netlink_getsockopt+0x570/0x570 [ 100.616769][ T5043] ____sys_sendmsg+0x5be/0x8f0 [ 100.621527][ T5043] ? __sys_sendmsg_sock+0x30/0x30 [ 100.626541][ T5043] ? import_iovec+0x6f/0xa0 [ 100.631032][ T5043] ___sys_sendmsg+0x236/0x2e0 [ 100.635697][ T5043] ? __sys_sendmsg+0x290/0x290 [ 100.640477][ T5043] __se_sys_sendmsg+0x1b7/0x2a0 [ 100.645314][ T5043] ? __x64_sys_sendmsg+0x80/0x80 [ 100.650234][ T5043] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.656207][ T5043] ? lockdep_hardirqs_on+0x94/0x140 [ 100.661395][ T5043] do_syscall_64+0x4c/0xa0 [ 100.665799][ T5043] ? clear_bhb_loop+0x30/0x80 [ 100.670456][ T5043] ? clear_bhb_loop+0x30/0x80 [ 100.675122][ T5043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.680997][ T5043] RIP: 0033:0x7f8a53f44159 [ 100.685396][ T5043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.704987][ T5043] RSP: 002b:00007f8a5219c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.713385][ T5043] RAX: ffffffffffffffda RBX: 00007f8a541cbfa0 RCX: 00007f8a53f44159 [ 100.721341][ T5043] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 100.729295][ T5043] RBP: 00007f8a53fdb03b R08: 0000000000000000 R09: 0000000000000000 [ 100.737251][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.745205][ T5043] R13: 00007f8a541cc038 R14: 00007f8a541cbfa0 R15: 00007fffdd51ac88 [ 100.753170][ T5043] [ 100.776094][ T1330] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.793177][ T5046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 100.816687][ T5046] 8021q: VLANs not supported on ip6tnl0 [ 100.830496][ T1330] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.850455][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 100.870422][ T1330] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.912379][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.928211][ T1330] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.970361][ T1330] pwc: recv_control_msg error -32 req 02 val 2100 [ 101.013248][ T13] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 101.030448][ T1330] pwc: recv_control_msg error -32 req 04 val 1500 [ 101.040093][ T13] usb 4-1: USB disconnect, device number 4 [ 101.095758][ T1330] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.165404][ T1330] pwc: recv_control_msg error -32 req 02 val 2400 [ 101.230310][ T1330] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.282859][ T1330] pwc: recv_control_msg error -32 req 02 val 2900 [ 101.340941][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 101.394088][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 101.570742][ T1330] pwc: recv_control_msg error -71 req 04 val 1100 [ 101.595550][ T1330] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.616205][ T1330] pwc: Registered as video103. [ 101.631809][ T1330] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 101.688969][ T1330] usb 2-1: USB disconnect, device number 4 [ 101.720828][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 101.771107][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 101.859436][ T5060] ODEBUG: Out of memory. ODEBUG disabled [ 101.965567][ T5079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 101.974786][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 101.987241][ T5079] 8021q: VLANs not supported on ip6tnl0 [ 102.052125][ T5081] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 102.634415][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 102.660941][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 102.761673][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 102.793807][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 102.819318][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.837401][ T5085] loop1: detected capacity change from 0 to 2048 [ 102.847316][ T4232] lan78xx: probe of 3-1:1.0 failed with error -71 [ 102.898168][ T4232] usb 3-1: USB disconnect, device number 5 [ 102.944959][ T4176] loop1: p1 < > p4 [ 102.960294][ T5089] loop5: detected capacity change from 0 to 7 [ 102.967031][ T4176] loop1: p4 size 8388608 extends beyond EOD, truncated [ 102.983638][ T4846] Dev loop5: unable to read RDB block 7 [ 102.989879][ T4846] loop5: unable to read partition table [ 103.006655][ T4846] loop5: partition table beyond EOD, truncated [ 103.018944][ T5085] loop1: p1 < > p4 [ 103.031900][ T5089] Dev loop5: unable to read RDB block 7 [ 103.038613][ T5085] loop1: p4 size 8388608 extends beyond EOD, truncated [ 103.053996][ T5089] loop5: unable to read partition table [ 103.059962][ T5089] loop5: partition table beyond EOD, truncated [ 103.115411][ T5089] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.272741][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 103.291354][ T4846] udevd[4846]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 103.381774][ T5101] binder: 5100:5101 ioctl c0306201 0 returned -14 [ 103.398126][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 103.401565][ T4846] udevd[4846]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 103.785104][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 103.808974][ T5111] 8021q: VLANs not supported on ip6tnl0 [ 104.221331][ T5122] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 105.052566][ T5128] loop5: detected capacity change from 0 to 7 [ 105.070920][ T4846] Dev loop5: unable to read RDB block 7 [ 105.076555][ T4846] loop5: unable to read partition table [ 105.092480][ T4846] loop5: partition table beyond EOD, truncated [ 105.119614][ T5128] Dev loop5: unable to read RDB block 7 [ 105.125539][ T5128] loop5: unable to read partition table [ 105.139200][ T5128] loop5: partition table beyond EOD, truncated [ 105.160528][ T5128] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.400185][ T4232] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 105.454390][ T5060] Set syz1 is full, maxelem 65536 reached [ 105.463817][ T4175] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 105.519718][ T5145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 105.594219][ T5151] device syzkaller1 entered promiscuous mode [ 105.810385][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.906712][ T5160] netlink: 'syz.2.327': attribute type 4 has an invalid length. [ 106.090324][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 106.220954][ T13] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 106.470830][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 106.500895][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.511520][ T13] usb 5-1: Product: syz [ 106.521228][ T13] usb 5-1: Manufacturer: syz [ 106.526584][ T13] usb 5-1: SerialNumber: syz [ 106.543584][ T13] usb 5-1: config 0 descriptor?? [ 106.612069][ T13] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 106.674296][ T4232] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.684319][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.697855][ T4232] usb 4-1: Product: syz [ 106.702362][ T4232] usb 4-1: Manufacturer: syz [ 106.706961][ T4232] usb 4-1: SerialNumber: syz [ 106.713225][ T4175] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.727613][ T5165] loop5: detected capacity change from 0 to 7 [ 106.735105][ T4232] usb 4-1: config 0 descriptor?? [ 106.740586][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.741282][ T5165] Dev loop5: unable to read RDB block 7 [ 106.748948][ T4175] usb 2-1: Product: syz [ 106.758517][ T4175] usb 2-1: Manufacturer: syz [ 106.761267][ T5165] loop5: unable to read partition table [ 106.763826][ T4175] usb 2-1: SerialNumber: syz [ 106.770417][ T5165] loop5: partition table beyond EOD, truncated [ 106.776084][ T4175] usb 2-1: config 0 descriptor?? [ 106.785523][ T5165] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 106.990281][ T4232] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.060204][ T4175] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.767805][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 107.778024][ T5182] 8021q: VLANs not supported on ip6tnl0 [ 108.298986][ T5188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.337969][ T5191] sg_write: data in/out 266204/136 bytes for SCSI command 0x0-- guessing data in; [ 108.337969][ T5191] program syz.2.341 not setting count and/or reply_len properly [ 108.720140][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.081133][ T21] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 109.090281][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.099793][ T21] usb 3-1: config 0 descriptor?? [ 109.141638][ T21] cp210x 3-1:0.0: cp210x converter detected [ 109.536016][ T5219] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.548546][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.559225][ T5219] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 109.567736][ T5219] netlink: 152 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.580322][ T21] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 109.584936][ T5219] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.637173][ T21] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.728624][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 109.738360][ T5229] 8021q: VLANs not supported on ip6tnl0 [ 109.832622][ T21] usb 3-1: USB disconnect, device number 6 [ 109.843670][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.856728][ T21] cp210x 3-1:0.0: device disconnected [ 110.106453][ T5242] netlink: 'syz.0.362': attribute type 4 has an invalid length. [ 110.220655][ T4175] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 110.333173][ T4175] usb 2-1: USB disconnect, device number 5 [ 110.690586][ T13] gspca_zc3xx: reg_w_i err -71 [ 110.710256][ T4232] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 110.730322][ T4232] usb 4-1: USB disconnect, device number 5 [ 110.730401][ T13] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 110.849559][ T13] usb 5-1: USB disconnect, device number 5 [ 110.868783][ T5247] binder: 5243:5247 ioctl 4018620d 0 returned -22 [ 110.887960][ T5250] device syzkaller0 entered promiscuous mode [ 110.901193][ T5246] netlink: 36 bytes leftover after parsing attributes in process `syz.3.365'. [ 110.922316][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 110.959154][ T5246] netlink: 'syz.3.365': attribute type 4 has an invalid length. [ 110.979204][ T5246] netlink: 152 bytes leftover after parsing attributes in process `syz.3.365'. [ 111.027397][ T5246] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 111.061468][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.138094][ T5246] syz.3.365 (5246) used greatest stack depth: 20096 bytes left [ 111.238043][ T5270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.331535][ T5280] binder: 5277:5280 ioctl 4018620d 0 returned -22 [ 111.440254][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.586434][ T5287] netlink: 'syz.1.378': attribute type 4 has an invalid length. [ 111.750379][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 112.060920][ T13] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 112.100426][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.145540][ T5289] ======================================================= [ 112.145540][ T5289] WARNING: The mand mount option has been deprecated and [ 112.145540][ T5289] and is ignored by this kernel. Remove the mand [ 112.145540][ T5289] option from the mount to silence this warning. [ 112.145540][ T5289] ======================================================= [ 112.180973][ T13] usb 5-1: Product: syz [ 112.185262][ T13] usb 5-1: Manufacturer: syz [ 112.189948][ T13] usb 5-1: SerialNumber: syz [ 112.193405][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.207025][ T13] usb 5-1: config 0 descriptor?? [ 112.211461][ T21] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.223499][ T5290] overlayfs: failed to clone lowerpath [ 112.229922][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.240299][ T21] usb 3-1: config 0 descriptor?? [ 112.266998][ T13] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 112.342690][ T5294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 112.431767][ T4231] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 112.445411][ T4231] Bluetooth: hci0: Injecting HCI hardware error event [ 112.457688][ T4203] Bluetooth: hci0: hardware error 0x00 [ 112.541812][ T5298] device syzkaller0 entered promiscuous mode [ 112.729375][ T5309] FAULT_INJECTION: forcing a failure. [ 112.729375][ T5309] name failslab, interval 1, probability 0, space 0, times 0 [ 112.772586][ T5309] CPU: 0 PID: 5309 Comm: syz.1.389 Not tainted syzkaller #0 [ 112.779918][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.789988][ T5309] Call Trace: [ 112.792075][ T21] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 112.793270][ T5309] [ 112.804608][ T5309] dump_stack_lvl+0x188/0x250 [ 112.809305][ T5309] ? show_regs_print_info+0x20/0x20 [ 112.813111][ T21] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input8 [ 112.814515][ T5309] ? load_image+0x410/0x410 [ 112.814552][ T5309] should_fail+0x383/0x4b0 [ 112.834702][ T5309] should_failslab+0x5/0x20 [ 112.839213][ T5309] slab_pre_alloc_hook+0x51/0xc0 [ 112.844164][ T5309] ? skb_clone+0x1bd/0x350 [ 112.848591][ T5309] kmem_cache_alloc+0x3d/0x280 [ 112.853366][ T5309] skb_clone+0x1bd/0x350 [ 112.857621][ T5309] __netlink_deliver_tap+0x3cb/0x7c0 [ 112.862935][ T5309] netlink_deliver_tap+0x16c/0x180 [ 112.868063][ T5309] netlink_unicast+0x759/0x940 [ 112.872843][ T5309] netlink_sendmsg+0x8ba/0xbe0 [ 112.877620][ T5309] ? netlink_getsockopt+0x570/0x570 [ 112.882822][ T5309] ? aa_sock_msg_perm+0x94/0x150 [ 112.887761][ T5309] ? apparmor_socket_sendmsg+0x88/0x230 [ 112.893315][ T5309] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 112.898606][ T5309] ? security_socket_sendmsg+0x7c/0xa0 [ 112.904073][ T5309] ? netlink_getsockopt+0x570/0x570 [ 112.909289][ T5309] ____sys_sendmsg+0x5be/0x8f0 [ 112.914072][ T5309] ? __sys_sendmsg_sock+0x30/0x30 [ 112.919110][ T5309] ? import_iovec+0x6f/0xa0 [ 112.923628][ T5309] ___sys_sendmsg+0x236/0x2e0 [ 112.928318][ T5309] ? __sys_sendmsg+0x290/0x290 [ 112.933127][ T5309] __se_sys_sendmsg+0x1b7/0x2a0 [ 112.938004][ T5309] ? __x64_sys_sendmsg+0x80/0x80 [ 112.942952][ T5309] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.948961][ T5309] ? lockdep_hardirqs_on+0x94/0x140 [ 112.954170][ T5309] do_syscall_64+0x4c/0xa0 [ 112.958590][ T5309] ? clear_bhb_loop+0x30/0x80 [ 112.963270][ T5309] ? clear_bhb_loop+0x30/0x80 [ 112.967962][ T5309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.973855][ T5309] RIP: 0033:0x7ff3c5b7b159 [ 112.978274][ T5309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.997883][ T5309] RSP: 002b:00007ff3c3dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.006321][ T5309] RAX: ffffffffffffffda RBX: 00007ff3c5e02fa0 RCX: 00007ff3c5b7b159 [ 113.014310][ T5309] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000005 [ 113.022288][ T5309] RBP: 00007ff3c5c1203b R08: 0000000000000000 R09: 0000000000000000 [ 113.030262][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.038255][ T5309] R13: 00007ff3c5e03038 R14: 00007ff3c5e02fa0 R15: 00007fff86848df8 [ 113.046256][ T5309] [ 113.084584][ T21] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 113.119449][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 113.121216][ T5324] binder: 5312:5324 ioctl c0306201 0 returned -14 [ 113.138003][ T5326] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 113.172772][ T5326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.393'. [ 113.205373][ T5326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 113.404646][ T5337] fuse: Bad value for 'group_id' [ 113.575246][ T5342] netlink: 'syz.3.395': attribute type 4 has an invalid length. [ 114.182351][ T21] usb 3-1: USB disconnect, device number 7 [ 114.225222][ T1330] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.322592][ T5351] gadgetfs: bound to dummy_udc driver [ 114.621924][ T5369] binder: BINDER_SET_CONTEXT_MGR already set [ 114.626099][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 114.637242][ T1330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.637673][ T5369] binder: 5368:5369 ioctl 4018620d 200000000040 returned -16 [ 114.671848][ T5372] netlink: 'syz.0.406': attribute type 4 has an invalid length. [ 114.679754][ T5373] binder: 5368:5373 ioctl c0306201 0 returned -14 [ 114.688004][ T5372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.406'. [ 114.710463][ T5372] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 114.860452][ T1330] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 114.879714][ T1330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.887862][ T1330] usb 2-1: Product: syz [ 114.892857][ T1330] usb 2-1: Manufacturer: syz [ 114.897466][ T1330] usb 2-1: SerialNumber: syz [ 115.043399][ T4175] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.081280][ T13] gspca_ov534_9: reg_r err -71 [ 115.087800][ T1330] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 115.198350][ T5387] netlink: 'syz.3.411': attribute type 4 has an invalid length. [ 115.411238][ T4175] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 115.446017][ T4175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.890315][ T4175] rc_core: IR keymap rc-rc6-mce not found [ 115.896065][ T4175] Registered IR keymap rc-empty [ 116.026961][ T5397] device syzkaller0 entered promiscuous mode [ 116.070624][ T5400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(9) [ 116.085871][ T13] gspca_ov534_9: Unknown sensor 0000 [ 116.085930][ T13] ov534_9: probe of 5-1:0.0 failed with error -22 [ 116.115875][ T13] usb 5-1: USB disconnect, device number 6 [ 116.175174][ T5402] binder: 5401:5402 ioctl c0306201 0 returned -14 [ 116.299252][ T5404] loop5: detected capacity change from 0 to 7 [ 116.322859][ T4179] Dev loop5: unable to read RDB block 7 [ 116.326382][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 116.328458][ T4179] loop5: unable to read partition table [ 116.338664][ T5409] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 116.352821][ T5409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.420'. [ 116.364216][ T5409] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.365493][ T4179] loop5: partition table beyond EOD, truncated [ 116.399029][ T5404] Dev loop5: unable to read RDB block 7 [ 116.405005][ T1330] gspca_mr97310a: reg read [21] error -110 [ 116.416810][ T1330] mr97310a: probe of 2-1:1.0 failed with error -110 [ 116.424833][ T5404] loop5: unable to read partition table [ 116.449420][ T5404] loop5: partition table beyond EOD, truncated [ 116.473935][ T5404] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.849343][ T5425] netlink: 'syz.3.424': attribute type 4 has an invalid length. [ 116.880115][ T4266] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.990378][ T4175] mceusb 3-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 117.130246][ T4266] usb 5-1: Using ep0 maxpacket: 16 [ 117.291300][ T4266] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.380478][ T4266] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 117.394827][ T4266] usb 5-1: config 9 has no interface number 0 [ 117.402319][ T4266] usb 5-1: config 9 interface 57 has no altsetting 0 [ 117.627053][ T5435] device syzkaller0 entered promiscuous mode [ 117.640210][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 117.645764][ T4266] usb 5-1: string descriptor 0 read error: -22 [ 117.655614][ T4266] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 117.664783][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.675348][ T5439] netlink: 'syz.0.431': attribute type 4 has an invalid length. [ 117.689297][ T5439] netlink: 152 bytes leftover after parsing attributes in process `syz.0.431'. [ 117.698374][ T5439] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 117.748415][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 117.792575][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 117.804340][ T13] usb 2-1: USB disconnect, device number 6 [ 117.841704][ T4175] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver (0471:0608) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 117.864610][ T5450] loop1: detected capacity change from 0 to 2048 [ 117.878217][ T4175] input: Media Center Ed. eHome Infrared Remote Transceiver (0471:0608) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input9 [ 117.920182][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 117.925005][ T5446] loop5: detected capacity change from 0 to 7 [ 117.936968][ T5330] loop1: p1 < > p4 [ 117.943585][ T5330] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.959060][ T4179] Dev loop5: unable to read RDB block 7 [ 117.965165][ T4179] loop5: unable to read partition table [ 117.976762][ T5450] loop1: p1 < > p4 [ 117.980243][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 117.987794][ T5450] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.993677][ T4179] loop5: partition table beyond EOD, truncated [ 118.007921][ T5446] Dev loop5: unable to read RDB block 7 [ 118.018122][ T5446] loop5: unable to read partition table [ 118.026268][ T5446] loop5: partition table beyond EOD, truncated [ 118.033460][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 118.044349][ T5446] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.076110][ T5450] EXT4-fs (loop1p1): unable to read superblock [ 118.230197][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 118.321562][ T5463] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 118.909675][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.029169][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.056486][ T5471] netlink: 'syz.0.444': attribute type 2 has an invalid length. [ 119.080268][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.091264][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 119.117953][ T5478] ------------[ cut here ]------------ [ 119.127628][ T5478] kernel BUG at net/phonet/socket.c:213! [ 119.133635][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.156432][ T5478] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 119.162519][ T5478] CPU: 1 PID: 5478 Comm: syz.0.444 Not tainted syzkaller #0 [ 119.169801][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.179869][ T5478] RIP: 0010:pn_socket_sendmsg+0x223/0x230 [ 119.185609][ T5478] Code: 41 5f 5d c3 e8 3e ab b0 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 57 74 ae f8 e9 02 ff ff ff e8 9d 46 69 f8 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 [ 119.191829][ T5477] device syzkaller0 entered promiscuous mode [ 119.205213][ T5478] RSP: 0018:ffffc900031cfc40 EFLAGS: 00010287 [ 119.205234][ T5478] RAX: ffffffff890fc903 RBX: 0000000000000000 RCX: 0000000000080000 [ 119.205245][ T5478] RDX: ffffc9000e0ea000 RSI: 0000000000000483 RDI: 0000000000000484 [ 119.205255][ T5478] RBP: ffffc900031cfcf0 R08: ffff88813fe23207 R09: 1ffff11027fc4640 [ 119.205267][ T5478] R10: dffffc0000000000 R11: ffffed1027fc4641 R12: dffffc0000000000 [ 119.214448][ T5479] netlink: 'syz.2.442': attribute type 4 has an invalid length. [ 119.217273][ T5478] R13: ffff88807537b000 R14: ffff888055488c80 R15: 1ffff92000639f8c [ 119.217289][ T5478] FS: 00007f20fce806c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 119.225402][ T5479] netlink: 152 bytes leftover after parsing attributes in process `syz.2.442'. [ 119.233206][ T5478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.233222][ T5478] CR2: 0000200000002280 CR3: 000000005f3a0000 CR4: 00000000003506e0 [ 119.233236][ T5478] Call Trace: [ 119.233242][ T5478] [ 119.251781][ T5479] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.256750][ T5478] ? pn_socket_ioctl+0x340/0x340 [ 119.323441][ T5478] ? apparmor_socket_sendmsg+0x88/0x230 [ 119.328983][ T5478] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 119.334250][ T5478] ? security_socket_sendmsg+0x7c/0xa0 [ 119.339691][ T5478] __sys_sendto+0x46d/0x620 [ 119.344177][ T5478] ? __ia32_sys_getpeername+0x80/0x80 [ 119.349535][ T5478] ? lock_chain_count+0x20/0x20 [ 119.354371][ T5478] __x64_sys_sendto+0xda/0xf0 [ 119.359029][ T5478] do_syscall_64+0x4c/0xa0 [ 119.363424][ T5478] ? clear_bhb_loop+0x30/0x80 [ 119.368087][ T5478] ? clear_bhb_loop+0x30/0x80 [ 119.372745][ T5478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.378620][ T5478] RIP: 0033:0x7f20fec0998e [ 119.383015][ T5478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.402601][ T5478] RSP: 002b:00007f20fce7ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 119.410996][ T5478] RAX: ffffffffffffffda RBX: 00007f20fce806c0 RCX: 00007f20fec0998e [ 119.418947][ T5478] RDX: 0000000000000020 RSI: 00007f20fce7f000 RDI: 0000000000000008 [ 119.426900][ T5478] RBP: 0000000000000000 R08: 00007f20fce7ef04 R09: 000000000000000c [ 119.434850][ T5478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 119.442804][ T5478] R13: 00007f20fce7ef58 R14: 00007f20fce7f000 R15: 0000000000000000 [ 119.450760][ T5478] [ 119.453774][ T5478] Modules linked in: [ 119.459294][ T4266] video4linux radio48: keene_cmd_set failed (-71) [ 119.467126][ T5478] ---[ end trace 54b69622697eba3b ]--- [ 119.472841][ T4266] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 119.480015][ T5478] RIP: 0010:pn_socket_sendmsg+0x223/0x230 [ 119.485876][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.492631][ T5478] Code: 41 5f 5d c3 e8 3e ab b0 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 57 74 ae f8 e9 02 ff ff ff e8 9d 46 69 f8 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 [ 119.521808][ T4266] usb 5-1: USB disconnect, device number 7 [ 119.553419][ T5478] RSP: 0018:ffffc900031cfc40 EFLAGS: 00010287 [ 119.559532][ T5478] RAX: ffffffff890fc903 RBX: 0000000000000000 RCX: 0000000000080000 [ 119.567945][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.570423][ T5478] RDX: ffffc9000e0ea000 RSI: 0000000000000483 RDI: 0000000000000484 [ 119.583345][ T5478] RBP: ffffc900031cfcf0 R08: ffff88813fe23207 R09: 1ffff11027fc4640 [ 119.591361][ T5478] R10: dffffc0000000000 R11: ffffed1027fc4641 R12: dffffc0000000000 [ 119.599370][ T5478] R13: ffff88807537b000 R14: ffff888055488c80 R15: 1ffff92000639f8c [ 119.608018][ T5478] FS: 00007f20fce806c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 119.617990][ T5478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.620996][ T4175] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 119.625870][ T5478] CR2: 000000110c3f5d8d CR3: 000000005f3a0000 CR4: 00000000003506f0 [ 119.639166][ T5478] Kernel panic - not syncing: Fatal exception [ 119.645419][ T5478] Kernel Offset: disabled [ 119.649734][ T5478] Rebooting in 86400 seconds..