last executing test programs: 2.004959688s ago: executing program 4 (id=394): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000001800)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000886400050004ee0b00218ddbba9b37242d37a518fc9c5be50eaf07c36505", 0x34}, {&(0x7f00000002c0)="86", 0x1}], 0x2}, 0x4) 1.94442295s ago: executing program 4 (id=396): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/241) 1.914484432s ago: executing program 0 (id=397): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) landlock_restrict_self(0xffffffffffffffff, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) 1.853641905s ago: executing program 0 (id=398): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.791528918s ago: executing program 0 (id=400): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@iter={&(0x7f0000000300), 0x10}}, 0x20) 1.73336249s ago: executing program 0 (id=402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="06", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c) 1.702888702s ago: executing program 0 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800098008"], 0x34}}, 0x0) 1.645047895s ago: executing program 0 (id=409): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x8, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) 1.641935065s ago: executing program 1 (id=410): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x102, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 1.369713817s ago: executing program 4 (id=415): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x6}, 0x67, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x45}, 0x0, 0x3, 0x1, 0xb7, 0x0, 0x8001, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.346298218s ago: executing program 3 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x254, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x23c, 0x1, 0x0, 0x1, [@nested={0x238, 0x75, 0x0, 0x1, [@nested={0x234, 0x80, 0x0, 0x1, [@nested={0x230, 0x129, 0x0, 0x1, [@generic="f36c7e96e25bbcaae6758c85747b48c9955b28366c5f3162a4cfbd69c939e07f97797c405f355a624c32ab8512def715f8baa0c0c2990f3653e0d8b7be36ddac4f80cd5f49b2b9e0f7e2a627be2b0aa78abd95e7a837ef195cda251ee8002d49f8745a72969d7e8765a7009661ddde8362212a7549ac8ed4e9140fd2f819", @generic="bc6abb6d8ae4a0dbf82ca6552885bc31b040105d49d5c19d85b656e29652e07a29c5", @nested={0x18b, 0x57, 0x0, 0x1, [@generic="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", @generic]}]}]}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 1.345027098s ago: executing program 2 (id=418): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x40) 1.29739521s ago: executing program 2 (id=419): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x16, [0x0, 0x0, 0xffffffff, 0x40000, 0x1, 0x2, 0x149a8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x1, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x200080, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1fe, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x80000005, 0xfffffffd, 0x4000000, 0xfffffffd, 0xfffffffc, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x1000000, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffa, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x7, 0xe, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.181747876s ago: executing program 2 (id=420): syz_usb_connect(0x3, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1.118730919s ago: executing program 3 (id=421): getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000000080)) 1.08755924s ago: executing program 3 (id=422): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xf073, 0x6, 0x2, 0x4}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x1009d8, 0x5, 0x1, 0x9, 0x8005, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7fd, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x53, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x3, 0xe, 0x341a]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 925.727738ms ago: executing program 3 (id=423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000002000000140001800600410002000000"], 0x28}}, 0x0) 925.112668ms ago: executing program 4 (id=424): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_clone(0x8800, &(0x7f0000000000)="03f95fc235d6be6f7b2d62bc04f967d6", 0x10, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="5d53ca199a65eede360a9c25a139862da544d45ac4e37a28097ffe56027fb3cf6a4de66a0378d3782e59824ca05bff796d7fdf655d209cabe7f7c7d1b84997cc62930ca76a855f1388e097a0ce752ea8c9053ae6aff250ecd51159f3b34469f786c2f83a91f5655f3d7a4e03d05b03b756bae84110349163212fa73efc3de968805976c4b9b66fcd6a380c79aa6d4d3e2642b94fded47e0d27e8560ff29db2a3be5ae2c0d1bb83fab9e8") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @private0, 0x6}, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x9}, 0xffffffffffffffff, 0x2}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x6e8db8e9c41569b8) ioctl$UI_DEV_CREATE(r5, 0x5501) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) unshare(0xe060400) 789.226224ms ago: executing program 1 (id=425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000140)="815e97e2d8ad83", 0x7}], 0x1}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, 0x0, &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba", 0x10002, 0x4011, 0x0, 0x0) 757.126595ms ago: executing program 1 (id=426): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff024}, {0x6, 0x2, 0x0, 0x6}]}, 0x10) 661.82831ms ago: executing program 1 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="1800038004000100080004"], 0x38}}, 0x0) 661.49413ms ago: executing program 2 (id=428): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) 661.32051ms ago: executing program 1 (id=429): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 661.0193ms ago: executing program 2 (id=430): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) r4 = socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC, @ANYRES8=r0, @ANYRES16=r2, @ANYRES64=r0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x3e}, {@loopback, 0x4e23, 0x10000, 0x1cb, 0x12d65, 0x90c}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f00000000c0)) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7a7241, 0x0) 524.122696ms ago: executing program 1 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0xc0}}, 0x0) 111.041295ms ago: executing program 3 (id=432): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e21, 0x0, @mcast1, 0x80000}}, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}}, 0x108) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') write$tun(0xffffffffffffffff, &(0x7f0000000340)={@void, @void, @llc={@snap={0x0, 0x1, '`', "0fa813", 0x16, "512c0501f4a2bbc560cf4675ce72efd89ccd33d6ddfe47a78c4f50fc31178639a1a11c194fbca9325ae2bc92ccb22d792fea06fa2a1234a797ab98a65a73a8c1b0ee"}}}, 0x4a) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_open_pts(0xffffffffffffffff, 0x141601) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={0xffffffffffffffff, 0x0}, 0x20) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) setuid(0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) 49.668208ms ago: executing program 2 (id=433): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x20, 0x70bda8, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x7}, {0x4, 0x10}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0xc8a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 40.998868ms ago: executing program 4 (id=434): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) 16.16966ms ago: executing program 4 (id=435): syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x105100) 0s ago: executing program 3 (id=436): r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4096, 0x1000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4004}}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x279, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x1000004, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x144, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1, 0x2000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 29.077846][ T4315] cgroup: Unknown subsys name 'net' [ 29.305653][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.582084][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.851269][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.853328][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.855145][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.857180][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.858925][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.860039][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.860384][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.861667][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.862942][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.865679][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.865716][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.867102][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.869745][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.871334][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.871476][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.876654][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.878079][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.879753][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.881158][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.882418][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.884161][ T4343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.884308][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.885586][ T4343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.886936][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.919118][ T4346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.920437][ T4346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.923011][ T4346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.924247][ T4346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.925654][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.927049][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.016101][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 31.019935][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 31.062839][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 31.094583][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.096053][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.097717][ T4333] device bridge_slave_0 entered promiscuous mode [ 31.102808][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 31.110636][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.111988][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.113758][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.115360][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.116729][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.118230][ T4333] device bridge_slave_1 entered promiscuous mode [ 31.130721][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.131970][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.133954][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.137505][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 31.144966][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.146174][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.148124][ T4327] device bridge_slave_0 entered promiscuous mode [ 31.152387][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.155302][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.162708][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.164673][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.166319][ T4327] device bridge_slave_1 entered promiscuous mode [ 31.171493][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.185705][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.190647][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.192028][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.193937][ T4336] device bridge_slave_0 entered promiscuous mode [ 31.198641][ T4328] team0: Port device team_slave_0 added [ 31.204794][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.206133][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.207759][ T4336] device bridge_slave_1 entered promiscuous mode [ 31.210374][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.212595][ T4328] team0: Port device team_slave_1 added [ 31.224578][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.225857][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.227343][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.230019][ T4333] team0: Port device team_slave_0 added [ 31.232173][ T4333] team0: Port device team_slave_1 added [ 31.236589][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.240084][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.241399][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.242907][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.244864][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.246185][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.250698][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.253916][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.255140][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.259831][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.267029][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.277084][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.278421][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.282913][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.287883][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.292875][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.298120][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.301739][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.302899][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.307962][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.315744][ T4327] team0: Port device team_slave_0 added [ 31.317867][ T4327] team0: Port device team_slave_1 added [ 31.325177][ T4336] team0: Port device team_slave_0 added [ 31.332047][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.334177][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.338777][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.341559][ T4339] team0: Port device team_slave_0 added [ 31.344115][ T4336] team0: Port device team_slave_1 added [ 31.348127][ T4339] team0: Port device team_slave_1 added [ 31.349524][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.350771][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.358042][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.404232][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.443191][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.493041][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.494438][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.498942][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.501670][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.502878][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.508010][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.513576][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.514796][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.519159][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.564139][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.633212][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.673062][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.674515][ T4333] Cannot create hsr debugfs directory [ 31.676417][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.677570][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.682194][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.743938][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.793224][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.832993][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.834332][ T4327] Cannot create hsr debugfs directory [ 31.894035][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.933279][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.983031][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.984319][ T4339] Cannot create hsr debugfs directory [ 32.034099][ T4336] device hsr_slave_0 entered promiscuous mode [ 32.083168][ T4336] device hsr_slave_1 entered promiscuous mode [ 32.133066][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.134421][ T4336] Cannot create hsr debugfs directory [ 32.239497][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.285032][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.324478][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.370096][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.424521][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.484190][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.535015][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.574118][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.614700][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.654033][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.697185][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.734697][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.774542][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.815252][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.855808][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.892103][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.893280][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 32.894454][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 32.968069][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.973226][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 32.974389][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 32.975473][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 32.985574][ T4336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.007080][ T4336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.034317][ T4336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.086725][ T4336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.137456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.139680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.143411][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.155182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.156912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.158617][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.159923][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.167347][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.169489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.171295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.174246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.175896][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.177168][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.189164][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.197998][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.200741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.202223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.211870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.217119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.218960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.220763][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.222178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.224521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.228156][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.230000][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.232642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.236986][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.246264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.248655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.250156][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.251348][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.252766][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.257432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.259405][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.260767][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.262276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.265084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.266790][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.267974][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.269357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.270947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.279798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.281536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.284080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.285723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.287370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.288984][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.290198][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.305954][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.307395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.309262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.310968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.312642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.315050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.316711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.322375][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.328996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.330710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.332490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.334844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.336622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.338614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.340191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.346102][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.348125][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.353477][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.365916][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.367684][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.369372][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.370816][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.372414][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.379469][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.381971][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.388585][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.390163][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.391963][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.406248][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.407766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.409541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.411140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.412855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.417377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.419664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.421154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.422856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.435804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.437537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.439212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.440868][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.442187][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.454281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.456604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.458094][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.459385][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.460943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.462720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.468636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.470558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.472311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.475170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.477027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.478574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.487585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.489411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.491056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.492785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.497712][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.499119][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.501293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.504150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.505681][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.506980][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.508529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.511523][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.513832][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.516863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.518968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.520706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.530615][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.534490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.535995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.541582][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.543517][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.545144][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.546713][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.548003][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.549800][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.555370][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.572636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.574665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.576303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.578010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.579655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.581072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.582489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.585485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.595190][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.599787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.601618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.604818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.609978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.611787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.614788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.616964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.618765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.620399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.622003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.628588][ T4333] device veth0_vlan entered promiscuous mode [ 33.631389][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.635820][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.638087][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.639617][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.641212][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.642807][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.647815][ T4327] device veth0_vlan entered promiscuous mode [ 33.651723][ T4327] device veth1_vlan entered promiscuous mode [ 33.665180][ T4328] device veth0_vlan entered promiscuous mode [ 33.668924][ T4328] device veth1_vlan entered promiscuous mode [ 33.672817][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.674742][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.676327][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.677947][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.679501][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.681258][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.682744][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.694808][ T4327] device veth0_macvtap entered promiscuous mode [ 33.696686][ T4333] device veth1_vlan entered promiscuous mode [ 33.699585][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.701283][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.702783][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.707320][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.709071][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.710502][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.711941][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.715495][ T4327] device veth1_macvtap entered promiscuous mode [ 33.720680][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.722017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.723977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.725738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.737781][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.739416][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.740932][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.745914][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.749141][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.751996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.754573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.759840][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.761202][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.768301][ T4333] device veth0_macvtap entered promiscuous mode [ 33.770894][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.772534][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.775428][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.777664][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.779318][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.780942][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.782497][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.788763][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.790699][ T4333] device veth1_macvtap entered promiscuous mode [ 33.794533][ T4328] device veth0_macvtap entered promiscuous mode [ 33.804954][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.806677][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.808585][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.810277][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.821458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.823488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.825018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.826519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.828088][ T4339] device veth0_vlan entered promiscuous mode [ 33.832717][ T4328] device veth1_macvtap entered promiscuous mode [ 33.846325][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.848172][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.852226][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.856655][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.858261][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.859904][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.869079][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.870823][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.872458][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.876195][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.878943][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.880416][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.882367][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.885058][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.890576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.892480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.895367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.897088][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.904696][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.906566][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.908217][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.910015][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.912262][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.914844][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.916492][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.918095][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.919624][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.925918][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.927274][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.929069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.930846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.932491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.942200][ T4339] device veth1_vlan entered promiscuous mode [ 33.948286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.949919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.951688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.956745][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.958379][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.959922][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.961437][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.975317][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.976743][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.997032][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.998770][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.000362][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.001827][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.008040][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.009576][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.014738][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.016261][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.034819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.040225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.042034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.045109][ T4336] device veth0_vlan entered promiscuous mode [ 34.047083][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.048475][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.054411][ T4339] device veth0_macvtap entered promiscuous mode [ 34.057218][ T4339] device veth1_macvtap entered promiscuous mode [ 34.061395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.062941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.066000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.072413][ T4336] device veth1_vlan entered promiscuous mode [ 34.077676][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.079599][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.081311][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.083899][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.085683][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.087531][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.089990][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.091281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.096433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.098193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.106377][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.107749][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.108987][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.146813][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.148280][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.150172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.153411][ T4414] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 34.156174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.161729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.164343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.166737][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.168911][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.170689][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.172579][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.180980][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.182917][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.186316][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.187627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.189764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.193867][ T4412] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 34.198836][ T4336] device veth0_macvtap entered promiscuous mode [ 34.201644][ T4336] device veth1_macvtap entered promiscuous mode [ 34.210426][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.212333][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.214748][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.216224][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.286345][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.288306][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.291833][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.306646][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.308449][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.310251][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.311942][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.314028][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.316566][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.322254][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.327546][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.328921][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.330800][ T4418] device bridge_slave_0 left promiscuous mode [ 34.332320][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.385588][ T4418] device bridge_slave_1 left promiscuous mode [ 34.386884][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.435202][ T4418] bond0: (slave bond_slave_0): Releasing backup interface [ 34.476442][ T4418] bond0: (slave bond_slave_1): Releasing backup interface [ 34.523500][ T4418] team0: Port device team_slave_0 removed [ 34.530344][ T4418] team0: Port device team_slave_1 removed [ 34.531844][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.533604][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.535492][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.536832][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.541611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.543352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.544858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.563049][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.564951][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.566486][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.568151][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.569957][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.571824][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.576017][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.577449][ T4419] team0: Mode changed to "broadcast" [ 34.580336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.582863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.594062][ T4336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.607397][ T4336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.609055][ T4336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.610496][ T4336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.625931][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.627393][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.630665][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.680278][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.681819][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.688332][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.704647][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.706075][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.712387][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.718004][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.719501][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.720986][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.760983][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.762559][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.765007][ T4433] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 34.766323][ T4433] netlink: 'syz.4.5': attribute type 6 has an invalid length. [ 34.769318][ T4433] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.770884][ T4433] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.772334][ T4433] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.774005][ T4433] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.906651][ T4435] device syzkaller0 entered promiscuous mode [ 34.935737][ T4382] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.973161][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 34.973765][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 35.015482][ T4438] tipc: Started in network mode [ 35.016507][ T4438] tipc: Node identity ac1414aa, cluster identity 4711 [ 35.017932][ T4438] tipc: New replicast peer: 172.20.20.187 [ 35.023671][ T4438] tipc: Enabled bearer , priority 10 [ 35.053493][ T4343] Bluetooth: hci2: command 0x041b tx timeout [ 35.054547][ T4343] Bluetooth: hci4: command 0x041b tx timeout [ 35.055616][ T4343] Bluetooth: hci3: command 0x041b tx timeout [ 35.123034][ T4382] usb 1-1: Using ep0 maxpacket: 32 [ 35.126045][ T4382] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 35.127610][ T4382] usb 1-1: config 164 has no interface number 0 [ 35.128767][ T4382] usb 1-1: config 164 interface 195 has no altsetting 0 [ 35.132162][ T4382] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 35.134057][ T4382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.135683][ T4382] usb 1-1: Product: syz [ 35.136581][ T4382] usb 1-1: Manufacturer: syz [ 35.137454][ T4382] usb 1-1: SerialNumber: syz [ 35.151859][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 35.316445][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.358625][ T4382] usb 1-1: USB disconnect, device number 2 [ 35.459503][ T4450] batman_adv: batadv0: Adding interface: syzkaller0 [ 35.460985][ T4450] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.469022][ T4450] batman_adv: batadv0: Interface activated: syzkaller0 [ 35.765929][ T4449] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 35.794251][ T4449] batman_adv: batadv0: Removing interface: syzkaller0 [ 35.896143][ T4454] device syzkaller0 entered promiscuous mode [ 35.920445][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.923312][ T4329] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.951294][ T4454] tipc: Started in network mode [ 35.952275][ T4454] tipc: Node identity 7ee711bbaffa, cluster identity 4711 [ 35.958628][ T4454] tipc: Enabled bearer , priority 0 [ 36.014223][ T4453] tipc: Resetting bearer [ 36.104699][ T4453] tipc: Disabling bearer [ 36.112504][ T4382] tipc: Node number set to 2886997162 [ 36.252237][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 36.413228][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.598068][ T7] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 36.599651][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.600975][ T7] usb 1-1: Product: syz [ 36.601644][ T7] usb 1-1: Manufacturer: syz [ 36.602324][ T4479] loop1: detected capacity change from 0 to 8192 [ 36.602383][ T7] usb 1-1: SerialNumber: syz [ 36.607684][ T7] usb 1-1: config 0 descriptor?? [ 36.610676][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 36.615595][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 36.638192][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 36.815141][ T7] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 36.818476][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 36.820660][ T7] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 36.822303][ T7] usb 1-1: media controller created [ 36.826302][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 36.841115][ T7] DVB: Unable to find symbol dib7000p_attach() [ 36.842260][ T7] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 36.844543][ T7] Registered IR keymap rc-dib0700-rc5 [ 37.017123][ T7] dib0700: ir protocol setup failed [ 37.018258][ T7] dvb-usb: could not initialize remote control. [ 37.019321][ T7] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 37.023468][ T7] usb 1-1: USB disconnect, device number 3 [ 37.035792][ T7] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 37.053018][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 37.063734][ T4338] Bluetooth: hci0: command 0x040f tx timeout [ 37.143824][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 37.143841][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 37.144987][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 37.162037][ T4486] loop4: detected capacity change from 0 to 128 [ 37.167746][ T4488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 37.168367][ T4486] FAT-fs (loop4): Directory bread(block 524322) failed [ 37.170790][ T4486] FAT-fs (loop4): Directory bread(block 524323) failed [ 37.171986][ T4486] FAT-fs (loop4): Directory bread(block 524324) failed [ 37.187672][ T4486] FAT-fs (loop4): Directory bread(block 524325) failed [ 37.189090][ T4486] FAT-fs (loop4): Directory bread(block 524326) failed [ 37.190374][ T4486] FAT-fs (loop4): Directory bread(block 524327) failed [ 37.191556][ T4486] FAT-fs (loop4): Directory bread(block 524328) failed [ 37.193395][ T4486] FAT-fs (loop4): Directory bread(block 524329) failed [ 37.228593][ T4486] FAT-fs (loop4): Directory bread(block 524322) failed [ 37.229818][ T4486] FAT-fs (loop4): Directory bread(block 524323) failed [ 37.407812][ T4491] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3944. macoff=96 [ 37.631017][ T4496] FAULT_INJECTION: forcing a failure. [ 37.631017][ T4496] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.634169][ T4496] CPU: 0 PID: 4496 Comm: syz.0.32 Not tainted syzkaller #0 [ 37.635548][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.637517][ T4496] Call trace: [ 37.638105][ T4496] dump_backtrace+0x1c4/0x1f0 [ 37.638903][ T4496] show_stack+0x2c/0x3c [ 37.639595][ T4496] __dump_stack+0x30/0x40 [ 37.640308][ T4496] dump_stack_lvl+0xf4/0x15c [ 37.641143][ T4496] dump_stack+0x1c/0x5c [ 37.641891][ T4496] should_fail_ex+0x3cc/0x524 [ 37.642767][ T4496] should_fail+0x14/0x24 [ 37.643563][ T4496] should_fail_usercopy+0x20/0x30 [ 37.644501][ T4496] copy_from_sockptr+0x5c/0x198 [ 37.645412][ T4496] do_ipt_set_ctl+0x544/0xb84 [ 37.646298][ T4496] nf_setsockopt+0x260/0x280 [ 37.647181][ T4496] ip_setsockopt+0x124/0x134 [ 37.648049][ T4496] udp_setsockopt+0xa4/0xbc [ 37.648863][ T4496] sock_common_setsockopt+0xb0/0xcc [ 37.649824][ T4496] __sys_setsockopt+0x2fc/0x50c [ 37.650715][ T4496] __arm64_sys_setsockopt+0xc0/0xdc [ 37.651630][ T4496] invoke_syscall+0x98/0x290 [ 37.652438][ T4496] el0_svc_common+0x13c/0x258 [ 37.653271][ T4496] do_el0_svc+0x5c/0x134 [ 37.654073][ T4496] el0_svc+0x58/0x128 [ 37.654829][ T4496] el0t_64_sync_handler+0x84/0xf0 [ 37.655779][ T4496] el0t_64_sync+0x18c/0x190 [ 37.744466][ T4501] FAULT_INJECTION: forcing a failure. [ 37.744466][ T4501] name failslab, interval 1, probability 0, space 0, times 1 [ 37.746598][ T4501] CPU: 0 PID: 4501 Comm: syz.0.34 Not tainted syzkaller #0 [ 37.747759][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.749497][ T4501] Call trace: [ 37.750094][ T4501] dump_backtrace+0x1c4/0x1f0 [ 37.750948][ T4501] show_stack+0x2c/0x3c [ 37.751703][ T4501] __dump_stack+0x30/0x40 [ 37.752492][ T4501] dump_stack_lvl+0xf4/0x15c [ 37.753292][ T4501] dump_stack+0x1c/0x5c [ 37.754072][ T4501] should_fail_ex+0x3cc/0x524 [ 37.754976][ T4501] __should_failslab+0xc0/0x11c [ 37.755870][ T4501] should_failslab+0x10/0x28 [ 37.756713][ T4501] __kmem_cache_alloc_node+0x7c/0x318 [ 37.757700][ T4501] __kmalloc_node+0xc8/0x184 [ 37.758553][ T4501] memcg_alloc_slab_cgroups+0x90/0x164 [ 37.759564][ T4501] slab_post_alloc_hook+0xc0/0x430 [ 37.760467][ T4501] kmem_cache_alloc+0x234/0x310 [ 37.761353][ T4501] sk_prot_alloc+0x60/0x1e8 [ 37.762186][ T4501] sk_alloc+0x44/0x3a0 [ 37.762933][ T4501] inet6_create+0x6f4/0xf9c [ 37.763751][ T4501] __sock_create+0x448/0x8a8 [ 37.764626][ T4501] __sys_socket+0xc0/0x1b0 [ 37.765499][ T4501] __arm64_sys_socket+0x7c/0x94 [ 37.766461][ T4501] invoke_syscall+0x98/0x290 [ 37.767382][ T4501] el0_svc_common+0x13c/0x258 [ 37.768321][ T4501] do_el0_svc+0x5c/0x134 [ 37.769179][ T4501] el0_svc+0x58/0x128 [ 37.769992][ T4501] el0t_64_sync_handler+0x84/0xf0 [ 37.771027][ T4501] el0t_64_sync+0x18c/0x190 [ 38.133087][ T4380] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.200697][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.202448][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.313392][ T4510] fuse: Unknown parameter '00000000000000000004' [ 38.326547][ T4380] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 38.328413][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.329956][ T4380] usb 1-1: Product: syz [ 38.330738][ T4380] usb 1-1: Manufacturer: syz [ 38.331568][ T4380] usb 1-1: SerialNumber: syz [ 38.742438][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 38.841637][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 39.143387][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 39.213777][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 39.214033][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 39.215090][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 39.593729][ T4517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 39.595112][ T4517] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 39.598635][ T4517] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 39.600166][ T4517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 39.601283][ T4517] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 39.603919][ T4517] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 39.605296][ T4517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 39.606382][ T4517] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 39.608297][ T4517] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 39.609669][ T4517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 39.610903][ T4517] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 39.612483][ T4517] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 39.617175][ T4517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 39.618354][ T4517] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 39.619804][ T4517] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 39.621587][ T4534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.625298][ T4534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.647452][ T4545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.51'. [ 39.687432][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.689285][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.952031][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 40.155392][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 40.157272][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 40.158062][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 40.161764][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 40.166952][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 40.172788][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 40.175819][ T4556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.177457][ T4556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.181862][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 40.189127][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 40.191928][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 40.195113][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 40.197387][ T4380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 40.223646][ T4380] lan78xx: probe of 1-1:1.0 failed with error -71 [ 40.229584][ T4380] usb 1-1: USB disconnect, device number 4 [ 40.407703][ T4567] input: syz1 as /devices/virtual/input/input3 [ 40.460645][ T4573] input: syz1 as /devices/virtual/input/input4 [ 40.688606][ T4580] device syzkaller0 entered promiscuous mode [ 40.813117][ T4335] Bluetooth: hci0: command 0x0c1a tx timeout [ 41.390344][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 41.478543][ T4626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.481100][ T4626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.623084][ T4335] Bluetooth: hci3: command 0x0c1a tx timeout [ 41.624407][ T4335] Bluetooth: hci2: command 0x0c1a tx timeout [ 41.625385][ T4335] Bluetooth: hci1: command 0x0c1a tx timeout [ 41.693111][ T4343] Bluetooth: hci4: command 0x0c1a tx timeout [ 42.007923][ T4645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.009681][ T4645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.012526][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 42.418596][ T4647] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 42.426577][ T4647] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 42.508212][ T4656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.511806][ T4656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.514359][ T4656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 42.893247][ T4335] Bluetooth: hci0: command 0x0406 tx timeout [ 42.955324][ T4380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.163098][ T4380] usb 1-1: Using ep0 maxpacket: 32 [ 43.168252][ T4380] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 43.171622][ T4380] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 43.173556][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.175077][ T4380] usb 1-1: Product: syz [ 43.175802][ T4380] usb 1-1: Manufacturer: syz [ 43.177533][ T4380] usb 1-1: SerialNumber: syz [ 43.192788][ T4380] usb 1-1: config 0 descriptor?? [ 43.197970][ T4380] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 43.200710][ T4380] dvb-usb: bulk message failed: -22 (2/0) [ 43.209735][ T4380] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 43.214644][ T4380] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 43.217199][ T4380] usb 1-1: media controller created [ 43.226486][ T4380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 43.241500][ T4380] usb 1-1: selecting invalid altsetting 7 [ 43.242752][ T4380] cxusb: set interface failed [ 43.244046][ T4380] dvb-usb: bulk message failed: -22 (1/0) [ 43.281373][ T4380] DVB: Unable to find symbol lgdt330x_attach() [ 43.282656][ T4380] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 43.287640][ T4380] Registered IR keymap rc-dvico-portable [ 43.290211][ T4380] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 43.294835][ T4380] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 43.305604][ T4380] dvb-usb: schedule remote query interval to 100 msecs. [ 43.315287][ T4380] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 43.401007][ T4662] cxusb: i2c wr: len=79 is too big! [ 43.401007][ T4662] [ 43.403740][ T4379] usb 1-1: USB disconnect, device number 5 [ 43.495721][ T4379] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 43.665918][ T4725] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 43.685146][ T4725] Zero length message leads to an empty skb [ 43.693091][ T4343] Bluetooth: hci1: command 0x0406 tx timeout [ 43.694202][ T4343] Bluetooth: hci2: command 0x0406 tx timeout [ 43.695295][ T4343] Bluetooth: hci3: command 0x0406 tx timeout [ 43.773215][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 43.866199][ T4763] net_ratelimit: 2 callbacks suppressed [ 43.866209][ T4763] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.065984][ T4785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.111'. [ 44.157448][ T4793] device syzkaller0 entered promiscuous mode [ 44.171890][ T4793] TC_ACT_REPEAT abuse ? [ 44.505904][ T4817] [U]  [ 44.953118][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.043461][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.045238][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.134776][ T24] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 45.136302][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 45.138069][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 45.141587][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 45.144674][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.148372][ T24] usb 1-1: Product: syz [ 45.149135][ T24] usb 1-1: Manufacturer: syz [ 45.151170][ T24] usb 1-1: SerialNumber: syz [ 45.158179][ T24] usb 1-1: config 0 descriptor?? [ 45.205957][ T4839] tipc: Can't bind to reserved service type 0 [ 45.364128][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 45.465956][ T4846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.467822][ T4846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.865112][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.867030][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.112290][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.114581][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.396988][ T4879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.398827][ T4879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.063280][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.064819][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.066246][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.067639][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.069026][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.077022][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.078457][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.079841][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.081223][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.082533][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.094603][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.097101][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.100350][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.101786][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.108407][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.111302][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.112735][ T4377] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0 [ 47.119062][ T4377] hid-generic 0006:0008:0008.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 47.161921][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 47.225012][ T4910] netlink: 2 bytes leftover after parsing attributes in process `syz.1.158'. [ 47.234667][ T4903] fido_id[4903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.320781][ T4913] device ip6gre1 entered promiscuous mode [ 47.386851][ T4921] netlink: 'syz.3.163': attribute type 11 has an invalid length. [ 47.394747][ T4919] device syzkaller0 entered promiscuous mode [ 47.487808][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.503292][ T24] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 47.517946][ T24] usb 1-1: USB disconnect, device number 6 [ 47.523753][ T4921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.753661][ T4319] udevd[4319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 47.802040][ T4953] binder: 4944:4953 tried to acquire reference to desc 0, got 1 instead [ 47.814037][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 48.527647][ T4329] binder: release 4944:4953 transaction 5 out, still active [ 48.529200][ T4329] binder: undelivered TRANSACTION_COMPLETE [ 48.615784][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 48.742948][ T4329] binder: send failed reply for transaction 5, target dead [ 48.758265][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 48.760919][ T4988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.156618][ T5012] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 49.170191][ T5012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.194122][ T5012] bond1: (slave veth3): Enslaving as an active interface with a down link [ 49.237842][ T5012] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 49.255794][ T5012] device macvlan2 entered promiscuous mode [ 49.259365][ T5012] device bond1 entered promiscuous mode [ 49.267112][ T5012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.276405][ T5012] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 49.290207][ T5012] device bond1 left promiscuous mode [ 49.558207][ T4981] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 49.679397][ T5041] process 'syz.4.204' launched '/dev/fd/3' with NULL argv: empty string added [ 49.808109][ T27] audit: type=1326 audit(49.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.812797][ T27] audit: type=1326 audit(49.790:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.814491][ T5055] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 49.820881][ T27] audit: type=1326 audit(49.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.831538][ T27] audit: type=1326 audit(49.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.836782][ T5055] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.838374][ T5055] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.839915][ T5055] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.841493][ T5055] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 49.853808][ T5055] bond1: (slave geneve2): making interface the new active one [ 49.856328][ T27] audit: type=1326 audit(49.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.859973][ T5055] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 49.869212][ T5055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 49.875020][ T5055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.878561][ T27] audit: type=1326 audit(49.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.891788][ T5062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.893580][ T5062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.895033][ T27] audit: type=1326 audit(49.800:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.899601][ T27] audit: type=1326 audit(49.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.904528][ T27] audit: type=1326 audit(49.800:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.908595][ T27] audit: type=1326 audit(49.800:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.1.209" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa1179368 code=0x7ffc0000 [ 49.913353][ T4378] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.058714][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 50.093114][ T4378] usb 1-1: Using ep0 maxpacket: 32 [ 50.095348][ T4378] usb 1-1: config 253 has an invalid interface number: 193 but max is 0 [ 50.096877][ T4378] usb 1-1: config 253 has no interface number 0 [ 50.098041][ T4378] usb 1-1: config 253 interface 193 has no altsetting 0 [ 50.100982][ T4378] usb 1-1: New USB device found, idVendor=04b8, idProduct=0002, bcdDevice=24.0e [ 50.102545][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.109629][ T4378] usb 1-1: Product: syz [ 50.110444][ T4378] usb 1-1: Manufacturer: syz [ 50.111301][ T4378] usb 1-1: SerialNumber: syz [ 50.137807][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.141352][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.356000][ T4378] usb 1-1: USB disconnect, device number 7 [ 50.511722][ T5084] input: syz1 as /devices/virtual/input/input6 [ 50.644440][ T5084] loop8: detected capacity change from 0 to 8 [ 50.649778][ T5084] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 50.652194][ T5084] loop8: partition table partially beyond EOD, truncated [ 50.655431][ T5084] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 50.690980][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 50.823412][ T5095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.825049][ T5095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.142032][ T5121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.151102][ T5121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.187207][ T5123] 8021q: VLANs not supported on gre0 [ 51.380122][ T5141] device gretap0 entered promiscuous mode [ 51.381908][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 51.384358][ T5141] device gretap0 left promiscuous mode [ 51.427495][ T5145] batman_adv: batadv0: Adding interface: syzkaller0 [ 51.428751][ T5145] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.436062][ T5145] batman_adv: batadv0: Interface activated: syzkaller0 [ 51.720884][ T5144] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 51.774214][ T5144] batman_adv: batadv0: Removing interface: syzkaller0 [ 51.781018][ T5151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.782714][ T5151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.164076][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 52.385536][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.388076][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.416579][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.422125][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.613053][ T4329] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 52.794392][ T4329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.796320][ T4329] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.799933][ T4329] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 52.801566][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.802941][ T4329] usb 1-1: Product: syz [ 52.803983][ T4329] usb 1-1: Manufacturer: syz [ 52.804864][ T4329] usb 1-1: SerialNumber: syz [ 53.169825][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.171699][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.213881][ T4329] usb 1-1: USB disconnect, device number 8 [ 53.546984][ T5251] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 53.548961][ T5251] device syz_tun entered promiscuous mode [ 53.559822][ T5251] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 53.567639][ T4744] bond0: (slave bond_slave_0): interface is now down [ 53.569073][ T4744] bond0: (slave bond_slave_1): interface is now down [ 53.583685][ T4744] bond0: (slave bond_slave_0): interface is now down [ 53.584996][ T4744] bond0: (slave bond_slave_1): interface is now down [ 53.586060][ T4744] bond0: (slave syz_tun): interface is now down [ 53.588384][ T4744] bond0: now running without any active interface! [ 53.713268][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 53.980132][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.984959][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.180278][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 54.215267][ T5307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.325'. [ 54.218073][ T5307] netlink: 'syz.0.325': attribute type 11 has an invalid length. [ 54.605142][ T5346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.343'. [ 54.815617][ T4329] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.926134][ T5382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.941080][ T5382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.059902][ T5394] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 55.075724][ T5394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.088336][ T5397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.092209][ T5394] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 55.094211][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 55.097495][ T5397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.257159][ T4329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.259191][ T4329] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 55.260756][ T4329] usb 1-1: can't read configurations, error -71 [ 55.449857][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 55.449866][ T27] audit: type=1326 audit(55.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.3.369" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff88379368 code=0x0 [ 55.735794][ T5420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.738271][ T5420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.036589][ T5429] binder: 5428:5429 ioctl c0306201 20000080 returned -14 [ 56.039008][ T5429] binder: 5428:5429 tried to acquire reference to desc 0, got 1 instead [ 56.040791][ T5429] binder: 5428:5429 ioctl c0306201 200003c0 returned -14 [ 56.042433][ T5429] binder: 5428:5429 unknown command 1074553620 [ 56.044192][ T5429] binder: 5428:5429 ioctl c0306201 20000000 returned -22 [ 56.317024][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.322416][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.548046][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.549934][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.727271][ T5470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.729143][ T5470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.866695][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 57.250040][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 57.251654][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'. [ 57.256269][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 57.257833][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'. [ 57.296272][ T5516] vivid-000: disconnect [ 57.297550][ T5515] vivid-000: reconnect [ 57.382288][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 57.390487][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 57.392102][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 57.398206][ T5528] input: syz0 as /devices/virtual/input/input7 [ 57.881164][ T5565] input: syz1 as /devices/virtual/input/input8 [ 57.964635][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 58.039352][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.042029][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.666531][ T5587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 58.668215][ T5587] ------------[ cut here ]------------ [ 58.669159][ T5587] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 58.677062][ T5587] WARNING: CPU: 1 PID: 5587 at net/sched/cls_u32.c:853 u32_change+0x1748/0x2018 [ 58.678761][ T5587] Modules linked in: [ 58.679545][ T5587] CPU: 1 PID: 5587 Comm: syz.2.433 Not tainted syzkaller #0 [ 58.680900][ T5587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.682794][ T5587] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 58.684255][ T5587] pc : u32_change+0x1748/0x2018 [ 58.685132][ T5587] lr : u32_change+0x1748/0x2018 [ 58.686004][ T5587] sp : ffff800021616c60 [ 58.686743][ T5587] x29: ffff800021616dc0 x28: ffff0000d3198400 x27: 1fffe0001a63308d [ 58.688181][ T5587] x26: ffff800021616f40 x25: ffff0000d31b4600 x24: dfff800000000000 [ 58.689649][ T5587] x23: 0000000000000010 x22: ffff7000042c2d9c x21: dfff800000000000 [ 58.691368][ T5587] x20: ffff800021617460 x19: ffff800017d99000 x18: 1fffe00033e6db7e [ 58.692969][ T5587] x17: ffff8000153bd000 x16: ffff8000082dd284 x15: 0000000040000002 [ 58.694562][ T5587] x14: 0000000000000001 x13: 1fffe00033e70270 x12: 0000000000000000 [ 58.696091][ T5587] x11: ff0080000a97ca20 x10: 0000000000000003 x9 : 5f13cf4593bfb000 [ 58.697534][ T5587] x8 : 5f13cf4593bfb000 x7 : ffff80000825ab20 x6 : 0000000000000000 [ 58.699035][ T5587] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 58.700488][ T5587] x2 : 0000000000000006 x1 : ffff800011d1dc80 x0 : ffff80018a057000 [ 58.701942][ T5587] Call trace: [ 58.702543][ T5587] u32_change+0x1748/0x2018 [ 58.703426][ T5587] tc_new_tfilter+0xf20/0x145c [ 58.704374][ T5587] rtnetlink_rcv_msg+0x6d4/0xcc4 [ 58.705317][ T5587] netlink_rcv_skb+0x220/0x3ec [ 58.706238][ T5587] rtnetlink_rcv+0x28/0x38 [ 58.707108][ T5587] netlink_unicast+0x5fc/0x80c [ 58.708065][ T5587] netlink_sendmsg+0x6f0/0x9d8 [ 58.708938][ T5587] ____sys_sendmsg+0x588/0x90c [ 58.709843][ T5587] __sys_sendmmsg+0x320/0x7ec [ 58.710672][ T5587] __arm64_sys_sendmmsg+0xa4/0xc0 [ 58.711598][ T5587] invoke_syscall+0x98/0x290 [ 58.712452][ T5587] el0_svc_common+0x13c/0x258 [ 58.713330][ T5587] do_el0_svc+0x5c/0x134 [ 58.714100][ T5587] el0_svc+0x58/0x128 [ 58.714866][ T5587] el0t_64_sync_handler+0x84/0xf0 [ 58.715761][ T5587] el0t_64_sync+0x18c/0x190 [ 58.716575][ T5587] irq event stamp: 1472 [ 58.717324][ T5587] hardirqs last enabled at (1471): [] finish_lock_switch+0xb0/0x1c8 [ 58.719091][ T5587] hardirqs last disabled at (1472): [] el1_dbg+0x24/0x80 [ 58.720644][ T5587] softirqs last enabled at (1424): [] local_bh_enable+0x10/0x34 [ 58.722339][ T5587] softirqs last disabled at (1400): [] local_bh_disable+0x10/0x34 [ 58.724051][ T5587] ---[ end trace 0000000000000000 ]--- [ 64.494377][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495571][ T2064] ieee802154 phy1 wpan1: encryption failed: -22