last executing test programs: 9.496102364s ago: executing program 3 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"fea121591fca4ebd54f99c54566518e57912459ab098e4d875f8876c1c7c159530e2592e462bf03191db7bc5ea866cd9f79c640b5815630364346cb124bf5369a2bb0bb184ae4a28ad99f84b61ee1c2173c40d3817bb4eab752a924d070ebe0af7b5dc55cf4befbc73b79d862688f64c3c321f89bb9eb654872640e33969f6d7e4e56634dc5ec65f18c365655664e215949b5248577bfaaa7cc8f49b828c0e3b6c4879e52df331d61aadaf638b3942fb6f45394f93815a37d036aec69cd5e7d1ba26852eada48e622396857262c0e9fd0bc73381b22fbb511f843ec5825462b1ba6c9a5df8a6539e3e5efcc21a6aad41762fb6a64c2ac94e5cb27753a0db5275e6b76d8793db5f094d8abb32ff262086897a70ba479a9711d61081c761d0bf0151ac903aafa634bc538212f7c1fe873765c0dd0ded7de96e319ea91f7a055b3477e16ff97b4f1aae17b3ac1f21dff1cf2e01415de67d309b222c2390cee34f5598935769ca48e6f1723d09f7c873f74838e61c71ec54bece8a8c9f7994d5ea9c5697b4a2208107fbe1c15fc19f3e57f931f1a499f23c7c89b998a9a1bf76238d635c6cbeb54b46d1e699abde6853fc055e532084ab3b7d23c95374a2eb73c26cf544bf0a892c1a80057def4a487028935e2a2390469471ee07aaf59dfa5a575533e3c2b10a7b066b0421b09d0c00b9287b50fb5e0ced047d90efdff3d57e5e788f9f8e089f444093d47cbd4a5e97c8dfff2934babece91891a808b38504e7fa89d2f9fbdb2c55ee89b3e6e2c1a1c8f83a3483cd063e9f5c21cdb25d93bbb84a5c951bdbd83d8c2286349a76f5abb63f0714f5b6028343b8595bf817af5e783f0ab9989ffc54c215ce9faa92574de09272b9214629ddd864faa06528a0001aee239bba20ca683866c2f4d738380f3a8fab43ca228473c642922b1e30f90db97975170958479baf6bbfc79e7b3ec265df4ba3ba8efd09bf8f0db66d99b6be1bffe9e15cd7ba93f80a1a6455628b33f480d78c45f00ef0df489b16c0f4b02dc6fecf1852c1a2c04258233f9bc33291b3c2671f43529523ec31f2b40526b2c1779cdbec8ee2189f97b10c983425a1f456883058558e25e4c31b520a0f3eef8394b8b6fd1b152ed6e177e6dd903f0817cce49f03da521199e4044e8fcfad47ff70ae74d271edbdb9c59a5e6d25c7c5c1c50e8463a5e000a2fa6957b42ec6ae10aa2fbc04611951686e24ab5e9d49c3cd438a5fa0874defcf26b24fb156fe808a002e0864bb7ee5425cc905c3526c3a8b51e5bd1329e20dc6d946272c2d6fbf69a88a678d787564542b2ac0774ea85a09efdcd60ab69f90571af26e46f96dad7ad95448f69837c7ae06e70167e169653b7edfeb13b62630507f6670b3879fe1d5e513c6b96ae225b0ecfc22569d200"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.324346742s ago: executing program 3 (id=25): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.200587873s ago: executing program 2 (id=36): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x48, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x0, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000114000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.89155315s ago: executing program 2 (id=37): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 5.753488313s ago: executing program 2 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 5.443349531s ago: executing program 3 (id=39): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) 5.289410524s ago: executing program 3 (id=40): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0404"], 0xd) 5.149272438s ago: executing program 3 (id=42): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000e40)={0x0, 0x0, 0x4, "047e461d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.588726758s ago: executing program 4 (id=56): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x80, 0x100) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e502a988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 2.559124099s ago: executing program 4 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd6067120400000000000000", 0x1d}, {&(0x7f0000000500)="f37479b46776cafac1ad3dd4b8a7ed0900ce4c41721e5a2abbb0477dcb", 0x1d}], 0x2) 2.423130922s ago: executing program 4 (id=58): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x201, 0x2000401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x7, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x8) 2.327704635s ago: executing program 4 (id=59): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) fsopen(0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10013, 0xbf}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x2000}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$KVM_TDX_CAPABILITIES(r8, 0xc004aeba, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r6, 0xfffff000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 2.10025899s ago: executing program 4 (id=60): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setns(r1, 0x6c020000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000840), &(0x7f0000000140)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 1.975660223s ago: executing program 1 (id=62): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x23, 0x14, 0x64, 0xfffd, 0x8, 0x5e, 0x0, @private=0xa010101, @remote}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x8001, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x87, 0x6, @multicast}, 0x14) 1.974924953s ago: executing program 0 (id=63): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.947621514s ago: executing program 4 (id=64): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 1.794123277s ago: executing program 1 (id=65): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xf0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 1.67310497s ago: executing program 0 (id=66): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.592447192s ago: executing program 0 (id=67): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x10, 0x80003, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000010401010000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) 1.447943005s ago: executing program 2 (id=68): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @empty, 0x0, 0x4005}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.371815897s ago: executing program 2 (id=69): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04f76d0c06"], 0x7) 1.371652957s ago: executing program 2 (id=70): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0xe0, 0x11, 0x37, {0x37, 0xc, "b2edc459c3fd7a3707f46961c8cc0bfac9fd8394fd91b1d7440e02c77b07eeba71938a1cd8f2d0ac3e5c54b6c6e2ca55d866efe2a8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.224685211s ago: executing program 0 (id=71): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) fsopen(0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10013, 0xbf}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x2000}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$KVM_TDX_CAPABILITIES(r8, 0xc004aeba, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r6, 0xfffff000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 1.013293076s ago: executing program 0 (id=72): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) fcntl$lock(r1, 0x26, 0x0) 953.320507ms ago: executing program 0 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "aa95a1a2"}]}}, 0x0}, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x5, "da4e32a206"}, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 952.805577ms ago: executing program 1 (id=74): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setns(r1, 0x6c020000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000840), &(0x7f0000000140)}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 912.629298ms ago: executing program 1 (id=75): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x23, 0x14, 0x64, 0xfffd, 0x8, 0x5e, 0x0, @private=0xa010101, @remote}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x8001, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x87, 0x6, @multicast}, 0x14) 885.179108ms ago: executing program 1 (id=76): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x60000010}) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x1) r3 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000001fc0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x12, {0x2, 0x4e24, @multicast1}, 'veth1_macvtap\x00'}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r0, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r6, 0x2}}, 0x18) 76.720638ms ago: executing program 3 (id=77): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x40, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 1 (id=78): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 37.730100][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.740235][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. syzkaller login: [ 56.455649][ T4173] cgroup: Unknown subsys name 'net' [ 56.596547][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.875449][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.158008][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.229910][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.249335][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 59.304385][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.313622][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.348877][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.356071][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.364902][ T4187] device bridge_slave_0 entered promiscuous mode [ 59.378897][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.386244][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.394641][ T4187] device bridge_slave_1 entered promiscuous mode [ 59.463928][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.484683][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.491918][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.499507][ T4188] device bridge_slave_0 entered promiscuous mode [ 59.507058][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.514370][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.522483][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.530911][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.550582][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.557767][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.565732][ T4188] device bridge_slave_1 entered promiscuous mode [ 59.579276][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.586395][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.594691][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.612577][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.619727][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.627725][ T4193] device bridge_slave_0 entered promiscuous mode [ 59.640897][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.648044][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.656271][ T4193] device bridge_slave_1 entered promiscuous mode [ 59.690825][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.698058][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.706189][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.715167][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.732368][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.743750][ T4187] team0: Port device team_slave_0 added [ 59.762242][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.769310][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.777602][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.786399][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.803877][ T4187] team0: Port device team_slave_1 added [ 59.812195][ T4188] team0: Port device team_slave_0 added [ 59.819660][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.837984][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.853891][ T4188] team0: Port device team_slave_1 added [ 59.867557][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.892163][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.908970][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.918729][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.926018][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.952002][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.970529][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.977882][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.004062][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.052920][ T4186] team0: Port device team_slave_0 added [ 60.061182][ T4185] team0: Port device team_slave_0 added [ 60.067399][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.074639][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.100677][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.113117][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.120059][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.146180][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.159735][ T4193] team0: Port device team_slave_0 added [ 60.168710][ T4193] team0: Port device team_slave_1 added [ 60.182373][ T4186] team0: Port device team_slave_1 added [ 60.195506][ T4185] team0: Port device team_slave_1 added [ 60.213959][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.221406][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.247403][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.279183][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.286453][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.313572][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.331682][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.338658][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.364814][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.389419][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.396703][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.422747][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.434518][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.441738][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.467675][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.493913][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.500885][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.527483][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.547504][ T4187] device hsr_slave_0 entered promiscuous mode [ 60.554928][ T4187] device hsr_slave_1 entered promiscuous mode [ 60.578524][ T4188] device hsr_slave_0 entered promiscuous mode [ 60.585179][ T4188] device hsr_slave_1 entered promiscuous mode [ 60.592525][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.600508][ T4188] Cannot create hsr debugfs directory [ 60.640757][ T4193] device hsr_slave_0 entered promiscuous mode [ 60.647544][ T4193] device hsr_slave_1 entered promiscuous mode [ 60.654479][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.662159][ T4193] Cannot create hsr debugfs directory [ 60.670840][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.677986][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.687344][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.695241][ T4186] Cannot create hsr debugfs directory [ 60.730389][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.737941][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.744477][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.752840][ T4185] Cannot create hsr debugfs directory [ 60.931926][ T1331] Bluetooth: hci0: command 0x0409 tx timeout [ 60.938482][ T1331] Bluetooth: hci1: command 0x0409 tx timeout [ 60.948616][ T1331] Bluetooth: hci4: command 0x0409 tx timeout [ 60.954821][ T1331] Bluetooth: hci2: command 0x0409 tx timeout [ 60.961349][ T1331] Bluetooth: hci3: command 0x0409 tx timeout [ 61.067744][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.084188][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.099127][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.108551][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.147828][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.163844][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.173443][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.194727][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.235110][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.244644][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.267285][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.276767][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.326992][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.340771][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.350338][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.378916][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.388519][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.397986][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.412803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.423093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.459539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.469080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.479576][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.486862][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.496041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.507172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.515782][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.522988][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.530916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.539606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.564364][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.586118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.606646][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.616310][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.634000][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.643263][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.652562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.660438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.668525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.677819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.686449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.707818][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.716106][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.733038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.742917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.751799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.760119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.771231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.779909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.822507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.831871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.840228][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.847317][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.855536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.865542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.874106][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.881177][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.888788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.897483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.905808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.913631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.924463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.934166][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.944879][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.979549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.989202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.004164][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.011298][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.021559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.030113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.039099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.048871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.058558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.067005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.093114][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.105968][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.119209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.129816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.142292][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.149375][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.162558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.171494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.179765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.188440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.197250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.207383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.222689][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.242607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.253325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.262883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.273647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.282388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.290790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.300033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.309028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.316895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.330651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.348352][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.365559][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.388328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.399125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.411203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.418727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.436622][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.449776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.467137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.482079][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.489170][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.538805][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.554167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.564660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.573783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.582455][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.589578][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.597466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.607051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.616395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.640285][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.650717][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.665887][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.675048][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.703330][ T4188] device veth0_vlan entered promiscuous mode [ 62.723647][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.734093][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.743395][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.754234][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.763083][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.771650][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.779867][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.788409][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.797266][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.806329][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.815204][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.822290][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.831273][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.839824][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.848610][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.855710][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.864512][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.872108][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.879502][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.888435][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.899278][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.910445][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.927300][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.945982][ T4188] device veth1_vlan entered promiscuous mode [ 62.962552][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.970624][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.979544][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.990798][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.999380][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.008507][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.017181][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.021514][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 63.026081][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.031163][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 63.038696][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.050345][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 63.057807][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 63.065109][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.075679][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 63.087748][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.104116][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.127917][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.136641][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.159434][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.169096][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.178000][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.186524][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.197439][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.207040][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.253958][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.275449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.290024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.320436][ T4188] device veth0_macvtap entered promiscuous mode [ 63.332912][ T4188] device veth1_macvtap entered promiscuous mode [ 63.340889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.349568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.358094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.367066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.376617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.385052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.394253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.402246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.412129][ T4186] device veth0_vlan entered promiscuous mode [ 63.437409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.452714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.482812][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.496348][ T4186] device veth1_vlan entered promiscuous mode [ 63.508743][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.518788][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.527851][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.537301][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.550871][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.563728][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.573874][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.583066][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.592255][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.613975][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.624008][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.634931][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.644642][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.661698][ T4187] device veth0_vlan entered promiscuous mode [ 63.677743][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.691451][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.699263][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.712281][ T4187] device veth1_vlan entered promiscuous mode [ 63.723550][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.733230][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.742377][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.760718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.769904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.791554][ T4186] device veth0_macvtap entered promiscuous mode [ 63.801849][ T4186] device veth1_macvtap entered promiscuous mode [ 63.821313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.829358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.839981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.849052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.868077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.876565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.884685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.894805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.902702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.916888][ T4193] device veth0_vlan entered promiscuous mode [ 63.933847][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.949053][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.960822][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.975039][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.004760][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.015556][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.024676][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.034307][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.046386][ T4187] device veth0_macvtap entered promiscuous mode [ 64.058015][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.068795][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.080806][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.089817][ T4193] device veth1_vlan entered promiscuous mode [ 64.117371][ T4187] device veth1_macvtap entered promiscuous mode [ 64.124473][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.128105][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.140838][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.141644][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.157441][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.165647][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.175244][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.183918][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.192654][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.202515][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.212451][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.223106][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.231975][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.240811][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.293705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.303371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.312571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.320899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.329317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.338063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.346050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.355939][ T4193] device veth0_macvtap entered promiscuous mode [ 64.385518][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.392817][ T4193] device veth1_macvtap entered promiscuous mode [ 64.410158][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.410237][ T4185] device veth0_vlan entered promiscuous mode [ 64.436349][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.447271][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.467350][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.477910][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.488895][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.498376][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.506511][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.516158][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.535119][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.546673][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.556746][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.567269][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.577227][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.587856][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.599002][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.615541][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.626285][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.636450][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.647161][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.658381][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.677271][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.692958][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.709779][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.719125][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.731979][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.743223][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.753780][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.765404][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.776589][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.787289][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.798736][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.813317][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.824253][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.833532][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.842546][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.861295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.869888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.878517][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.887037][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.896205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.909764][ T4185] device veth1_vlan entered promiscuous mode [ 64.921668][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.930378][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.945195][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.960366][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.043173][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.060244][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.086343][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.094224][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 65.102104][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 65.107488][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.108733][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 65.122925][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 65.128992][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 65.136899][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.152166][ T4185] device veth0_macvtap entered promiscuous mode [ 65.194466][ T4185] device veth1_macvtap entered promiscuous mode [ 65.198511][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.209076][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.220779][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.224420][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.254823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.267641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.275836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.284025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.305571][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.311570][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.314479][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.336114][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.345893][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.360862][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.368768][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.380821][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.394002][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.409117][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.426382][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.438554][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.455033][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.467533][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.486098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.501548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.515876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.526738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.552426][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.568709][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.582414][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.593328][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.597372][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.603804][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 65.624527][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.635929][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.646835][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.659524][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.676568][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.722811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.741851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.761232][ T4230] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 65.774282][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.807716][ T4230] usb 3-1: config 0 has no interface number 0 [ 65.816611][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.825565][ T4230] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 65.836066][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.848808][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.944292][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.960926][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.970443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.001372][ T4230] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 66.018658][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.031460][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.032758][ T4230] usb 3-1: Product: syz [ 66.039331][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.040503][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.074672][ T4230] usb 3-1: Manufacturer: syz [ 66.079872][ T4230] usb 3-1: SerialNumber: syz [ 66.119035][ T4230] usb 3-1: config 0 descriptor?? [ 66.141953][ T4263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.166917][ T4202] Bluetooth: hci1: hardware error 0x04 [ 66.406789][ T4263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.481282][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.561088][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.713875][ T4292] netlink: 13 bytes leftover after parsing attributes in process `syz.3.10'. [ 66.733353][ T4292] netlink: 'syz.3.10': attribute type 31 has an invalid length. [ 66.744910][ T4292] netlink: 'syz.3.10': attribute type 29 has an invalid length. [ 66.753272][ T4292] netlink: 'syz.3.10': attribute type 31 has an invalid length. [ 66.762141][ T4292] netlink: 'syz.3.10': attribute type 29 has an invalid length. [ 66.774009][ T4292] Zero length message leads to an empty skb [ 66.821121][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 66.946028][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 66.962624][ T23] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 66.988670][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.996158][ T23] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 67.016096][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.035877][ T23] usb 2-1: config 0 descriptor?? [ 67.046707][ T4232] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 67.058237][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.071167][ T4232] usb 1-1: Product: syz [ 67.075438][ T4232] usb 1-1: Manufacturer: syz [ 67.080121][ T4232] usb 1-1: SerialNumber: syz [ 67.174067][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 67.184992][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 67.191452][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 67.197547][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 67.537546][ T23] maltron 0003:058F:9410.0001: ignoring exceeding usage max [ 67.567109][ T23] maltron 0003:058F:9410.0001: hidraw0: USB HID v0.01 Device [HID 058f:9410] on usb-dummy_hcd.1-1/input0 [ 67.579801][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 67.754979][ T23] usb 2-1: USB disconnect, device number 2 [ 67.775663][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.981137][ T1331] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 68.051954][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 68.201205][ T4234] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 68.209345][ T4234] usb 5-1: config 0 has no interface number 0 [ 68.215907][ T4234] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 68.226168][ T4234] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 68.300052][ T4306] FAULT_INJECTION: forcing a failure. [ 68.300052][ T4306] name failslab, interval 1, probability 0, space 0, times 1 [ 68.313677][ T4306] CPU: 1 PID: 4306 Comm: syz.1.13 Not tainted syzkaller #0 [ 68.320896][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.330958][ T4306] Call Trace: [ 68.334242][ T4306] [ 68.337178][ T4306] dump_stack_lvl+0x188/0x250 [ 68.341287][ T1331] usb 4-1: config 0 has no interfaces? [ 68.341859][ T4306] ? show_regs_print_info+0x20/0x20 [ 68.352495][ T4306] ? load_image+0x410/0x410 [ 68.357007][ T4306] ? __lock_acquire+0x7b50/0x7b50 [ 68.362024][ T4306] ? lockdep_softirqs_off+0x430/0x430 [ 68.367409][ T4306] should_fail+0x383/0x4b0 [ 68.371829][ T4306] should_failslab+0x5/0x20 [ 68.376334][ T4306] slab_pre_alloc_hook+0x51/0xc0 [ 68.381264][ T4306] __kmalloc+0x6b/0x340 [ 68.385417][ T4306] ? __netlink_kernel_create+0x1f8/0x7d0 [ 68.391059][ T4306] __netlink_kernel_create+0x1f8/0x7d0 [ 68.396548][ T4306] ? __netlink_kernel_create+0x6ce/0x7d0 [ 68.402183][ T4306] ? netlink_set_err+0x3c0/0x3c0 [ 68.407135][ T4306] ? netlink_set_err+0x3c0/0x3c0 [ 68.412068][ T4306] ? memset+0x1e/0x40 [ 68.416082][ T4306] ? genl_pernet_init+0xa4/0x170 [ 68.421018][ T4306] genl_pernet_init+0xb6/0x170 [ 68.425959][ T4306] ? ctrl_dumppolicy_done+0x40/0x40 [ 68.431274][ T4306] ? rtnetlink_net_init+0xbd/0x140 [ 68.436399][ T4306] ? genl_pernet_exit+0x60/0x60 [ 68.441359][ T4306] ? genl_rcv+0x40/0x40 [ 68.445518][ T4306] ? rtnetlink_rcv+0x20/0x20 [ 68.450109][ T4306] ops_init+0x360/0x5f0 [ 68.454283][ T4306] setup_net+0x39e/0xa10 [ 68.458559][ T4306] ? copy_net_ns+0x5b0/0x5b0 [ 68.463142][ T4306] ? copy_net_ns+0x324/0x5b0 [ 68.467739][ T4306] ? down_read_killable+0x1ce/0x340 [ 68.472951][ T4306] copy_net_ns+0x33e/0x5b0 [ 68.477370][ T4306] create_new_namespaces+0x3ce/0x700 [ 68.482660][ T4306] unshare_nsproxy_namespaces+0x116/0x160 [ 68.488388][ T4306] ksys_unshare+0x4f6/0x8e0 [ 68.492881][ T4306] ? __lock_acquire+0x7b50/0x7b50 [ 68.497931][ T4306] ? sighand_ctor+0x40/0x40 [ 68.501190][ T1331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.502547][ T4306] ? lock_chain_count+0x20/0x20 [ 68.516385][ T4306] ? syscall_enter_from_user_mode+0x21/0x70 [ 68.517096][ T1331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.522295][ T4306] __x64_sys_unshare+0x34/0x40 [ 68.522325][ T4306] do_syscall_64+0x4c/0xa0 [ 68.522341][ T4306] ? clear_bhb_loop+0x30/0x80 [ 68.522358][ T4306] ? clear_bhb_loop+0x30/0x80 [ 68.522376][ T4306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.522408][ T4306] RIP: 0033:0x7f8731d69159 [ 68.522426][ T4306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.539328][ T1331] usb 4-1: Product: syz [ 68.539519][ T4306] RSP: 002b:00007f872ffc1028 EFLAGS: 00000246 [ 68.545453][ T1331] usb 4-1: Manufacturer: syz [ 68.548828][ T4306] ORIG_RAX: 0000000000000110 [ 68.560373][ T1331] usb 4-1: SerialNumber: syz [ 68.578950][ T4306] RAX: ffffffffffffffda RBX: 00007f8731ff0fa0 RCX: 00007f8731d69159 [ 68.578970][ T4306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 68.578980][ T4306] RBP: 00007f8731e0003b R08: 0000000000000000 R09: 0000000000000000 [ 68.578989][ T4306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.578997][ T4306] R13: 00007f8731ff1038 R14: 00007f8731ff0fa0 R15: 00007ffc5e6347f8 [ 68.579022][ T4306] [ 68.659005][ T1331] usb 4-1: config 0 descriptor?? [ 68.674367][ T4234] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 68.683665][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.693598][ T4234] usb 5-1: Product: syz [ 68.697953][ T4234] usb 5-1: Manufacturer: syz [ 68.709315][ T4234] usb 5-1: SerialNumber: syz [ 68.742418][ T4234] usb 5-1: config 0 descriptor?? [ 68.782478][ T4297] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 68.789538][ T4297] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 69.014103][ T4297] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 69.022956][ T4297] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 69.031338][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 69.041007][ T1331] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 69.084135][ T4290] usb 4-1: USB disconnect, device number 2 [ 69.233811][ T4230] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 69.241172][ T4234] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 69.245269][ T4230] asix: probe of 3-1:0.188 failed with error -71 [ 69.267895][ T4230] usb 3-1: USB disconnect, device number 2 [ 69.301150][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 69.333799][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 69.371179][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 69.401508][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 69.431179][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 69.462478][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 69.491630][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 69.521135][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 69.551148][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 69.565725][ T4232] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 69.575654][ T4232] lan78xx: probe of 1-1:1.0 failed with error -71 [ 69.586168][ T4232] usb 1-1: USB disconnect, device number 2 [ 69.691244][ T1331] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 69.700557][ T1331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.717076][ T1331] usb 2-1: Product: syz [ 69.725656][ T1331] usb 2-1: Manufacturer: syz [ 69.730307][ T1331] usb 2-1: SerialNumber: syz [ 69.740478][ T1331] usb 2-1: config 0 descriptor?? [ 69.783388][ T1331] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 70.164531][ T4323] kvm: pic: non byte read [ 70.176914][ T4323] kvm: pic: non byte read [ 70.183452][ T4323] kvm: pic: non byte read [ 70.188281][ T4323] kvm: pic: non byte read [ 70.194642][ T4323] kvm: pic: level sensitive irq not supported [ 70.194736][ T4323] kvm: pic: non byte read [ 70.910090][ T4337] FAULT_INJECTION: forcing a failure. [ 70.910090][ T4337] name failslab, interval 1, probability 0, space 0, times 0 [ 70.949484][ T4337] CPU: 1 PID: 4337 Comm: syz.0.22 Not tainted syzkaller #0 [ 70.956741][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.966811][ T4337] Call Trace: [ 70.970101][ T4337] [ 70.973038][ T4337] dump_stack_lvl+0x188/0x250 [ 70.977732][ T4337] ? show_regs_print_info+0x20/0x20 [ 70.982943][ T4337] ? load_image+0x410/0x410 [ 70.987461][ T4337] ? __might_sleep+0xf0/0xf0 [ 70.992058][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 70.997122][ T4337] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 71.002779][ T4337] should_fail+0x383/0x4b0 [ 71.007209][ T4337] should_failslab+0x5/0x20 [ 71.011724][ T4337] slab_pre_alloc_hook+0x51/0xc0 [ 71.016670][ T4337] kmem_cache_alloc_node+0x47/0x2c0 [ 71.021874][ T4337] ? __alloc_skb+0xf4/0x750 [ 71.026385][ T4337] __alloc_skb+0xf4/0x750 [ 71.030724][ T4337] netlink_ack+0x35c/0xb10 [ 71.035158][ T4337] ? nf_tables_commit+0x73e0/0x73e0 [ 71.040364][ T4337] ? netlink_dump+0xdd0/0xdd0 [ 71.045058][ T4337] nfnetlink_rcv+0x2192/0x2450 [ 71.049859][ T4337] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 71.055441][ T4337] ? skb_clone+0x1f1/0x350 [ 71.059872][ T4337] ? rcu_lock_release+0x5/0x20 [ 71.064650][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 71.069700][ T4337] netlink_unicast+0x78f/0x940 [ 71.074486][ T4337] netlink_sendmsg+0x8ba/0xbe0 [ 71.079274][ T4337] ? netlink_getsockopt+0x570/0x570 [ 71.084480][ T4337] ? aa_sock_msg_perm+0x94/0x150 [ 71.089440][ T4337] ? apparmor_socket_sendmsg+0x88/0x230 [ 71.094998][ T4337] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 71.100295][ T4337] ? security_socket_sendmsg+0x7c/0xa0 [ 71.105763][ T4337] ? netlink_getsockopt+0x570/0x570 [ 71.110971][ T4337] ____sys_sendmsg+0x5be/0x8f0 [ 71.115748][ T4337] ? __sys_sendmsg_sock+0x30/0x30 [ 71.120786][ T4337] ? import_iovec+0x6f/0xa0 [ 71.125298][ T4337] ___sys_sendmsg+0x236/0x2e0 [ 71.129985][ T4337] ? __sys_sendmsg+0x290/0x290 [ 71.134786][ T4337] __se_sys_sendmsg+0x1b7/0x2a0 [ 71.139642][ T4337] ? __x64_sys_sendmsg+0x80/0x80 [ 71.144581][ T4337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.150592][ T4337] ? lockdep_hardirqs_on+0x94/0x140 [ 71.155804][ T4337] do_syscall_64+0x4c/0xa0 [ 71.160225][ T4337] ? clear_bhb_loop+0x30/0x80 [ 71.164909][ T4337] ? clear_bhb_loop+0x30/0x80 [ 71.169605][ T4337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.175520][ T4337] RIP: 0033:0x7fcfb18f0159 [ 71.179942][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.199639][ T4337] RSP: 002b:00007fcfafb48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.208056][ T4337] RAX: ffffffffffffffda RBX: 00007fcfb1b77fa0 RCX: 00007fcfb18f0159 [ 71.216019][ T4337] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 71.223977][ T4337] RBP: 00007fcfb198703b R08: 0000000000000000 R09: 0000000000000000 [ 71.231937][ T4337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.239894][ T4337] R13: 00007fcfb1b78038 R14: 00007fcfb1b77fa0 R15: 00007ffd140fdbb8 [ 71.247862][ T4337] [ 71.256360][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.262931][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531161][ T4234] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.551671][ T4234] asix: probe of 5-1:0.34 failed with error -71 [ 71.562682][ T4234] usb 5-1: USB disconnect, device number 2 [ 71.676548][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.751119][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.001293][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 72.121479][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.132557][ T4230] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 72.142015][ T1331] gspca_stk1135: reg_w 0x203 err -71 [ 72.148749][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.156004][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.164521][ T1331] gspca_stk1135: Sensor write failed [ 72.169826][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.178168][ T4230] usb 4-1: config 0 descriptor?? [ 72.183767][ T1331] gspca_stk1135: Sensor write failed [ 72.189245][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.195823][ T1331] gspca_stk1135: Sensor read failed [ 72.201796][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.208163][ T1331] gspca_stk1135: Sensor read failed [ 72.213759][ T1331] gspca_stk1135: Detected sensor type unknown (0x0) [ 72.220373][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.230305][ T4230] pwc: Askey VC010 type 2 USB webcam detected. [ 72.236666][ T4231] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 72.245628][ T1331] gspca_stk1135: Sensor read failed [ 72.250854][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.258482][ T1331] gspca_stk1135: Sensor read failed [ 72.264200][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.270695][ T1331] gspca_stk1135: Sensor write failed [ 72.276465][ T1331] gspca_stk1135: serial bus timeout: status=0x00 [ 72.283326][ T1331] gspca_stk1135: Sensor write failed [ 72.288736][ T1331] stk1135: probe of 2-1:0.0 failed with error -71 [ 72.298214][ T1331] usb 2-1: USB disconnect, device number 3 [ 72.304474][ T4229] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 72.314949][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.325137][ T4229] usb 3-1: Product: syz [ 72.332107][ T4229] usb 3-1: Manufacturer: syz [ 72.337238][ T4229] usb 3-1: SerialNumber: syz [ 72.350649][ T4229] usb 3-1: config 0 descriptor?? [ 72.621355][ T4229] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 72.629812][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.640388][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 72.651846][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 72.681492][ T4230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 72.726500][ T4230] pwc: recv_control_msg error -32 req 02 val 2700 [ 72.761214][ T4232] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 72.771526][ T4230] pwc: recv_control_msg error -32 req 02 val 2c00 [ 72.822528][ T4230] pwc: recv_control_msg error -32 req 04 val 1000 [ 72.851413][ T4231] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 72.860611][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 72.868829][ T4231] usb 1-1: Product: syz [ 72.873215][ T4230] pwc: recv_control_msg error -32 req 04 val 1300 [ 72.879734][ T4231] usb 1-1: Manufacturer: syz [ 72.884437][ T4231] usb 1-1: SerialNumber: syz [ 72.890343][ T4231] usb 1-1: config 0 descriptor?? [ 72.921179][ T4230] pwc: recv_control_msg error -32 req 04 val 1400 [ 72.947061][ T4231] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 72.954746][ T4231] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 72.961883][ T4229] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 72.969944][ T4230] pwc: recv_control_msg error -32 req 02 val 2000 [ 72.976755][ T4231] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 72.986238][ T4229] usb 3-1: USB disconnect, device number 3 [ 73.011124][ T4230] pwc: recv_control_msg error -32 req 02 val 2100 [ 73.052095][ T1331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.059768][ T4230] pwc: recv_control_msg error -32 req 04 val 1500 [ 73.111563][ T4230] pwc: recv_control_msg error -32 req 02 val 2500 [ 73.161182][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 73.161449][ T4230] pwc: recv_control_msg error -32 req 02 val 2400 [ 73.211134][ T4232] usb 5-1: not running at top speed; connect to a high speed hub [ 73.211303][ T4230] pwc: recv_control_msg error -32 req 02 val 2600 [ 73.271271][ T4230] pwc: recv_control_msg error -32 req 02 val 2900 [ 73.301208][ T4232] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 73.309403][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.322908][ T4232] usb 5-1: config 1 has no interface number 0 [ 73.329195][ T4232] usb 5-1: config 1 interface 93 altsetting 185 endpoint 0x2 has invalid wMaxPacketSize 0 [ 73.340526][ T4232] usb 5-1: config 1 interface 93 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.354371][ T4232] usb 5-1: config 1 interface 93 has no altsetting 0 [ 73.461410][ T1331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.477016][ T1331] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 73.486921][ T1331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.504648][ T1331] usb 2-1: config 0 descriptor?? [ 73.535742][ T4230] pwc: recv_control_msg error -71 req 04 val 1100 [ 73.541069][ T4232] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 73.551319][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.559785][ T4232] usb 5-1: Product: syz [ 73.563589][ T1331] pwc: Askey VC010 type 2 USB webcam detected. [ 73.564588][ T4232] usb 5-1: Manufacturer: syz [ 73.572942][ T4230] pwc: recv_control_msg error -71 req 04 val 1200 [ 73.574742][ T4232] usb 5-1: SerialNumber: syz [ 73.592023][ T4230] pwc: Registered as video103. [ 73.598833][ T4230] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 73.624757][ T4230] usb 4-1: USB disconnect, device number 3 [ 73.771194][ T1331] pwc: send_video_command error -71 [ 73.776441][ T1331] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 73.785541][ T4378] device syzkaller1 entered promiscuous mode [ 73.809321][ T1331] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 73.855075][ T1331] usb 2-1: USB disconnect, device number 4 [ 73.916576][ T4232] peak_usb 5-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 73.929998][ T4232] peak_usb 5-1:1.93: unable to read PCAN-USB serial number (err -22) [ 74.016260][ T4232] peak_usb: probe of 5-1:1.93 failed with error -22 [ 74.064027][ T4232] usb 5-1: USB disconnect, device number 3 [ 74.361350][ T1331] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.721089][ T4411] netlink: 'syz.4.41': attribute type 4 has an invalid length. [ 74.831367][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.131068][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 75.232796][ T4290] usb 1-1: USB disconnect, device number 3 [ 75.252782][ T4232] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 75.283977][ T4232] usb 4-1: config 0 has no interface number 0 [ 75.290123][ T4232] usb 4-1: config 0 interface 184 has no altsetting 0 [ 75.481259][ T4232] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 75.495140][ T4384] ODEBUG: Out of memory. ODEBUG disabled [ 75.512751][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.520812][ T4232] usb 4-1: Product: syz [ 75.533202][ T1331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.548283][ T4426] loop5: detected capacity change from 0 to 7 [ 75.553968][ T4232] usb 4-1: Manufacturer: syz [ 75.555118][ T1331] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 75.576632][ T1331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.584844][ T4177] Dev loop5: unable to read RDB block 7 [ 75.590583][ T4177] loop5: unable to read partition table [ 75.599757][ T4232] usb 4-1: SerialNumber: syz [ 75.601337][ T1331] usb 2-1: config 0 descriptor?? [ 75.609975][ T4177] loop5: partition table beyond EOD, truncated [ 75.638514][ T4426] Dev loop5: unable to read RDB block 7 [ 75.647231][ T4426] loop5: unable to read partition table [ 75.648022][ T4232] usb 4-1: config 0 descriptor?? [ 75.661839][ T4426] loop5: partition table beyond EOD, truncated [ 75.668088][ T4426] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 75.672968][ T1331] pwc: Askey VC010 type 2 USB webcam detected. [ 75.736918][ T4232] smsc75xx v1.0.0 [ 75.791096][ T1331] pwc: send_video_command error -71 [ 75.796359][ T1331] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 75.844163][ T1331] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 75.877138][ T1331] usb 2-1: USB disconnect, device number 5 [ 76.381207][ T4232] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 76.403469][ T4232] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.461218][ T1331] Bluetooth: hci3: command 0x0409 tx timeout [ 76.793736][ T4470] loop0: detected capacity change from 0 to 2048 [ 76.864238][ T4470] loop0: p1 < > p4 [ 76.875723][ T4470] loop0: p4 size 8388608 extends beyond EOD, truncated [ 76.946569][ T4470] EXT4-fs (loop0p1): unable to read superblock [ 77.044051][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 77.329708][ T4479] loop5: detected capacity change from 0 to 7 [ 77.340153][ T4177] Dev loop5: unable to read RDB block 7 [ 77.359901][ T4177] loop5: unable to read partition table [ 77.373154][ T4177] loop5: partition table beyond EOD, truncated [ 77.384034][ T4479] Dev loop5: unable to read RDB block 7 [ 77.390381][ T4479] loop5: unable to read partition table [ 77.396640][ T4479] loop5: partition table beyond EOD, truncated [ 77.419606][ T4479] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.944206][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.963072][ T4496] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 77.970793][ T4496] netlink: 152 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.996047][ T4496] net_ratelimit: 1 callbacks suppressed [ 77.996062][ T4496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 78.041051][ T1108] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 78.107018][ T4498] FAULT_INJECTION: forcing a failure. [ 78.107018][ T4498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.125848][ T4498] CPU: 0 PID: 4498 Comm: syz.0.67 Not tainted syzkaller #0 [ 78.133069][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.143125][ T4498] Call Trace: [ 78.146405][ T4498] [ 78.149334][ T4498] dump_stack_lvl+0x188/0x250 [ 78.154022][ T4498] ? show_regs_print_info+0x20/0x20 [ 78.159226][ T4498] ? load_image+0x410/0x410 [ 78.163737][ T4498] ? __lock_acquire+0x7b50/0x7b50 [ 78.168770][ T4498] should_fail+0x383/0x4b0 [ 78.170763][ T4384] Set syz1 is full, maxelem 65536 reached [ 78.173191][ T4498] _copy_from_iter+0x234/0x1160 [ 78.173213][ T4498] ? __lock_acquire+0x7b50/0x7b50 [ 78.173238][ T4498] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 78.173260][ T4498] ? __virt_addr_valid+0x3c6/0x470 [ 78.199270][ T4498] ? __phys_addr_symbol+0x2b/0x70 [ 78.204347][ T4498] ? __check_object_size+0x30c/0x410 [ 78.209651][ T4498] netlink_sendmsg+0x758/0xbe0 [ 78.214438][ T4498] ? netlink_getsockopt+0x570/0x570 [ 78.219652][ T4498] ? aa_sock_msg_perm+0x94/0x150 [ 78.224602][ T4498] ? apparmor_socket_sendmsg+0x88/0x230 [ 78.230158][ T4498] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 78.235458][ T4498] ? security_socket_sendmsg+0x7c/0xa0 [ 78.240929][ T4498] ? netlink_getsockopt+0x570/0x570 [ 78.246141][ T4498] ____sys_sendmsg+0x5be/0x8f0 [ 78.250929][ T4498] ? __sys_sendmsg_sock+0x30/0x30 [ 78.255969][ T4498] ? import_iovec+0x6f/0xa0 [ 78.260490][ T4498] ___sys_sendmsg+0x236/0x2e0 [ 78.265186][ T4498] ? __sys_sendmsg+0x290/0x290 [ 78.269992][ T4498] __se_sys_sendmsg+0x1b7/0x2a0 [ 78.274855][ T4498] ? __x64_sys_sendmsg+0x80/0x80 [ 78.279802][ T4498] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.285797][ T4498] ? lockdep_hardirqs_on+0x94/0x140 [ 78.290994][ T4498] do_syscall_64+0x4c/0xa0 [ 78.295407][ T4498] ? clear_bhb_loop+0x30/0x80 [ 78.300077][ T4498] ? clear_bhb_loop+0x30/0x80 [ 78.304744][ T4498] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.310633][ T4498] RIP: 0033:0x7fcfb18f0159 [ 78.315038][ T4498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.334648][ T4498] RSP: 002b:00007fcfafb48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.343048][ T4498] RAX: ffffffffffffffda RBX: 00007fcfb1b77fa0 RCX: 00007fcfb18f0159 [ 78.351013][ T4498] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000005 [ 78.358986][ T4498] RBP: 00007fcfb198703b R08: 0000000000000000 R09: 0000000000000000 [ 78.366952][ T4498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.374910][ T4498] R13: 00007fcfb1b78038 R14: 00007fcfb1b77fa0 R15: 00007ffd140fdbb8 [ 78.382982][ T4498] [ 78.457333][ T4506] loop5: detected capacity change from 0 to 7 [ 78.466607][ T4177] Dev loop5: unable to read RDB block 7 [ 78.473344][ T4177] loop5: unable to read partition table [ 78.479521][ T4177] loop5: partition table beyond EOD, truncated [ 78.488816][ T4506] Dev loop5: unable to read RDB block 7 [ 78.494587][ T4506] loop5: unable to read partition table [ 78.500403][ T4506] loop5: partition table beyond EOD, truncated [ 78.507361][ T4506] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.531708][ T4290] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.571326][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 78.581218][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.589219][ T1108] usb 5-1: Product: syz [ 78.594378][ T1108] usb 5-1: Manufacturer: syz [ 78.598980][ T1108] usb 5-1: SerialNumber: syz [ 78.618089][ T1108] usb 5-1: config 0 descriptor?? [ 78.792751][ T4518] loop1: detected capacity change from 0 to 2048 [ 78.843365][ T4179] loop1: p1 < > p4 [ 78.848213][ T4179] loop1: p4 size 8388608 extends beyond EOD, truncated [ 78.867277][ T4518] loop1: p1 < > p4 [ 78.876421][ T4518] loop1: p4 size 8388608 extends beyond EOD, truncated [ 78.881259][ T1108] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.897586][ T4518] EXT4-fs (loop1p1): unable to read superblock [ 78.904034][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.920797][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.930676][ T4290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.945164][ T4290] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 78.961031][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.961039][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.989599][ T4290] usb 3-1: config 0 descriptor?? [ 79.361165][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.372345][ T4231] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.381699][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.391441][ T4231] usb 1-1: config 0 descriptor?? [ 79.472319][ T4290] ortek 0003:1223:3F07.0002: item fetching failed at offset 7/55 [ 79.480344][ T4290] ortek: probe of 0003:1223:3F07.0002 failed with error -22 [ 79.521517][ T4232] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 79.537129][ T4232] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 79.547485][ T4232] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 79.558019][ T4232] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 79.577718][ T4232] usb 4-1: USB disconnect, device number 4 [ 79.601207][ T1108] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 79.610389][ T1108] usb 5-1: USB disconnect, device number 4 [ 79.675380][ T4230] usb 3-1: USB disconnect, device number 4 [ 79.706278][ T4202] Bluetooth: hci0: Unknown advertising packet type: 0x1eb0 [ 79.706445][ T4202] ================================================================== [ 79.725523][ T4202] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 79.733348][ T4202] Read of size 1 at addr ffff888060a02401 by task kworker/u5:8/4202 [ 79.741330][ T4202] [ 79.743659][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 79.751201][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.761255][ T4202] Workqueue: hci0 hci_rx_work [ 79.765941][ T4202] Call Trace: [ 79.769216][ T4202] [ 79.772135][ T4202] dump_stack_lvl+0x188/0x250 [ 79.776824][ T4202] ? show_regs_print_info+0x20/0x20 [ 79.782185][ T4202] ? load_image+0x410/0x410 [ 79.786676][ T4202] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 79.792131][ T4202] print_address_description+0x60/0x2d0 [ 79.797660][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 79.802752][ T4202] kasan_report+0xdf/0x130 [ 79.807292][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 79.812409][ T4202] hci_le_meta_evt+0x12ea/0x3ca0 [ 79.817339][ T4202] ? hci_event_packet+0x363/0x1310 [ 79.822452][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 79.827499][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 79.833572][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 79.839285][ T4202] ? mark_lock+0x94/0x320 [ 79.843605][ T4202] ? mutex_unlock+0x10/0x10 [ 79.848096][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.854065][ T4202] ? lock_chain_count+0x20/0x20 [ 79.858902][ T4202] ? __rwlock_init+0x140/0x140 [ 79.863656][ T4202] hci_event_packet+0xe0b/0x1310 [ 79.868587][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 79.873427][ T4202] ? rcu_lock_release+0x20/0x20 [ 79.878270][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 79.883460][ T4202] hci_rx_work+0x255/0xa10 [ 79.887870][ T4202] process_one_work+0x867/0xff0 [ 79.892719][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 79.898339][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 79.903626][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.908653][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 79.914207][ T4202] ? wq_worker_running+0x97/0x170 [ 79.919227][ T4202] worker_thread+0xad7/0x12a0 [ 79.923910][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 79.929803][ T4202] kthread+0x42e/0x520 [ 79.933857][ T4202] ? rcu_lock_release+0x20/0x20 [ 79.938781][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 79.943365][ T4202] ret_from_fork+0x1f/0x30 [ 79.947778][ T4202] [ 79.950789][ T4202] [ 79.953094][ T4202] Allocated by task 4523: [ 79.957400][ T4202] __kasan_kmalloc+0xaf/0xe0 [ 79.961974][ T4202] __alloc_skb+0x22c/0x750 [ 79.966373][ T4202] vhci_write+0xbd/0x440 [ 79.970946][ T4202] vfs_write+0x748/0xd70 [ 79.975175][ T4202] ksys_write+0x153/0x260 [ 79.979485][ T4202] do_syscall_64+0x4c/0xa0 [ 79.983882][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.989756][ T4202] [ 79.992086][ T4202] The buggy address belongs to the object at ffff888060a02000 [ 79.992086][ T4202] which belongs to the cache kmalloc-1k of size 1024 [ 80.006122][ T4202] The buggy address is located 1 bytes to the right of [ 80.006122][ T4202] 1024-byte region [ffff888060a02000, ffff888060a02400) [ 80.019810][ T4202] The buggy address belongs to the page: [ 80.025421][ T4202] page:ffffea0001828000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60a00 [ 80.035556][ T4202] head:ffffea0001828000 order:3 compound_mapcount:0 compound_pincount:0 [ 80.043860][ T4202] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 80.051825][ T4202] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41dc0 [ 80.060397][ T4202] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 80.068956][ T4202] page dumped because: kasan: bad access detected [ 80.075360][ T4202] page_owner tracks the page as allocated [ 80.081061][ T4202] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4243, ts 71612973876, free_ts 71609421144 [ 80.099445][ T4202] get_page_from_freelist+0x24f6/0x2670 [ 80.104981][ T4202] __alloc_pages+0x1ee/0x480 [ 80.109568][ T4202] new_slab+0xc0/0x4b0 [ 80.113619][ T4202] ___slab_alloc+0x807/0xdd0 [ 80.118192][ T4202] __kmalloc+0x11d/0x340 [ 80.122418][ T4202] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 80.128121][ T4202] ieee80211_ibss_rx_queued_mgmt+0x36b/0x2b50 [ 80.134179][ T4202] ieee80211_iface_work+0x714/0xc50 [ 80.139365][ T4202] cfg80211_wiphy_work+0x224/0x260 [ 80.144465][ T4202] process_one_work+0x867/0xff0 [ 80.149301][ T4202] worker_thread+0xad7/0x12a0 [ 80.153961][ T4202] kthread+0x42e/0x520 [ 80.158013][ T4202] ret_from_fork+0x1f/0x30 [ 80.162415][ T4202] page last free stack trace: [ 80.167065][ T4202] free_unref_page_prepare+0x637/0x6c0 [ 80.172508][ T4202] free_unref_page+0x8f/0x2a0 [ 80.177201][ T4202] __unfreeze_partials+0x188/0x1e0 [ 80.182295][ T4202] put_cpu_partial+0x12d/0x190 [ 80.187044][ T4202] qlist_free_all+0x35/0x90 [ 80.191529][ T4202] kasan_quarantine_reduce+0x150/0x160 [ 80.196971][ T4202] __kasan_slab_alloc+0x2f/0xc0 [ 80.201805][ T4202] slab_post_alloc_hook+0x4c/0x380 [ 80.206896][ T4202] kmem_cache_alloc_trace+0x165/0x290 [ 80.212248][ T4202] usb_control_msg+0x70/0x3e0 [ 80.216909][ T4202] hub_ext_port_status+0x103/0x6c0 [ 80.222005][ T4202] hub_event+0x768/0x5260 [ 80.226317][ T4202] process_one_work+0x867/0xff0 [ 80.231149][ T4202] worker_thread+0xad7/0x12a0 [ 80.235807][ T4202] kthread+0x42e/0x520 [ 80.239860][ T4202] ret_from_fork+0x1f/0x30 [ 80.244263][ T4202] [ 80.246586][ T4202] Memory state around the buggy address: [ 80.252197][ T4202] ffff888060a02300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 80.260239][ T4202] ffff888060a02380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 80.268369][ T4202] >ffff888060a02400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.276673][ T4202] ^ [ 80.280729][ T4202] ffff888060a02480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.288780][ T4202] ffff888060a02500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.296821][ T4202] ================================================================== [ 80.304861][ T4202] Disabling lock debugging due to kernel taint [ 80.314889][ T4202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.322098][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 80.331039][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.341100][ T4202] Workqueue: hci0 hci_rx_work [ 80.345885][ T4202] Call Trace: [ 80.349164][ T4202] [ 80.352085][ T4202] dump_stack_lvl+0x188/0x250 [ 80.356747][ T4202] ? show_regs_print_info+0x20/0x20 [ 80.361932][ T4202] ? load_image+0x410/0x410 [ 80.362060][ T4231] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 80.366442][ T4202] panic+0x2f8/0x850 [ 80.378726][ T4202] ? bpf_jit_dump+0xd0/0xd0 [ 80.379056][ T4231] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input6 [ 80.383233][ T4202] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 80.383255][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 80.383269][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 80.410776][ T4202] check_panic_on_warn+0x80/0xa0 [ 80.415705][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 80.420829][ T4202] end_report+0x6d/0xf0 [ 80.424970][ T4202] kasan_report+0x102/0x130 [ 80.429454][ T4202] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 80.434572][ T4202] hci_le_meta_evt+0x12ea/0x3ca0 [ 80.439576][ T4202] ? hci_event_packet+0x363/0x1310 [ 80.444687][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 80.449698][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 80.455748][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 80.461456][ T4202] ? mark_lock+0x94/0x320 [ 80.465782][ T4202] ? mutex_unlock+0x10/0x10 [ 80.470306][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.476286][ T4202] ? lock_chain_count+0x20/0x20 [ 80.481116][ T4202] ? __rwlock_init+0x140/0x140 [ 80.485857][ T4202] hci_event_packet+0xe0b/0x1310 [ 80.490810][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 80.495669][ T4202] ? rcu_lock_release+0x20/0x20 [ 80.500503][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 80.505678][ T4202] hci_rx_work+0x255/0xa10 [ 80.510110][ T4202] process_one_work+0x867/0xff0 [ 80.514948][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 80.520566][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 80.525854][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.530876][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.536402][ T4202] ? wq_worker_running+0x97/0x170 [ 80.541405][ T4202] worker_thread+0xad7/0x12a0 [ 80.546068][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 80.551945][ T4202] kthread+0x42e/0x520 [ 80.555995][ T4202] ? rcu_lock_release+0x20/0x20 [ 80.561087][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 80.565674][ T4202] ret_from_fork+0x1f/0x30 [ 80.570080][ T4202] [ 80.573628][ T4202] Kernel Offset: disabled [ 80.577952][ T4202] Rebooting in 86400 seconds..