last executing test programs: 4m16.68020599s ago: executing program 1 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x48) write(r0, &(0x7f0000000540)='1', 0x1) 4m16.541320904s ago: executing program 1 (id=500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="0f0070e1a6cf41217e0115000000", 0x0, 0x10a00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m16.510937927s ago: executing program 1 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d577c621d46}, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4m16.425599726s ago: executing program 1 (id=502): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8000, 0xfffffffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x8482, 0x0) write$binfmt_aout(r3, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES8=r3], 0x5eaa) 4m13.463143417s ago: executing program 1 (id=507): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="664af8a44e8dc10265424a01df55acafec8f7815034086b7102dc004348569f5ce1f225799f48895c416553ff2a29b9035c6c7cb1de8f53375ea15b58b61d6887d0dd73a4d53af2d4b68579b11b29fb62fae2fdd3e909c298ffc4ff07305eb80fce8c048c396e62b4e08f16ab771388449cc46f1ba068bc2e58f66acc43caa7edeeb694442ef9a734e3db9b7d94ccefa", @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0xa7e, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000840)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) write(r0, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ipv4', 0x4) write(0xffffffffffffffff, &(0x7f0000000380)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 4m11.978077328s ago: executing program 1 (id=511): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) landlock_restrict_self(0xffffffffffffffff, 0xc) 3m56.868072735s ago: executing program 32 (id=511): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000) landlock_restrict_self(0xffffffffffffffff, 0xc) 2m17.359446872s ago: executing program 5 (id=552): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000640)={0xffffff23, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r5 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000005c0)={0x7, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x6, 0x88, r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xffffffe4) 1m59.681717749s ago: executing program 5 (id=552): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000640)={0xffffff23, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r5 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000005c0)={0x7, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x6, 0x88, r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xffffffe4) 1m34.915817197s ago: executing program 5 (id=552): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000640)={0xffffff23, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r5 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000005c0)={0x7, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x6, 0x88, r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xffffffe4) 1m12.633637836s ago: executing program 5 (id=552): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000640)={0xffffff23, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r5 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000005c0)={0x7, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x6, 0x88, r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xffffffe4) 54.121913843s ago: executing program 5 (id=552): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000640)={0xffffff23, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r5 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000005c0)={0x7, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x6, 0x88, r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xffffffe4) 26.192048971s ago: executing program 5 (id=552): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000640)={0xffffff23, 0xffffffffffffffff}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) r5 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000005c0)={0x7, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/mtrr\x00', 0x2, 0x0) write(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) fsopen(&(0x7f0000000680)='ocfs2_dlmfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x6, 0x88, r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xffffffe4) 14.581708497s ago: executing program 2 (id=1037): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000016c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001740), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000001840)='./sec\x00', &(0x7f0000001880)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020) 12.300961892s ago: executing program 4 (id=1041): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000019500), 0xae, 0x800) stat(&(0x7f0000019540)='./cgroup/../file0\x00', &(0x7f0000019580)) 10.168170702s ago: executing program 2 (id=1044): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x77) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_POLL(r3, 0x640f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.089338331s ago: executing program 3 (id=1045): inotify_init() socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000900)={0xfc, {"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", 0xffffffffffffff68}}, 0xb76) 9.737421647s ago: executing program 3 (id=1047): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000180), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) close(r2) 9.001534413s ago: executing program 2 (id=1049): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x2ce, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 8.814777692s ago: executing program 3 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 8.279176257s ago: executing program 2 (id=1051): r0 = fsopen(&(0x7f0000000840)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000800)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000002480)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 8.263002689s ago: executing program 0 (id=1052): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x806e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private=0xa010101, @in6=@private1, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x5}, 0x0, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@remote, 0x8000000, 0x3, 0x1, 0x0, 0xeffffff, 0x6}}, 0xe8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) unshare(0x2a020400) listen(r3, 0x0) 7.230510025s ago: executing program 0 (id=1053): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000640)=0x40b9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vxcan1\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000740)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) writev(r4, 0x0, 0x0) sendmsg$can_j1939(r3, &(0x7f0000000780)={&(0x7f00000007c0), 0x18, &(0x7f0000000800)={&(0x7f0000000840)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0x6, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 7.165250392s ago: executing program 4 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c73686f72746e616d653d77696e6e742c636f6465706167653d3737352c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c646d61736b3d30303030303030303030303030303030303030303030342c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00dde06dc4175f8b6ac53916a33c446cb6a1d8cd631054dd0bf6e4e3ffa12339ddd493d93370aa0b0e74e1b4e290013ae47d7979ffa46499ad711725cdb6e293c2305b6daeb919c7b6ea6c43"], 0x1, 0x22d, &(0x7f0000000480)="$eJzs3b9rE28cB/BPf32/oSDpIBRF8MTFKbQV9xapIAYU5QadLLZFaWLBQkCH1s2/wE3/BR1dBQdx9R8QQargYrcOQqRebGpNbGq9nOjrteRD7nnffZ7LkWfKk+vH6kvzyyuLGxvrUSoNxPB0TMfmQIzFYAxF5n4AAH+TzWYzPjUzRfcCAPTHr6//pbxaAgBy1uP6f6mPLQEAOetl/R/pb0sAQM6uXL12YaZanb2cJKWI+oNG2kiz1+z4zGLcilosxESU43NEc1tWnztfnZ1Itrwfi7S+1sqvNdKh7/OTUY6xzvnJJBNp/WGrrbVGOhKjrfyb0ViIqSjH4c75qXZ+x/X/i1Mnd1y/EuV4fSOWoxbzsZVt51cnk+Tsxequ/P9fxwEAAAAAAAAAAAAAAAAAAAAAQB4qybaO+/dUKt2OZ/ne9wfavT/PcBwdLnbuAAAAAAAAAAAAAAAAAAAA8KdYuXtvaa5WW7jzs+L2qycv9hrTYzHQuu5Bz3Pw4tCJd4+6jRna3/35vcXz4/tJDRZzM1+u3zxyemX8TGGf4EhE/PhO10frYzkip36eFvoYf5v1noPHH0/PPVt9+6HXM/f9qwgAAAAAAAAAAAAAAAAAAP557R/9Ft0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABSn/f//+RVFzxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL4EAAD//7xKmhU=") prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) writev(r0, &(0x7f0000001b40)=[{0x0}], 0x1) 6.740803016s ago: executing program 0 (id=1055): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000016c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001740), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000001840)='./sec\x00', &(0x7f0000001880)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001900)={0x2020}, 0x2020) 6.145735617s ago: executing program 4 (id=1056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r1, r1, 0x2f, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) r2 = getpid() ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000280)='\x00', 0x80000, &(0x7f0000000400)={@align=0xfff, {0x7, 0xff, 0x9}}, 0x221, &(0x7f0000000440), &(0x7f0000000480)}, {[0x0, 0x8, 0x43, 0xffffffff]}, 0xc05d, 0x9d, &(0x7f00000004c0)=""/157}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket(0x1e, 0x1, 0x0) listen(r6, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000004280)={0x0, 0x2710}, 0x10) accept4$inet6(r6, 0x0, 0x0, 0x80000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000ac0)=""/259, 0x103}, {&(0x7f0000000c00)=""/4105, 0x1009}, {&(0x7f0000001c40)=""/129, 0x81}, {&(0x7f0000001d00)=""/4094, 0xffe}, {&(0x7f0000002d00)=""/209, 0xd1}, {&(0x7f0000002e00)=""/105, 0x77}, {&(0x7f0000002e80)=""/107, 0x6b}, {&(0x7f0000002f00)=""/4082, 0xff4}, {&(0x7f0000003f00)=""/246, 0xf6}, {&(0x7f0000004000)=""/142, 0x8e}, {&(0x7f00000040c0)=""/24, 0x18}, {&(0x7f0000004100)=""/55, 0x37}, {&(0x7f0000004140)=""/214, 0xf8}, {&(0x7f0000004240)=""/28, 0x1c}], 0xe}, 0x40000180) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000700), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r9, 0x1}}, 0x48) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)}) fsopen(0x0, 0x1) close_range(r10, 0xffffffffffffffff, 0x0) 4.988453346s ago: executing program 4 (id=1057): sendto$inet6(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000019500)='./file0/../file0\x00', 0x0, 0x101090, 0x0) rmdir(&(0x7f0000019540)='./file0\x00') 4.054687442s ago: executing program 3 (id=1058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c00}}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000b00), &(0x7f0000000b40)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000b80)="01", 0x7fe5, 0x40, 0x0, 0x0) 3.829481916s ago: executing program 2 (id=1059): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x77) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_POLL(r3, 0x640f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.741487728s ago: executing program 4 (id=1060): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000180), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10000, 0x0) close(r2) 2.690082113s ago: executing program 2 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40500, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000004c0)) r1 = syz_open_pts(r0, 0x42) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000500)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0xc0) 2.505518542s ago: executing program 0 (id=1062): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) 2.04339595s ago: executing program 3 (id=1063): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xff, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x806e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private=0xa010101, @in6=@private1, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x5}, 0x0, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@remote, 0x8000000, 0x3, 0x1, 0x0, 0xeffffff, 0x6}}, 0xe8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) unshare(0x2a020400) listen(r3, 0x0) 1.393422587s ago: executing program 0 (id=1064): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000019500), 0xae, 0x800) stat(&(0x7f0000019540)='./cgroup/../file0\x00', &(0x7f0000019580)) 2.58457ms ago: executing program 4 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r0 = getpid() openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000940)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mount(0x0, &(0x7f0000000500)='./sec\x00', &(0x7f0000000540)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='path_group G3 /bin/sh\n', 0x16) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="b042efe2c3f1100523a83d577c1aab3d171a880876f7a8b203a1610fc5f312de72db3fb1f7672fea09bfe0b1b092b7e3d4846c405d2a5c91972be3f75772adda68d355200ef23ff03912d232b10c310fa1e5293c217ba66c0b08aeea766b93bc08988e7953111457747a522bf192784c64bbcce8c8bd518288e6196ad99dddf025705553de429b7819d02126e31f8cb9", @ANYRESDEC=r3, @ANYBLOB="7c68511189f0d4737b929cbe8dff21e6d9f85a59b7d0948e8faac0865dafae231a11ba240d1546ab34bd91ab89ae4f4203ea1f", @ANYBLOB="4f0996911cc8c58ac8d0cc2856ef6c205388fc5ddcf4e7c30f618a5fbfc23c05978d0ca50bfb6bafd23673bfc69942f8937d21", @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=r2, @ANYRESHEX=r1], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, r5, 0x100000000000000}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x4b1edbda8af222b1, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/89, 0x59}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r6, r5}, 0xc) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000780), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000007c0)={0x28, &(0x7f0000000800)}) mount(0x0, &(0x7f0000000680)='./tracing\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000740)="653aa00d5f", 0x5) syz_usb_connect(0x4, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 959.06µs ago: executing program 0 (id=1075): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x2, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffc, 0x86}, &(0x7f0000000680)=0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='oom_score_adj\x00') write$FUSE_STATX(r5, 0x0, 0x30) mmap$snddsp_status(&(0x7f000000e000/0x4000)=nil, 0x1000, 0x1000000, 0x20010, r5, 0x82000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 0s ago: executing program 3 (id=1066): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c73686f72746e616d653d77696e6e742c636f6465706167653d3737352c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c646d61736b3d30303030303030303030303030303030303030303030342c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00dde06dc4175f8b6ac53916a33c446cb6a1d8cd631054dd0bf6e4e3ffa12339ddd493d93370aa0b0e74e1b4e290013ae47d7979ffa46499ad711725cdb6e293c2305b6daeb919c7b6ea6c43"], 0x1, 0x22d, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) writev(r0, &(0x7f0000001b40)=[{0x0}], 0x1) kernel console output (not intermixed with test programs): , different from the interface descriptor's value: 14 [ 262.508756][ T6314] device veth1_macvtap entered promiscuous mode [ 262.515129][ T6426] nvmet_tcp: malformed ip/port passed: : [ 262.571044][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.584763][ T6428] loop3: detected capacity change from 0 to 256 [ 262.605298][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 262.623595][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.657849][ T13] usb 3-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 262.657912][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.687278][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.687333][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.505150][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.512397][ T13] usb 3-1: config 0 descriptor?? [ 263.519630][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.540694][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.564421][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.585800][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.595741][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.609678][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.707207][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.734689][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.748737][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.803019][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.836270][ T4284] usb 3-1: USB disconnect, device number 6 [ 263.854050][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.870286][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.890726][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.906727][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.927004][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.976853][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.991317][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.011728][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.031327][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.107514][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.129035][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.164027][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.236192][ T6314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.246023][ T6314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.256858][ T6314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.266974][ T6314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.310743][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 265.388589][ T6451] loop2: detected capacity change from 0 to 4096 [ 265.527483][ T6451] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 265.560848][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 265.700912][ T7] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 265.709768][ T7] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 265.760441][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 265.839810][ T7] usb 1-1: config 1 has no interface number 0 [ 265.864683][ T25] audit: type=1807 audit(1794108017.406:124): UNKNOWN=? res=0 [ 265.872340][ T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.890881][ T25] audit: type=1802 audit(1794108017.406:125): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.591" res=0 errno=0 [ 265.938644][ T7] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 265.995454][ T7] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 266.025565][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.124059][ T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 266.351739][ T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 266.560248][ T6454] ima: policy update failed [ 266.583760][ T4337] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.683899][ T25] audit: type=1802 audit(1794108018.226:126): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.591" res=0 errno=0 [ 267.714137][ T4302] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 267.714134][ T4337] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.733126][ T6464] nvmet_tcp: malformed ip/port passed: : [ 267.773175][ T7] usb 1-1: USB disconnect, device number 4 [ 267.791057][ T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 267.953696][ T4337] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.090598][ T4337] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.230560][ T6470] rxe_eth0 speed is unknown, defaulting to 1000 [ 271.006002][ T4302] Bluetooth: hci5: command 0x0409 tx timeout [ 272.199721][ T6506] loop4: detected capacity change from 0 to 4096 [ 272.293044][ T6506] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 272.404148][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 272.842686][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.893104][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.957561][ T6470] device bridge_slave_0 entered promiscuous mode [ 273.053047][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.060128][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.091199][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 273.121804][ T6470] device bridge_slave_1 entered promiscuous mode [ 273.239001][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.392597][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.411664][ T6524] loop3: detected capacity change from 0 to 256 [ 273.499736][ T6470] team0: Port device team_slave_0 added [ 273.528220][ T6470] team0: Port device team_slave_1 added [ 273.574829][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.597824][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.663882][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.480492][ T4337] device hsr_slave_0 left promiscuous mode [ 274.500194][ T4337] device hsr_slave_1 left promiscuous mode [ 274.523241][ T6540] loop0: detected capacity change from 0 to 256 [ 274.630380][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.728554][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.222081][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.467974][ T4894] Bluetooth: hci5: command 0x040f tx timeout [ 276.193313][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.341374][ T4337] device bridge_slave_1 left promiscuous mode [ 276.446161][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.685935][ T4337] device bridge_slave_0 left promiscuous mode [ 276.700847][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.820665][ T4337] device veth1_macvtap left promiscuous mode [ 276.857842][ T4337] device veth0_macvtap left promiscuous mode [ 276.895348][ T4337] device veth1_vlan left promiscuous mode [ 276.912084][ T4337] device veth0_vlan left promiscuous mode [ 277.105483][ T6547] loop2: detected capacity change from 0 to 4096 [ 277.241251][ T6547] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 277.571289][ T4894] Bluetooth: hci5: command 0x0419 tx timeout [ 279.822702][ T6564] nvmet_tcp: malformed ip/port passed: : [ 279.838624][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 279.901255][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 279.938015][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.992219][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.222457][ T4337] bond0 (unregistering): Released all slaves [ 280.281442][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.290723][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.397991][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.483779][ T6570] loop2: detected capacity change from 0 to 4096 [ 280.601070][ T6542] ima: policy update failed [ 280.605767][ T25] audit: type=1802 audit(1794108032.146:127): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.609" res=0 errno=0 [ 280.641272][ T6570] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 280.676658][ T6470] device hsr_slave_0 entered promiscuous mode [ 280.939309][ T6470] device hsr_slave_1 entered promiscuous mode [ 280.963807][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.107999][ T6470] Cannot create hsr debugfs directory [ 282.145144][ T6592] loop2: detected capacity change from 0 to 4096 [ 282.492309][ T6592] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 284.685288][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.962022][ T6604] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6604] [ 284.994946][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.624'. [ 285.665390][ T6606] loop2: detected capacity change from 0 to 256 [ 286.021619][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.077867][ T6611] nvmet_tcp: malformed ip/port passed: : [ 286.090972][ T21] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 286.100790][ T21] usb 1-1: can't read configurations, error -71 [ 287.555294][ T6470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.594450][ T6470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.327335][ T6470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.393034][ T6470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.852057][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.651904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.659815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.745173][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.775487][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.821358][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.876175][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.883308][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.036996][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.062697][ T6648] loop3: detected capacity change from 0 to 4096 [ 290.202424][ T6648] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 290.257312][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.436495][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.596744][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.603910][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.819242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.863956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.911656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.998464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.070296][ T6470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.131341][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.173705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.658308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.822290][ T6665] loop4: detected capacity change from 0 to 256 [ 291.861763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.925498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.193290][ T25] audit: type=1807 audit(1794108043.566:128): UNKNOWN=? res=0 [ 292.413605][ T6663] ima: policy update failed [ 292.506083][ T25] audit: type=1802 audit(1794108043.566:129): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.628" res=0 errno=0 [ 293.460166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.510964][ T25] audit: type=1802 audit(1794108043.956:130): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.628" res=0 errno=0 [ 293.694317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.870799][ T4265] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 293.885050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.128559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.268580][ T6683] nvmet_tcp: malformed ip/port passed: : [ 294.401274][ T4265] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 294.471979][ T4265] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 294.795942][ T6687] loop4: detected capacity change from 0 to 256 [ 294.811219][ T4265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.047934][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.245386][ T4265] usb 3-1: Product: syz [ 295.345630][ T4265] usb 3-1: Manufacturer: ᰉ [ 295.438884][ T4265] usb 3-1: SerialNumber: syz [ 296.820848][ T4265] usb 3-1: can't set config #1, error -71 [ 297.510896][ T4265] usb 3-1: USB disconnect, device number 7 [ 298.549876][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 298.591004][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 298.757054][ T6721] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6721] [ 298.788767][ T6721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.644'. [ 299.129232][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.379472][ T6597] usb 2-1: USB disconnect, device number 7 [ 301.500397][ T6745] loop0: detected capacity change from 0 to 4096 [ 301.688481][ T6745] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 301.711128][ T4266] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 301.986215][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.059924][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.288423][ T6470] device veth0_vlan entered promiscuous mode [ 302.310738][ T4266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.328761][ T4266] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.338189][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.359238][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.379096][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.381519][ T4266] usb 4-1: config 0 descriptor?? [ 302.583805][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.797264][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.035629][ T6470] device veth1_vlan entered promiscuous mode [ 303.072101][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.231936][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.234173][ T6768] nvmet_tcp: malformed ip/port passed: : [ 303.265453][ T6470] device veth0_macvtap entered promiscuous mode [ 303.277973][ T6470] device veth1_macvtap entered promiscuous mode [ 304.528529][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.542506][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.603482][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.627088][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.660979][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.238191][ T4266] usbhid 4-1:0.0: can't add hid device: -71 [ 305.257967][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.320024][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.331338][ T4266] usbhid: probe of 4-1:0.0 failed with error -71 [ 305.355798][ T4266] usb 4-1: USB disconnect, device number 16 [ 305.368206][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.379612][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.397667][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.407824][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.410506][ T6793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.424976][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.452680][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.464359][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.521510][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.552324][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.568473][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.593380][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.620737][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.634714][ T4261] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 305.639831][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.663442][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.683882][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.695416][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.705642][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.716493][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.727910][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.784276][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.825819][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.860839][ T6470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.876055][ T6470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.974817][ T6470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.041647][ T6470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.057343][ T6802] loop4: detected capacity change from 0 to 4096 [ 306.110830][ T4261] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.267121][ T6802] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 306.790905][ T4261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.670945][ T4261] usb 3-1: string descriptor 0 read error: -22 [ 307.677220][ T4261] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 307.698739][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.746751][ T145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.967700][ T145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.048246][ T145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.441131][ T4261] usb 3-1: current rate 47946 is different from the runtime rate 48000 [ 308.866182][ T4261] usb 3-1: USB disconnect, device number 8 [ 308.952745][ T145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.249683][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.208646][ T6848] loop2: detected capacity change from 0 to 4096 [ 311.416849][ T6839] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.451835][ T6848] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 313.227362][ T6597] Bluetooth: hci0: command 0x0409 tx timeout [ 313.831728][ T6879] loop5: detected capacity change from 0 to 7 [ 313.873815][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 313.883993][ T4182] Dev loop5: unable to read RDB block 7 [ 313.889844][ T4182] loop5: AHDI p3 p4 [ 313.916056][ T4182] loop5: partition table partially beyond EOD, truncated [ 313.953137][ T4182] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 314.064459][ T6879] Dev loop5: unable to read RDB block 7 [ 314.070073][ T6879] loop5: AHDI p3 p4 [ 314.094739][ T6879] loop5: partition table partially beyond EOD, truncated [ 314.133669][ T6879] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 314.204171][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.264121][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.286799][ T6839] device bridge_slave_0 entered promiscuous mode [ 314.491975][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.714074][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.892423][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 314.927411][ T6839] device bridge_slave_1 entered promiscuous mode [ 315.036846][ T145] device hsr_slave_0 left promiscuous mode [ 315.093519][ T145] device hsr_slave_1 left promiscuous mode [ 316.137265][ T4894] Bluetooth: hci0: command 0x041b tx timeout [ 316.371515][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.387906][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 316.421929][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.451743][ T6908] nvmet_tcp: malformed ip/port passed: : [ 316.460925][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.468366][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.509571][ T145] device bridge_slave_1 left promiscuous mode [ 316.510759][ T4266] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 316.520330][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.545410][ T145] device bridge_slave_0 left promiscuous mode [ 316.551759][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.580274][ T145] device veth1_macvtap left promiscuous mode [ 316.591751][ T6915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.596425][ T145] device veth0_macvtap left promiscuous mode [ 316.628045][ T145] device veth1_vlan left promiscuous mode [ 316.646739][ T145] device veth0_vlan left promiscuous mode [ 316.793723][ T6327] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 316.875424][ T145] team0 (unregistering): Port device team_slave_1 removed [ 316.890795][ T145] team0 (unregistering): Port device team_slave_0 removed [ 316.904508][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.919943][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.934739][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.941017][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.941046][ T4266] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 316.941095][ T4266] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 316.951873][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.970980][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.993531][ T4266] usb 4-1: config 0 descriptor?? [ 317.044039][ T4266] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 317.048270][ T145] bond0 (unregistering): Released all slaves [ 317.052363][ T4266] dvb-usb: bulk message failed: -22 (3/0) [ 317.069672][ T4266] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 317.086880][ T6895] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 317.091021][ T4266] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 317.102381][ T4266] usb 4-1: media controller created [ 317.124017][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.153252][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.173677][ T4266] dvb-usb: bulk message failed: -22 (6/0) [ 317.179684][ T4266] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 317.767189][ T6903] dvb-usb: bulk message failed: -22 (4/0) [ 317.804927][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.861268][ T6327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 317.979749][ T6933] loop2: detected capacity change from 0 to 4096 [ 318.010949][ T6327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.149855][ T6933] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 318.325901][ T4894] Bluetooth: hci0: command 0x040f tx timeout [ 318.340975][ T6327] usb 1-1: string descriptor 0 read error: -22 [ 318.347206][ T6327] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 318.352087][ T4266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 318.369432][ T4266] dvb-usb: schedule remote query interval to 150 msecs. [ 318.431171][ T6839] team0: Port device team_slave_0 added [ 318.437904][ T6327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.447055][ T4266] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 318.481645][ T4266] usb 4-1: USB disconnect, device number 17 [ 318.505308][ T6839] team0: Port device team_slave_1 added [ 318.545218][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.558998][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.596153][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.684459][ T4266] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 318.982085][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.004344][ T6944] misc userio: No port type given on /dev/userio [ 319.043470][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.177784][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.281897][ T6944] misc userio: The device must be registered before sending interrupts [ 319.309567][ T6839] device hsr_slave_0 entered promiscuous mode [ 319.430981][ T6327] usb 1-1: current rate 47946 is different from the runtime rate 48000 [ 319.504373][ T6839] device hsr_slave_1 entered promiscuous mode [ 319.551113][ T6839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.558697][ T6839] Cannot create hsr debugfs directory [ 319.702753][ T4284] usb 1-1: USB disconnect, device number 7 [ 319.906198][ T6839] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.918653][ T4266] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 320.104441][ T6839] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.175763][ T4266] usb 4-1: Using ep0 maxpacket: 16 [ 321.265517][ T4894] Bluetooth: hci0: command 0x0419 tx timeout [ 321.287788][ T6839] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.530812][ T4266] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.540575][ T6972] nvmet_tcp: malformed ip/port passed: : [ 321.610922][ T4266] usb 4-1: config 0 has an invalid interface number: 223 but max is 0 [ 322.672759][ T4266] usb 4-1: config 0 has no interface number 0 [ 322.679759][ T4266] usb 4-1: config 0 interface 223 has no altsetting 0 [ 322.756054][ T6839] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.770488][ T4266] usb 4-1: string descriptor 0 read error: -71 [ 322.780856][ T4266] usb 4-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=c4.49 [ 322.789922][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.862826][ T4266] usb 4-1: config 0 descriptor?? [ 323.618069][ T4266] usb 4-1: can't set config #0, error -71 [ 323.736117][ T4266] usb 4-1: USB disconnect, device number 18 [ 323.945948][ T6990] loop0: detected capacity change from 0 to 4096 [ 324.966231][ T6990] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 325.461772][ T6839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.773763][ T6839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.880109][ T6839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.916599][ T6839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.878753][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.573507][ T7032] nvmet_tcp: malformed ip/port passed: : [ 327.620825][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.649081][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.738069][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.826857][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.843567][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.899500][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.906655][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.055767][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.085352][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.114284][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.161263][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.168518][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.231415][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.342009][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.010423][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.213777][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.271275][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.309777][ T6839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.440694][ T6839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.510267][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.537464][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.602051][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.610944][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.620763][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.629506][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.713805][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.413226][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.461716][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.474639][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.594660][ T7112] nvmet: can only link subsystems into the subsystems dir.! [ 336.517729][ T7118] loop2: detected capacity change from 0 to 256 [ 336.547473][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.583587][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.676544][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.696345][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.815671][ T6839] device veth0_vlan entered promiscuous mode [ 336.859959][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.902724][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.627565][ T6839] device veth1_vlan entered promiscuous mode [ 337.646600][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 339.099990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.125892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.218244][ T7149] device syzkaller1 entered promiscuous mode [ 339.305556][ T6839] device veth0_macvtap entered promiscuous mode [ 339.363638][ T6839] device veth1_macvtap entered promiscuous mode [ 339.461774][ T7159] nvmet_tcp: malformed ip/port passed: : [ 339.474858][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.513713][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.554394][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.626478][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.688599][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.748937][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.819012][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.865020][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.900762][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.980751][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.027006][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.069072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 340.885600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.944845][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.988138][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.030278][ T7188] nvmet: can only link subsystems into the subsystems dir.! [ 341.038298][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.486602][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.607820][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.715078][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.860758][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.867626][ T7195] jffs2: notice: (7195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.923090][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.942781][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.983250][ T6839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.010828][ T6839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.086445][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.108067][ T7201] loop4: detected capacity change from 0 to 256 [ 342.182351][ T7193] netlink: 'syz.3.729': attribute type 2 has an invalid length. [ 342.210967][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.234762][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.774412][ T6839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.811060][ T6839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.860742][ T6839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.869467][ T6839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.067376][ T7213] nvmet_tcp: malformed ip/port passed: : [ 343.464894][ T145] device hsr_slave_0 left promiscuous mode [ 343.510425][ T145] device hsr_slave_1 left promiscuous mode [ 344.604805][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.655132][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.719787][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.746462][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.770302][ T145] device bridge_slave_1 left promiscuous mode [ 344.838030][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.882517][ T145] device bridge_slave_0 left promiscuous mode [ 344.919515][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.919429][ T145] device veth1_macvtap left promiscuous mode [ 345.936021][ T145] device veth0_macvtap left promiscuous mode [ 345.987473][ T145] device veth1_vlan left promiscuous mode [ 346.039253][ T145] device veth0_vlan left promiscuous mode [ 347.499150][ T145] team0 (unregistering): Port device team_slave_1 removed [ 347.548498][ T145] team0 (unregistering): Port device team_slave_0 removed [ 347.684146][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.748947][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.978125][ T145] bond0 (unregistering): Released all slaves [ 349.258476][ T7273] nvmet_tcp: malformed ip/port passed: : [ 350.478380][ T7282] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.771957][ T7300] jffs2: notice: (7300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.862312][ T7306] loop2: detected capacity change from 0 to 256 [ 353.104737][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 353.382492][ T4204] Bluetooth: Wrong link type (-22) [ 353.558528][ T7341] nvmet_tcp: malformed ip/port passed: : [ 353.594201][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 354.282543][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.325834][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.362008][ T7282] device bridge_slave_0 entered promiscuous mode [ 354.395865][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.437161][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.478938][ T7282] device bridge_slave_1 entered promiscuous mode [ 354.576104][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.658289][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.767633][ T7282] team0: Port device team_slave_0 added [ 354.776600][ T7282] team0: Port device team_slave_1 added [ 354.813977][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.829969][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.863572][ T7282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.879756][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.890610][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.927600][ T7282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.981415][ T7282] device hsr_slave_0 entered promiscuous mode [ 354.988248][ T7282] device hsr_slave_1 entered promiscuous mode [ 354.995226][ T7282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.003981][ T7282] Cannot create hsr debugfs directory [ 355.091976][ T7282] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.159858][ T7282] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.172624][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 355.226819][ T7282] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.310584][ T7282] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.436556][ T7282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 355.446046][ T7282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.455036][ T7282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.464699][ T7282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.532734][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.548656][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 355.562463][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 355.570196][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.588760][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.599602][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 355.608557][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.617900][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.625028][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.634796][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 355.650701][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 355.659398][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.668218][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.675330][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.695849][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.709238][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.722541][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.732064][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.741632][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.756153][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.765530][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.778247][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.787127][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.797441][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.808382][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.825565][ T7282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.920460][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.929771][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.944033][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.098804][ T145] device hsr_slave_0 left promiscuous mode [ 356.107968][ T145] device hsr_slave_1 left promiscuous mode [ 356.119016][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.127375][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.135497][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.142964][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.151014][ T145] device bridge_slave_1 left promiscuous mode [ 356.157241][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.165977][ T145] device bridge_slave_0 left promiscuous mode [ 356.172465][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.185961][ T145] device veth1_macvtap left promiscuous mode [ 356.192272][ T145] device veth0_macvtap left promiscuous mode [ 356.198449][ T145] device veth1_vlan left promiscuous mode [ 356.204448][ T145] device veth0_vlan left promiscuous mode [ 356.292183][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 357.431553][ T4302] Bluetooth: hci0: command 0x040f tx timeout [ 357.720013][ T7388] loop3: detected capacity change from 0 to 256 [ 359.328873][ T7404] nvmet_tcp: malformed ip/port passed: : [ 359.451998][ T145] team0 (unregistering): Port device team_slave_1 removed [ 359.472286][ T145] team0 (unregistering): Port device team_slave_0 removed [ 359.488445][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.497619][ T4894] Bluetooth: hci0: command 0x0419 tx timeout [ 359.526590][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.705172][ T145] bond0 (unregistering): Released all slaves [ 359.749343][ T7377] netlink: 'syz.0.771': attribute type 9 has an invalid length. [ 359.757725][ T7377] netlink: 'syz.0.771': attribute type 6 has an invalid length. [ 359.937820][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.997568][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.112294][ T7282] device veth0_vlan entered promiscuous mode [ 360.156754][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.191784][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.233201][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.272655][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.306082][ T7282] device veth1_vlan entered promiscuous mode [ 360.457442][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.478661][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.542098][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.591650][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.637243][ T7282] device veth0_macvtap entered promiscuous mode [ 360.668838][ T7282] device veth1_macvtap entered promiscuous mode [ 360.774030][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.813272][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.663723][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.980804][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.993058][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.005620][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.015970][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.039966][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.066021][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.081934][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.096345][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.137986][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.296743][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.648797][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.700578][ T7459] nvmet_tcp: malformed ip/port passed: : [ 363.709319][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.765030][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.811022][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.864378][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.912466][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.945528][ T7282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.980696][ T7282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.014683][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.036967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.056912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.094255][ T7282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.094293][ T7282] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.094321][ T7282] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.094348][ T7282] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.016005][ T7501] loop3: detected capacity change from 0 to 256 [ 365.656795][ T7493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.701418][ T7524] loop3: detected capacity change from 0 to 4096 [ 368.868017][ T7524] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 369.949380][ T7544] nvmet_tcp: malformed ip/port passed: : [ 370.974001][ T7547] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.292471][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 372.671832][ T7547] chnl_net:caif_netlink_parms(): no params data found [ 372.969623][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.089882][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.154589][ T7547] device bridge_slave_0 entered promiscuous mode [ 373.215735][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.252882][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.287675][ T7547] device bridge_slave_1 entered promiscuous mode [ 373.414726][ T7547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.458750][ T7593] jffs2: notice: (7593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 373.467242][ T7547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.639047][ T7547] team0: Port device team_slave_0 added [ 373.677649][ T7547] team0: Port device team_slave_1 added [ 373.828948][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.918591][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.020983][ T7547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.034995][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.042807][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.090908][ T7547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.169014][ T7612] loop3: detected capacity change from 0 to 256 [ 374.171196][ T7547] device hsr_slave_0 entered promiscuous mode [ 374.182466][ T7547] device hsr_slave_1 entered promiscuous mode [ 374.190063][ T7547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.198023][ T4204] Bluetooth: Wrong link type (-22) [ 374.206983][ T7547] Cannot create hsr debugfs directory [ 374.238551][ T145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.380753][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 374.689040][ T145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.798180][ T145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.858948][ T145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.951197][ T7639] loop2: detected capacity change from 0 to 4096 [ 377.159170][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 377.200839][ T7639] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 377.409871][ T7645] nvmet_tcp: malformed ip/port passed: : [ 378.885345][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.891707][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.236667][ T7547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.250786][ T4894] Bluetooth: hci0: command 0x0419 tx timeout [ 379.280134][ T7547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 379.305660][ T7547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 379.376804][ T7547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 379.650129][ T7547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.743545][ T7547] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.770850][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.837652][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.081380][ T145] device hsr_slave_0 left promiscuous mode [ 380.091692][ T145] device hsr_slave_1 left promiscuous mode [ 380.130009][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.159771][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.219023][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.239084][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.276806][ T145] device bridge_slave_1 left promiscuous mode [ 380.293474][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.632963][ T145] device bridge_slave_0 left promiscuous mode [ 380.639159][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.669012][ T145] device veth1_macvtap left promiscuous mode [ 380.678034][ T145] device veth0_macvtap left promiscuous mode [ 380.685506][ T145] device veth1_vlan left promiscuous mode [ 380.691922][ T145] device veth0_vlan left promiscuous mode [ 381.127388][ T145] team0 (unregistering): Port device team_slave_1 removed [ 381.162524][ T145] team0 (unregistering): Port device team_slave_0 removed [ 381.198319][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.242301][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.472830][ T145] bond0 (unregistering): Released all slaves [ 381.519385][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 381.531776][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 381.550453][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.557565][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.674174][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.731572][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.782987][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.790066][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.814469][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.848002][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.873512][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.691143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.785831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.970181][ T7718] loop4: detected capacity change from 0 to 4096 [ 384.055804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.229064][ T7718] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 384.272771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.457488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.626164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.639208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.672411][ T7724] nvmet_tcp: malformed ip/port passed: : [ 384.706271][ T7547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.731858][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.824'. [ 384.787349][ T7547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.838354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.851764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.920352][ T4204] Bluetooth: Wrong link type (-22) [ 385.217713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.237896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.314472][ T7547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.503362][ T7755] trusted_key: encrypted_key: insufficient parameters specified [ 386.326268][ T7759] loop0: detected capacity change from 0 to 256 [ 386.847186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.867573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.969614][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.002507][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.063556][ T7547] device veth0_vlan entered promiscuous mode [ 387.082870][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.517112][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.566621][ T7547] device veth1_vlan entered promiscuous mode [ 387.574151][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 387.636136][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 387.659324][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 387.671578][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 387.712109][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.730618][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.780129][ T7547] device veth0_macvtap entered promiscuous mode [ 387.798484][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 387.840239][ T7547] device veth1_macvtap entered promiscuous mode [ 387.880165][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.902744][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.938014][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.959905][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.015142][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.015166][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.015176][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.015190][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.015210][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.015223][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.038943][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.039518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.040011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.042597][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.042611][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.042628][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.042636][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.042641][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.042648][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.042655][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.042662][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.043482][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.043556][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.043922][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.050083][ T7547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.050119][ T7547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.050146][ T7547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.050174][ T7547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.801044][ T7793] loop2: detected capacity change from 0 to 4096 [ 390.299686][ T7793] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 390.778363][ T1108] ip6tnl0 speed is unknown, defaulting to 1000 [ 390.777502][ T7779] infiniband syz0: set active [ 390.821999][ T7779] infiniband syz0: added ip6tnl0 [ 390.877190][ T7779] infiniband syz0: Couldn't open port 1 [ 391.127248][ T7779] RDS/IB: syz0: added [ 391.160842][ T7779] smc: adding ib device syz0 with port count 1 [ 391.167081][ T7779] smc: ib device syz0 port 1 has pnetid [ 391.230834][ T4894] ip6tnl0 speed is unknown, defaulting to 1000 [ 391.237878][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 391.400401][ T7805] nvmet_tcp: malformed ip/port passed: : [ 392.073968][ T7814] loop2: detected capacity change from 0 to 256 [ 392.703366][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 392.793178][ T145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.612007][ T7820] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.722901][ T145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.812852][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 393.862349][ T145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.037158][ T145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.128645][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 394.770769][ T4894] Bluetooth: hci0: command 0x0409 tx timeout [ 395.077090][ T7849] nvmet_tcp: malformed ip/port passed: : [ 395.278217][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 395.648085][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.656543][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 395.664161][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.710864][ T7820] device bridge_slave_0 entered promiscuous mode [ 395.774175][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.829362][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.853676][ T7820] device bridge_slave_1 entered promiscuous mode [ 395.890330][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.200281][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.357114][ T7779] ip6tnl0 speed is unknown, defaulting to 1000 [ 396.450531][ T7882] FAULT_INJECTION: forcing a failure. [ 396.450531][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 396.455718][ T7820] team0: Port device team_slave_0 added [ 396.463865][ T7882] CPU: 0 PID: 7882 Comm: syz.3.855 Not tainted syzkaller #0 [ 396.476680][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 396.486770][ T7882] Call Trace: [ 396.490131][ T7882] [ 396.493174][ T7882] dump_stack_lvl+0x188/0x250 [ 396.498018][ T7882] ? show_regs_print_info+0x20/0x20 [ 396.503258][ T7882] ? load_image+0x410/0x410 [ 396.507855][ T7882] ? __lock_acquire+0x7d40/0x7d40 [ 396.513034][ T7882] should_fail+0x383/0x4b0 [ 396.515596][ T7820] team0: Port device team_slave_1 added [ 396.517603][ T7882] should_failslab+0x5/0x20 [ 396.527660][ T7882] slab_pre_alloc_hook+0x51/0xc0 [ 396.532779][ T7882] ? fanotify_add_mark+0x411/0xd30 [ 396.538002][ T7882] kmem_cache_alloc+0x3d/0x280 [ 396.542792][ T7882] fanotify_add_mark+0x411/0xd30 [ 396.547756][ T7882] ? fanotify_events_supported+0x1d7/0x2f0 [ 396.553609][ T7882] do_fanotify_mark+0xc4a/0xda0 [ 396.558496][ T7882] ? copy_fid_info_to_user+0x670/0x670 [ 396.563974][ T7882] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 396.569990][ T7882] ? lock_chain_count+0x20/0x20 [ 396.574906][ T7882] __x64_sys_fanotify_mark+0xb1/0xc0 [ 396.580303][ T7882] do_syscall_64+0x4c/0xa0 [ 396.584794][ T7882] ? clear_bhb_loop+0x30/0x80 [ 396.588452][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.589588][ T7882] ? clear_bhb_loop+0x30/0x80 [ 396.589619][ T7882] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.607151][ T7882] RIP: 0033:0x7f456f01db19 [ 396.611799][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.614465][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.631501][ T7882] RSP: 002b:00007f456d274028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 396.631528][ T7882] RAX: ffffffffffffffda RBX: 00007f456f2a3fa0 RCX: 00007f456f01db19 [ 396.631542][ T7882] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000004 [ 396.631554][ T7882] RBP: 00007f456f0b5b70 R08: 0000000000000000 R09: 0000000000000000 [ 396.631566][ T7882] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 396.631577][ T7882] R13: 00007f456f2a4038 R14: 00007f456f2a3fa0 R15: 00007fff4a9bb488 [ 396.631605][ T7882] [ 396.727667][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.801290][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.808387][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.851110][ T4894] Bluetooth: hci0: command 0x041b tx timeout [ 396.944879][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.274976][ T7820] device hsr_slave_0 entered promiscuous mode [ 398.312488][ T7820] device hsr_slave_1 entered promiscuous mode [ 398.353576][ T7820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.370709][ T7820] Cannot create hsr debugfs directory [ 398.930796][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 399.451073][ T145] device hsr_slave_0 left promiscuous mode [ 399.454545][ T145] device hsr_slave_1 left promiscuous mode [ 399.455188][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.455216][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.455887][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.455911][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.456433][ T145] device bridge_slave_1 left promiscuous mode [ 399.456549][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.462219][ T145] device bridge_slave_0 left promiscuous mode [ 399.462294][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.476468][ T145] device veth1_macvtap left promiscuous mode [ 399.704533][ T7937] nvmet_tcp: malformed ip/port passed: : [ 399.790766][ T145] device veth0_macvtap left promiscuous mode [ 399.796941][ T145] device veth1_vlan left promiscuous mode [ 399.817867][ T145] device veth0_vlan left promiscuous mode [ 401.150677][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 401.753161][ T145] team0 (unregistering): Port device team_slave_1 removed [ 401.778466][ T145] team0 (unregistering): Port device team_slave_0 removed [ 401.858964][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.947567][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.993189][ T7962] rdma_rxe: rxe_register_device failed with error -23 [ 402.113714][ T7962] rdma_rxe: failed to add ip6tnl0 [ 402.157824][ T145] bond0 (unregistering): Released all slaves [ 403.803836][ T7820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.043092][ T7820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 404.101357][ T7820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 404.141838][ T7820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.434548][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.474109][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.540691][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.581637][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.621155][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.640445][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.672012][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.679101][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.738311][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.770214][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.802055][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.851802][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.858900][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.982638][ T7993] nvmet_tcp: malformed ip/port passed: : [ 405.008809][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.082225][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.152659][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.232721][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.300573][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.372320][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.447240][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.514865][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.540223][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.597758][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.618477][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.664587][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.990155][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.020107][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.054676][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.483135][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 407.503634][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 407.540839][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 407.549565][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.665630][ T7820] device veth0_vlan entered promiscuous mode [ 407.696014][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.704777][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.756873][ T7820] device veth1_vlan entered promiscuous mode [ 407.854653][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.891873][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.965939][ T7820] device veth0_macvtap entered promiscuous mode [ 407.991381][ T7820] device veth1_macvtap entered promiscuous mode [ 408.039718][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.071909][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.071932][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.071963][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.071972][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.072038][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.072061][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.072075][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.082191][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.095630][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.095826][ T8054] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 408.096279][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.096837][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.097346][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.099590][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.099609][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.099621][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.099634][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.099643][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.099656][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.099668][ T7820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.099681][ T7820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.100632][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.107835][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.108500][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.111846][ T7820] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.111883][ T7820] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.111911][ T7820] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.111958][ T7820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.806773][ T8088] nvmet_tcp: malformed ip/port passed: : [ 411.279784][ T8092] autofs4:pid:8092:autofs_fill_super: called with bogus options [ 412.482919][ T8107] FAULT_INJECTION: forcing a failure. [ 412.482919][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 412.565558][ T8107] CPU: 0 PID: 8107 Comm: syz.2.890 Not tainted syzkaller #0 [ 412.573028][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 412.583193][ T8107] Call Trace: [ 412.586466][ T8107] [ 412.589383][ T8107] dump_stack_lvl+0x188/0x250 [ 412.594054][ T8107] ? show_regs_print_info+0x20/0x20 [ 412.599245][ T8107] ? load_image+0x410/0x410 [ 412.603738][ T8107] ? __lock_acquire+0x7d40/0x7d40 [ 412.608778][ T8107] should_fail+0x383/0x4b0 [ 412.613188][ T8107] should_failslab+0x5/0x20 [ 412.617696][ T8107] slab_pre_alloc_hook+0x51/0xc0 [ 412.622624][ T8107] ? fanotify_add_mark+0x411/0xd30 [ 412.627771][ T8107] kmem_cache_alloc+0x3d/0x280 [ 412.632526][ T8107] fanotify_add_mark+0x411/0xd30 [ 412.637450][ T8107] ? fanotify_events_supported+0x1d7/0x2f0 [ 412.643246][ T8107] do_fanotify_mark+0xc4a/0xda0 [ 412.648090][ T8107] ? copy_fid_info_to_user+0x670/0x670 [ 412.653536][ T8107] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 412.659507][ T8107] ? lock_chain_count+0x20/0x20 [ 412.664349][ T8107] __x64_sys_fanotify_mark+0xb1/0xc0 [ 412.669626][ T8107] do_syscall_64+0x4c/0xa0 [ 412.674026][ T8107] ? clear_bhb_loop+0x30/0x80 [ 412.678724][ T8107] ? clear_bhb_loop+0x30/0x80 [ 412.683415][ T8107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.689308][ T8107] RIP: 0033:0x7f3ff6a56b19 [ 412.693721][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.713417][ T8107] RSP: 002b:00007f3ff4cad028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 412.721822][ T8107] RAX: ffffffffffffffda RBX: 00007f3ff6cdcfa0 RCX: 00007f3ff6a56b19 [ 412.729802][ T8107] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000005 [ 412.737758][ T8107] RBP: 00007f3ff6aeeb70 R08: 0000000000000000 R09: 0000000000000000 [ 412.745714][ T8107] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 412.753667][ T8107] R13: 00007f3ff6cdd038 R14: 00007f3ff6cdcfa0 R15: 00007ffd5d36ed58 [ 412.761633][ T8107] [ 412.867961][ T4350] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.155741][ T4350] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.302474][ T4350] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.397343][ T4350] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.643077][ T4204] Bluetooth: Wrong link type (-22) [ 413.890204][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 414.233795][ T8135] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.270802][ T4302] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 414.510761][ T4302] usb 1-1: Using ep0 maxpacket: 8 [ 414.631070][ T4302] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.631101][ T4302] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 414.631149][ T4302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 414.631203][ T4302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 414.631299][ T4302] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 414.631341][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.672065][ T4302] hub 1-1:1.0: bad descriptor, ignoring hub [ 414.672095][ T4302] hub: probe of 1-1:1.0 failed with error -5 [ 414.672560][ T4302] cdc_wdm 1-1:1.0: skipping garbage [ 414.672586][ T4302] cdc_wdm 1-1:1.0: skipping garbage [ 414.674988][ T4302] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 414.675066][ T4302] cdc_wdm 1-1:1.0: Unknown control protocol [ 414.746978][ T8135] ip6tnl0 speed is unknown, defaulting to 1000 [ 416.756503][ T4350] device hsr_slave_0 left promiscuous mode [ 416.789473][ T4350] device hsr_slave_1 left promiscuous mode [ 416.829963][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.868194][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.906795][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.914832][ T6327] usb 1-1: USB disconnect, device number 8 [ 416.974521][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.022026][ T4350] device bridge_slave_1 left promiscuous mode [ 417.046244][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.125821][ T4350] device bridge_slave_0 left promiscuous mode [ 417.136989][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.191621][ T4350] device veth1_macvtap left promiscuous mode [ 417.220735][ T4350] device veth0_macvtap left promiscuous mode [ 417.226839][ T4350] device veth1_vlan left promiscuous mode [ 417.277049][ T4350] device veth0_vlan left promiscuous mode [ 417.427347][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 418.852454][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 418.937535][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 419.021485][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.106659][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.267567][ T8196] nvmet_tcp: malformed ip/port passed: : [ 419.474331][ T4350] bond0 (unregistering): Released all slaves [ 419.490900][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 419.948872][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 420.109537][ T8216] loop4: detected capacity change from 0 to 256 [ 420.140589][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.149003][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.158180][ T8135] device bridge_slave_0 entered promiscuous mode [ 420.173862][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.181591][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.190585][ T8135] device bridge_slave_1 entered promiscuous mode [ 420.241100][ T25] audit: type=1807 audit(1794108171.786:131): UNKNOWN=? res=0 [ 420.250896][ T25] audit: type=1802 audit(1794108171.786:132): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.909" res=0 errno=0 [ 420.280328][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.305525][ T25] audit: type=1326 audit(1794108171.816:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 420.869255][ T8215] ima: policy update failed [ 421.051338][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.103936][ T25] audit: type=1326 audit(1794108171.816:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.079356][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 422.160776][ T25] audit: type=1326 audit(1794108171.816:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.194218][ T8135] team0: Port device team_slave_0 added [ 422.254554][ T8135] team0: Port device team_slave_1 added [ 422.270738][ T25] audit: type=1326 audit(1794108171.816:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.361555][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.368523][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.403832][ T25] audit: type=1326 audit(1794108171.816:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.495967][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.513138][ T25] audit: type=1326 audit(1794108171.816:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.560845][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.567831][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.631078][ T25] audit: type=1326 audit(1794108171.816:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.701330][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.743364][ T25] audit: type=1326 audit(1794108171.816:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.3.906" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f01db19 code=0x7fc00000 [ 422.885112][ T8135] device hsr_slave_0 entered promiscuous mode [ 422.896280][ T8135] device hsr_slave_1 entered promiscuous mode [ 422.896787][ T8135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.896878][ T8135] Cannot create hsr debugfs directory [ 423.414214][ T4199] Bluetooth: Wrong link type (-22) [ 423.530518][ T8259] nvmet_tcp: malformed ip/port passed: : [ 423.830066][ T8273] Invalid option length (201) for dns_resolver key [ 423.885358][ T8135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.931757][ T8135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.973541][ T8135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 424.014456][ T8135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.142071][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 424.583366][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.672355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.698946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.726676][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.779936][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.794504][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.489865][ T8301] loop4: detected capacity change from 0 to 256 [ 425.496837][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.503968][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.569638][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.592830][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.621983][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.653841][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.660975][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.669794][ T25] kauditd_printk_skb: 41 callbacks suppressed [ 425.669831][ T25] audit: type=1807 audit(1794108177.206:182): UNKNOWN=? res=0 [ 425.702936][ T25] audit: type=1802 audit(1794108177.206:183): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.922" res=0 errno=0 [ 425.741127][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.752218][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.764163][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.767301][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.782850][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.783539][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 425.785943][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.786581][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.789867][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.803260][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.803968][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.814839][ T8135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.068545][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.317199][ T8300] ima: policy update failed [ 426.317598][ T25] audit: type=1802 audit(1794108177.856:184): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.922" res=0 errno=0 [ 426.537618][ T8329] nvmet_tcp: malformed ip/port passed: : [ 426.570996][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.625831][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.960104][ T8346] Invalid option length (201) for dns_resolver key [ 427.100125][ T4199] Bluetooth: Wrong link type (-22) [ 427.105478][ T4199] Bluetooth: hci4: link tx timeout [ 427.111151][ T4199] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 427.984008][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.011410][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.051188][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.080151][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.112003][ T8135] device veth0_vlan entered promiscuous mode [ 428.130091][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.162189][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.216836][ T8135] device veth1_vlan entered promiscuous mode [ 428.332243][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 428.896619][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 428.960456][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.991160][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.008072][ T8135] device veth0_macvtap entered promiscuous mode [ 429.083190][ T8135] device veth1_macvtap entered promiscuous mode [ 429.174644][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.225037][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.260743][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.288371][ T8385] loop3: detected capacity change from 0 to 256 [ 429.331004][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.366404][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.387288][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.444784][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.457247][ T25] audit: type=1807 audit(1794108181.006:185): UNKNOWN=? res=0 [ 429.477521][ T25] audit: type=1802 audit(1794108181.006:186): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.937" res=0 errno=0 [ 429.643228][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.852129][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.025929][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.118395][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.118503][ T8384] ima: policy update failed [ 430.133509][ T25] audit: type=1802 audit(1794108181.676:187): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.937" res=0 errno=0 [ 430.192353][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.224563][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.250731][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.267043][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.301245][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.322126][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.359349][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.391392][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.413730][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.452114][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 430.471179][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 430.508197][ T8135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.510148][ T8401] nvmet_tcp: malformed ip/port passed: : [ 430.526192][ T8135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.555150][ T8135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.588874][ T8135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.377055][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.527863][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.856783][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.949995][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.350273][ T8448] Invalid option length (201) for dns_resolver key [ 432.370573][ T8451] FAULT_INJECTION: forcing a failure. [ 432.370573][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 432.436891][ T8451] CPU: 1 PID: 8451 Comm: syz.0.942 Not tainted syzkaller #0 [ 432.444250][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 432.454325][ T8451] Call Trace: [ 432.457702][ T8451] [ 432.460647][ T8451] dump_stack_lvl+0x188/0x250 [ 432.465351][ T8451] ? show_regs_print_info+0x20/0x20 [ 432.470580][ T8451] ? load_image+0x410/0x410 [ 432.475114][ T8451] ? __lock_acquire+0x7d40/0x7d40 [ 432.480176][ T8451] should_fail+0x383/0x4b0 [ 432.484621][ T8451] should_failslab+0x5/0x20 [ 432.489140][ T8451] slab_pre_alloc_hook+0x51/0xc0 [ 432.494097][ T8451] ? fanotify_add_mark+0x411/0xd30 [ 432.499228][ T8451] kmem_cache_alloc+0x3d/0x280 [ 432.504024][ T8451] fanotify_add_mark+0x411/0xd30 [ 432.508992][ T8451] ? fanotify_events_supported+0x1d7/0x2f0 [ 432.514826][ T8451] do_fanotify_mark+0xc4a/0xda0 [ 432.519721][ T8451] ? copy_fid_info_to_user+0x670/0x670 [ 432.525196][ T8451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 432.531209][ T8451] ? lock_chain_count+0x20/0x20 [ 432.536088][ T8451] __x64_sys_fanotify_mark+0xb1/0xc0 [ 432.541399][ T8451] do_syscall_64+0x4c/0xa0 [ 432.545830][ T8451] ? clear_bhb_loop+0x30/0x80 [ 432.550521][ T8451] ? clear_bhb_loop+0x30/0x80 [ 432.555217][ T8451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 432.561128][ T8451] RIP: 0033:0x7ffa84b71b19 [ 432.565728][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.585348][ T8451] RSP: 002b:00007ffa82dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 432.593819][ T8451] RAX: ffffffffffffffda RBX: 00007ffa84df7fa0 RCX: 00007ffa84b71b19 [ 432.601798][ T8451] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000005 [ 432.609792][ T8451] RBP: 00007ffa84c09b70 R08: 0000000000000000 R09: 0000000000000000 [ 432.617783][ T8451] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 432.619694][ T8459] rxe_eth0 speed is unknown, defaulting to 1000 [ 432.625854][ T8451] R13: 00007ffa84df8038 R14: 00007ffa84df7fa0 R15: 00007fff09b9e188 [ 432.625887][ T8451] [ 432.733491][ T8468] loop4: detected capacity change from 0 to 256 [ 432.747164][ T4199] Bluetooth: Wrong link type (-22) [ 433.565945][ T8464] ima: policy update failed [ 434.101085][ T25] audit: type=1807 audit(1794108184.526:188): UNKNOWN=? res=0 [ 434.132587][ T25] audit: type=1802 audit(1794108184.526:189): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.948" res=0 errno=0 [ 434.243305][ T25] audit: type=1802 audit(1794108185.106:190): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.948" res=0 errno=0 [ 434.295097][ T8484] nvmet_tcp: malformed ip/port passed: : [ 434.323292][ T8459] ip6tnl0 speed is unknown, defaulting to 1000 [ 434.610836][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 435.445708][ T4199] Bluetooth: Wrong link type (-22) [ 435.451189][ T4199] Bluetooth: hci3: link tx timeout [ 435.456707][ T4199] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 435.768206][ T9] device hsr_slave_0 left promiscuous mode [ 435.799381][ T9] device hsr_slave_1 left promiscuous mode [ 435.830338][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.842653][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.869373][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.893456][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.901529][ T9] device bridge_slave_1 left promiscuous mode [ 435.913911][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.922874][ T9] device bridge_slave_0 left promiscuous mode [ 435.929190][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.955024][ T9] device veth1_macvtap left promiscuous mode [ 435.967862][ T9] device veth0_macvtap left promiscuous mode [ 435.983220][ T9] device veth1_vlan left promiscuous mode [ 435.994977][ T9] device veth0_vlan left promiscuous mode [ 436.378935][ T9] team0 (unregistering): Port device team_slave_1 removed [ 436.394713][ T9] team0 (unregistering): Port device team_slave_0 removed [ 436.418596][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.440573][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.487661][ T8538] loop3: detected capacity change from 0 to 256 [ 436.556409][ T9] bond0 (unregistering): Released all slaves [ 436.634249][ T25] audit: type=1807 audit(1794108188.176:191): UNKNOWN=? res=0 [ 436.691239][ T4302] Bluetooth: hci0: command 0x041b tx timeout [ 436.784219][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 436.855139][ T25] audit: type=1802 audit(1794108188.176:192): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.961" res=0 errno=0 [ 437.327088][ T8537] ima: policy update failed [ 437.331846][ T25] audit: type=1802 audit(1794108188.876:193): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.961" res=0 errno=0 [ 437.869496][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 437.876375][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 437.878847][ T8544] nvmet_tcp: malformed ip/port passed: : [ 438.033553][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.050581][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.103520][ T8459] device bridge_slave_0 entered promiscuous mode [ 438.113233][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.120323][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.128459][ T8459] device bridge_slave_1 entered promiscuous mode [ 438.209309][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.263357][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.354033][ T8459] team0: Port device team_slave_0 added [ 438.386640][ T8459] team0: Port device team_slave_1 added [ 439.880250][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.887159][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.985684][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.040841][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.167174][ T4302] Bluetooth: hci0: command 0x040f tx timeout [ 440.192351][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 440.198501][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 440.219983][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.237164][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.248045][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.276781][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.309883][ T8459] device hsr_slave_0 entered promiscuous mode [ 440.345765][ T8459] device hsr_slave_1 entered promiscuous mode [ 440.373278][ T8459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.386607][ T8459] Cannot create hsr debugfs directory [ 442.210979][ T4894] Bluetooth: hci5: command 0x1009 tx timeout [ 442.226211][ T4894] Bluetooth: hci0: command 0x0419 tx timeout [ 443.143575][ T8607] loop0: detected capacity change from 0 to 256 [ 443.269963][ T8459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.956751][ T8606] ima: policy update failed [ 443.964865][ T25] audit: type=1802 audit(1794108195.506:194): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.975" res=0 errno=0 [ 444.054302][ T8459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.155736][ T8459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.171437][ T4204] Bluetooth: Wrong link type (-22) [ 444.176709][ T4204] Bluetooth: hci4: link tx timeout [ 444.182084][ T4204] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 444.198465][ T8459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.206638][ T8617] nvmet_tcp: malformed ip/port passed: : [ 445.059528][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.172161][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.180221][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.208043][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.262844][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.278249][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.302660][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.309748][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.335462][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.348893][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.359541][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.373485][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.380630][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.395781][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.408081][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.470592][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.516576][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.535112][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.707334][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.727261][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.760954][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.002404][ T8652] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 446.186623][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.371773][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.401150][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.429143][ T8662] loop4: detected capacity change from 0 to 256 [ 446.453606][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.472064][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 447.267971][ T8661] ima: policy update failed [ 447.274087][ T25] audit: type=1802 audit(1794108198.816:195): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.986" res=0 errno=0 [ 447.405741][ T8676] nvmet_tcp: malformed ip/port passed: : [ 448.434456][ T4199] Bluetooth: Wrong link type (-22) [ 449.141554][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.156314][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.212772][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.430368][ T8721] loop3: detected capacity change from 0 to 256 [ 451.560849][ T8726] nvmet_tcp: malformed ip/port passed: : [ 451.832068][ T8720] ima: policy update failed [ 451.837506][ T25] audit: type=1802 audit(1794108203.376:196): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.997" res=0 errno=0 [ 452.158364][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.205049][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.319456][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.348978][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.407330][ T8459] device veth0_vlan entered promiscuous mode [ 452.422734][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.466929][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.504974][ T8459] device veth1_vlan entered promiscuous mode [ 453.171120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 453.442716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.481660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.538667][ T8459] device veth0_macvtap entered promiscuous mode [ 453.604718][ T8459] device veth1_macvtap entered promiscuous mode [ 454.302084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 454.310149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 454.378267][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.490716][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.500596][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.570726][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.631895][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.683490][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.723535][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.810774][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.891841][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.906818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.951501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.048997][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.113536][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.140796][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.268730][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.507702][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.770729][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.810873][ T8459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.886047][ T8459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.914255][ T4199] Bluetooth: Wrong link type (-22) [ 455.919480][ T4199] Bluetooth: hci4: link tx timeout [ 455.920101][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.924739][ T4199] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 456.208893][ T8459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.319484][ T8459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.403215][ T8459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.494292][ T8459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.670909][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.756542][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.598679][ T25] audit: type=1326 audit(1794108209.136:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 457.657371][ T8790] nvmet_tcp: malformed ip/port passed: : [ 457.780938][ T25] audit: type=1326 audit(1794108209.226:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 457.848859][ T25] audit: type=1326 audit(1794108209.226:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 459.042560][ T25] audit: type=1326 audit(1794108209.226:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 459.124674][ T25] audit: type=1326 audit(1794108209.226:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 459.274632][ T25] audit: type=1326 audit(1794108209.226:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 459.346620][ T4350] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.387878][ T25] audit: type=1326 audit(1794108209.226:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8791 comm="syz.0.1012" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa84b71b19 code=0x7ffc0000 [ 459.478409][ T4350] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.584384][ T4350] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.679490][ T4350] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.486902][ T8831] rxe_eth0 speed is unknown, defaulting to 1000 [ 461.728860][ T8837] loop2: detected capacity change from 0 to 256 [ 462.331166][ T25] audit: type=1807 audit(1794108213.566:204): UNKNOWN=? res=0 [ 462.561679][ T8836] ima: policy update failed [ 462.664036][ T25] audit: type=1802 audit(1794108213.566:205): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1011" res=0 errno=0 [ 462.835530][ T25] audit: type=1802 audit(1794108214.106:206): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1011" res=0 errno=0 [ 462.870902][ T8831] ip6tnl0 speed is unknown, defaulting to 1000 [ 463.552073][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 465.581033][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 465.631196][ T8857] nvmet_tcp: malformed ip/port passed: : [ 466.956520][ T8886] loop0: detected capacity change from 0 to 256 [ 467.984389][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 467.994653][ T4350] device hsr_slave_0 left promiscuous mode [ 468.041881][ T4350] device hsr_slave_1 left promiscuous mode [ 468.242534][ T8885] ima: policy update failed [ 468.411486][ T25] audit: type=1807 audit(1794108219.666:207): UNKNOWN=? res=0 [ 468.422790][ T25] audit: type=1802 audit(1794108219.666:208): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1030" res=0 errno=0 [ 468.451189][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.460322][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.480165][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.506383][ T25] audit: type=1802 audit(1794108219.786:209): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1030" res=0 errno=0 [ 468.545587][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.580281][ T4350] device bridge_slave_1 left promiscuous mode [ 468.641053][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.674900][ T4350] device bridge_slave_0 left promiscuous mode [ 468.693950][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.822387][ T4350] device veth1_macvtap left promiscuous mode [ 468.828485][ T4350] device veth0_macvtap left promiscuous mode [ 468.871654][ T4350] device veth1_vlan left promiscuous mode [ 468.877483][ T4350] device veth0_vlan left promiscuous mode [ 470.160048][ T4302] Bluetooth: hci0: command 0x0419 tx timeout [ 470.913924][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 471.741558][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 471.810441][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.849076][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.245718][ T4350] bond0 (unregistering): Released all slaves [ 473.308177][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 473.488693][ T8943] loop3: detected capacity change from 0 to 256 [ 473.498774][ T8831] chnl_net:caif_netlink_parms(): no params data found [ 473.693874][ T25] audit: type=1807 audit(1794108225.236:210): UNKNOWN=? res=0 [ 473.724187][ T25] audit: type=1802 audit(1794108225.236:211): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1042" res=0 errno=0 [ 474.318212][ T8940] ima: policy update failed [ 474.419162][ T25] audit: type=1802 audit(1794108225.866:212): pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1042" res=0 errno=0 [ 475.206672][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.675225][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.708235][ T8831] device bridge_slave_0 entered promiscuous mode [ 476.331936][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.371102][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.379459][ T8831] device bridge_slave_1 entered promiscuous mode [ 476.934043][ T8981] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 476.957432][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.013055][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.180447][ T8831] team0: Port device team_slave_0 added [ 478.215318][ T8831] team0: Port device team_slave_1 added [ 478.234937][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 478.328675][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.343137][ T9000] loop4: detected capacity change from 0 to 256 [ 478.360965][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.387090][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.495185][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.565700][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.624574][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.650676][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.137003][ T8999] ima: policy update failed [ 479.201906][ T25] audit: type=1802 audit(1794108230.686:213): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1054" res=0 errno=0 [ 479.203106][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.554497][ T8831] device hsr_slave_0 entered promiscuous mode [ 479.616915][ T8831] device hsr_slave_1 entered promiscuous mode [ 480.496032][ T8831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.504427][ T8831] Cannot create hsr debugfs directory [ 482.842156][ T8831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.956270][ T8831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 483.016066][ T8831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 483.045464][ T8831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 483.266294][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.309979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.333947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.376462][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.485416][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.508877][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.545700][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.552874][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.621812][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.358177][ T8831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.404095][ T8831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.423732][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.452711][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.481513][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.488713][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.521428][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.661487][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.676525][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.707119][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.732128][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.748036][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.761043][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.782374][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.821918][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.830557][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.840173][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.848569][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.856301][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 484.863312][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 485.143195][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.231200][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.269523][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.451668][ T9078] loop3: detected capacity change from 0 to 256 [ 485.697789][ T9088] ================================================================== [ 485.697916][ T9088] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 485.698065][ T9088] Read of size 8 at addr ffff88802a3f4e18 by task syz.4.1065/9088 [ 485.698091][ T9088] [ 485.698128][ T9088] CPU: 0 PID: 9088 Comm: syz.4.1065 Not tainted syzkaller #0 [ 485.698181][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 485.698194][ T9088] Call Trace: [ 485.698201][ T9088] [ 485.698211][ T9088] dump_stack_lvl+0x188/0x250 [ 485.698243][ T9088] ? show_regs_print_info+0x20/0x20 [ 485.698266][ T9088] ? _printk+0xda/0x130 [ 485.698298][ T9088] ? dvb_device_open+0xc5/0x360 [ 485.698327][ T9088] ? load_image+0x410/0x410 [ 485.698349][ T9088] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 485.698380][ T9088] print_address_description+0x60/0x2d0 [ 485.698407][ T9088] ? dvb_device_open+0xc5/0x360 [ 485.698430][ T9088] kasan_report+0xdf/0x130 [ 485.698487][ T9088] ? dvb_device_open+0xc5/0x360 [ 485.698519][ T9088] dvb_device_open+0xc5/0x360 [ 485.698549][ T9088] chrdev_open+0x585/0x5f0 [ 485.698609][ T9088] ? cd_forget+0x160/0x160 [ 485.698634][ T9088] ? fsnotify_perm+0x3a7/0x560 [ 485.698699][ T9088] ? cd_forget+0x160/0x160 [ 485.698721][ T9088] do_dentry_open+0x7f7/0xf90 [ 485.698745][ T9088] ? vfs_open+0x2b/0x80 [ 485.698770][ T9088] path_openat+0x2718/0x2fb0 [ 485.698842][ T9088] ? __kasan_slab_alloc+0xa9/0xc0 [ 485.698874][ T9088] ? do_filp_open+0x400/0x400 [ 485.698916][ T9088] do_filp_open+0x1df/0x400 [ 485.698944][ T9088] ? vfs_tmpfile+0x300/0x300 [ 485.698987][ T9088] ? _raw_spin_unlock+0x24/0x40 [ 485.699007][ T9088] ? alloc_fd+0x59e/0x650 [ 485.699042][ T9088] do_sys_openat2+0x14b/0x500 [ 485.699062][ T9088] ? __lock_acquire+0x7d40/0x7d40 [ 485.699088][ T9088] ? do_sys_open+0xe0/0xe0 [ 485.699108][ T9088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 485.699136][ T9088] ? lock_chain_count+0x20/0x20 [ 485.699166][ T9088] __x64_sys_openat+0x135/0x160 [ 485.699192][ T9088] do_syscall_64+0x4c/0xa0 [ 485.699211][ T9088] ? clear_bhb_loop+0x30/0x80 [ 485.699231][ T9088] ? clear_bhb_loop+0x30/0x80 [ 485.699253][ T9088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.699283][ T9088] RIP: 0033:0x7f3191ef534e [ 485.699302][ T9088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.699320][ T9088] RSP: 002b:00007f3190148b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 485.699344][ T9088] RAX: ffffffffffffffda RBX: 00007f31901496c0 RCX: 00007f3191ef534e [ 485.699360][ T9088] RDX: 0000000000000002 RSI: 00007f3190148c00 RDI: ffffffffffffff9c [ 485.699376][ T9088] RBP: 00007f3190148c00 R08: 0000000000000000 R09: 0000000000000000 [ 485.699390][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 485.699405][ T9088] R13: 00007f31921bb218 R14: 00007f31921bb180 R15: 00007ffd14793708 [ 485.699436][ T9088] [ 485.699444][ T9088] [ 485.699450][ T9088] Allocated by task 1: [ 485.699490][ T9088] __kasan_kmalloc+0xaf/0xe0 [ 485.699511][ T9088] dvb_register_device+0x300/0x1dc0 [ 485.699534][ T9088] dvb_register_frontend+0x629/0x900 [ 485.699552][ T9088] vidtv_bridge_probe+0x9c1/0xf30 [ 485.699611][ T9088] platform_probe+0x137/0x1c0 [ 485.699675][ T9088] really_probe+0x276/0xc70 [ 485.699725][ T9088] __driver_probe_device+0x1f5/0x390 [ 485.699747][ T9088] driver_probe_device+0x4f/0x420 [ 485.699768][ T9088] __driver_attach+0x45d/0x660 [ 485.699787][ T9088] bus_for_each_dev+0x182/0x1f0 [ 485.699807][ T9088] bus_add_driver+0x324/0x5d0 [ 485.699825][ T9088] driver_register+0x32d/0x430 [ 485.699841][ T9088] vidtv_bridge_init+0x45/0x80 [ 485.699951][ T9088] do_one_initcall+0x272/0x730 [ 485.700018][ T9088] do_initcall_level+0x13d/0x1f0 [ 485.700051][ T9088] do_initcalls+0x4b/0x90 [ 485.700070][ T9088] kernel_init_freeable+0x3d5/0x560 [ 485.700091][ T9088] kernel_init+0x19/0x1b0 [ 485.700110][ T9088] ret_from_fork+0x1f/0x30 [ 485.700129][ T9088] [ 485.700134][ T9088] Freed by task 8981: [ 485.700144][ T9088] kasan_set_track+0x4b/0x70 [ 485.700163][ T9088] kasan_set_free_info+0x1f/0x40 [ 485.700184][ T9088] ____kasan_slab_free+0xd5/0x110 [ 485.700204][ T9088] slab_free_freelist_hook+0xec/0x170 [ 485.700223][ T9088] kfree+0xef/0x2a0 [ 485.700239][ T9088] dvb_device_open+0x2d2/0x360 [ 485.700261][ T9088] chrdev_open+0x585/0x5f0 [ 485.700287][ T9088] do_dentry_open+0x7f7/0xf90 [ 485.700303][ T9088] path_openat+0x2718/0x2fb0 [ 485.700322][ T9088] do_filp_open+0x1df/0x400 [ 485.700341][ T9088] do_sys_openat2+0x14b/0x500 [ 485.700357][ T9088] __x64_sys_openat+0x135/0x160 [ 485.700374][ T9088] do_syscall_64+0x4c/0xa0 [ 485.700391][ T9088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.700412][ T9088] [ 485.700417][ T9088] The buggy address belongs to the object at ffff88802a3f4e00 [ 485.700417][ T9088] which belongs to the cache kmalloc-256 of size 256 [ 485.700466][ T9088] The buggy address is located 24 bytes inside of [ 485.700466][ T9088] 256-byte region [ffff88802a3f4e00, ffff88802a3f4f00) [ 485.700487][ T9088] The buggy address belongs to the page: [ 485.700502][ T9088] page:ffffea0000a8fd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a3f4 [ 485.700525][ T9088] head:ffffea0000a8fd00 order:1 compound_mapcount:0 [ 485.700538][ T9088] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 485.700568][ T9088] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841b40 [ 485.700587][ T9088] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 485.700598][ T9088] page dumped because: kasan: bad access detected [ 485.700612][ T9088] page_owner tracks the page as allocated [ 485.700623][ T9088] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 15425070823, free_ts 0 [ 485.700655][ T9088] get_page_from_freelist+0x24f6/0x2670 [ 485.700683][ T9088] __alloc_pages+0x1ee/0x480 [ 485.700702][ T9088] alloc_page_interleave+0x24/0x1e0 [ 485.700729][ T9088] new_slab+0xc0/0x4b0 [ 485.700746][ T9088] ___slab_alloc+0x807/0xdd0 [ 485.700763][ T9088] __kmalloc_node+0x142/0x3a0 [ 485.700780][ T9088] kvmalloc_node+0x84/0x130 [ 485.700826][ T9088] v4l2_ctrl_new+0x70f/0x1310 [ 485.700874][ T9088] v4l2_ctrl_new_std+0x247/0x300 [ 485.700895][ T9088] handler_new_ref+0x14f/0x8d0 [ 485.700916][ T9088] v4l2_ctrl_add_handler+0x197/0x280 [ 485.700939][ T9088] vivid_create_controls+0x2a05/0x3380 [ 485.700986][ T9088] vivid_probe+0x39ff/0x6240 [ 485.701004][ T9088] platform_probe+0x137/0x1c0 [ 485.701022][ T9088] really_probe+0x276/0xc70 [ 485.701043][ T9088] __driver_probe_device+0x1f5/0x390 [ 485.701065][ T9088] page_owner free stack trace missing [ 485.701073][ T9088] [ 485.701077][ T9088] Memory state around the buggy address: [ 485.701116][ T9088] ffff88802a3f4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.701130][ T9088] ffff88802a3f4d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.701144][ T9088] >ffff88802a3f4e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.701154][ T9088] ^ [ 485.701165][ T9088] ffff88802a3f4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.701179][ T9088] ffff88802a3f4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.701189][ T9088] ================================================================== [ 485.701198][ T9088] Disabling lock debugging due to kernel taint [ 485.701312][ T9088] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 485.701324][ T9088] CPU: 0 PID: 9088 Comm: syz.4.1065 Tainted: G B syzkaller #0 [ 485.701344][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 485.701355][ T9088] Call Trace: [ 485.701361][ T9088] [ 485.701368][ T9088] dump_stack_lvl+0x188/0x250 [ 485.701393][ T9088] ? show_regs_print_info+0x20/0x20 [ 485.701415][ T9088] ? load_image+0x410/0x410 [ 485.701442][ T9088] panic+0x2f8/0x850 [ 485.701460][ T9088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.701483][ T9088] ? bpf_jit_dump+0xd0/0xd0 [ 485.701504][ T9088] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 485.701523][ T9088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 485.701542][ T9088] ? _raw_spin_unlock+0x40/0x40 [ 485.701560][ T9088] ? dvb_device_open+0xc5/0x360 [ 485.701582][ T9088] check_panic_on_warn+0x80/0xa0 [ 485.701667][ T9088] ? dvb_device_open+0xc5/0x360 [ 485.701688][ T9088] end_report+0x6d/0xf0 [ 485.701709][ T9088] kasan_report+0x102/0x130 [ 485.701729][ T9088] ? dvb_device_open+0xc5/0x360 [ 485.701754][ T9088] dvb_device_open+0xc5/0x360 [ 485.701776][ T9088] chrdev_open+0x585/0x5f0 [ 485.701799][ T9088] ? cd_forget+0x160/0x160 [ 485.701820][ T9088] ? fsnotify_perm+0x3a7/0x560 [ 485.701841][ T9088] ? cd_forget+0x160/0x160 [ 485.701861][ T9088] do_dentry_open+0x7f7/0xf90 [ 485.701879][ T9088] ? vfs_open+0x2b/0x80 [ 485.701898][ T9088] path_openat+0x2718/0x2fb0 [ 485.701926][ T9088] ? __kasan_slab_alloc+0xa9/0xc0 [ 485.701949][ T9088] ? do_filp_open+0x400/0x400 [ 485.701976][ T9088] do_filp_open+0x1df/0x400 [ 485.701997][ T9088] ? vfs_tmpfile+0x300/0x300 [ 485.702025][ T9088] ? _raw_spin_unlock+0x24/0x40 [ 485.702042][ T9088] ? alloc_fd+0x59e/0x650 [ 485.702063][ T9088] do_sys_openat2+0x14b/0x500 [ 485.702080][ T9088] ? __lock_acquire+0x7d40/0x7d40 [ 485.702102][ T9088] ? do_sys_open+0xe0/0xe0 [ 485.702119][ T9088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 485.702149][ T9088] ? lock_chain_count+0x20/0x20 [ 485.702172][ T9088] __x64_sys_openat+0x135/0x160 [ 485.702192][ T9088] do_syscall_64+0x4c/0xa0 [ 485.702210][ T9088] ? clear_bhb_loop+0x30/0x80 [ 485.702229][ T9088] ? clear_bhb_loop+0x30/0x80 [ 485.702249][ T9088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.702275][ T9088] RIP: 0033:0x7f3191ef534e [ 485.702292][ T9088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.702308][ T9088] RSP: 002b:00007f3190148b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 485.702329][ T9088] RAX: ffffffffffffffda RBX: 00007f31901496c0 RCX: 00007f3191ef534e [ 485.702344][ T9088] RDX: 0000000000000002 RSI: 00007f3190148c00 RDI: ffffffffffffff9c [ 485.702358][ T9088] RBP: 00007f3190148c00 R08: 0000000000000000 R09: 0000000000000000 [ 485.702371][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 485.702384][ T9088] R13: 00007f31921bb218 R14: 00007f31921bb180 R15: 00007ffd14793708 [ 485.702405][ T9088] [ 485.702659][ T9088] Kernel Offset: disabled [ 486.710697][ T9088] Rebooting in 86400 seconds..