last executing test programs: 15.712314468s ago: executing program 4 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x44800) 12.392627127s ago: executing program 4 (id=313): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x3, 0xff, 0x66c3}, 0x20) 10.241384579s ago: executing program 0 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 10.144514821s ago: executing program 1 (id=320): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) r3 = accept(r2, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0x12, &(0x7f0000000340)={0x0}}, 0x80) 9.052230551s ago: executing program 0 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x44800) 8.316073159s ago: executing program 1 (id=327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.314823929s ago: executing program 2 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) 7.189129466s ago: executing program 3 (id=329): socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x3ac) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) msgctl$MSG_INFO(r0, 0xc, 0x0) socket(0x1d, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 5.791199496s ago: executing program 0 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4.50619279s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r3, &(0x7f0000000100)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) sendmsg(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000018c0)="90cb8c693dc85bf6422208a587fceb969024deee39f9828d22f6d688724429fd43b6c4561039fc8f5bb75fe94d4969e0ee9fe0e2334ae0fb2ebcf3408611ee16022b24ec96d71c67a315", 0x4a}], 0x1}, 0x4011) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)=0x7) 4.456436392s ago: executing program 2 (id=332): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.961756675s ago: executing program 4 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 3.736202936s ago: executing program 1 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 3.176058714s ago: executing program 2 (id=335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2.988422287s ago: executing program 0 (id=336): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x3e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 2.860342366s ago: executing program 4 (id=337): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.849482369s ago: executing program 3 (id=338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', r1, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@mpls_uc={0x8847, {[], @llc={@llc={0x30, 0x4e, 't'}}}}}}, 0x0) 2.574440192s ago: executing program 0 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 2.528442722s ago: executing program 1 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x44800) 2.528284832s ago: executing program 3 (id=341): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) 2.49756809s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = dup3(r1, r1, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in6={0xa, 0x4e22, 0xfffff8e4, @private1, 0x7f}, @in6={0xa, 0x4e20, 0x1ff, @loopback, 0x3}, @in={0x2, 0x4e20, @remote}], 0x64) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f0000005000/0x3000)=nil, 0xb000, 0x3}) fcntl$dupfd(r4, 0x0, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) 1.240339017s ago: executing program 3 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x3, 0xff, 0x66c3}, 0x20) 1.240032147s ago: executing program 1 (id=344): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0, 0x44}, 0x7, 0x0, 0x0, 0x20000087}, 0x0) 1.121278544s ago: executing program 4 (id=345): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='ubifs\x00', 0x208400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.120041934s ago: executing program 3 (id=346): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 260.903691ms ago: executing program 0 (id=347): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r0, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x24}}, 0x20000004) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) 118.761033ms ago: executing program 4 (id=348): socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x3ac) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) msgctl$MSG_INFO(r0, 0xc, 0x0) socket(0x1d, 0x803, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 70.844044ms ago: executing program 2 (id=349): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x3e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 274.29µs ago: executing program 3 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 0s ago: executing program 2 (id=351): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 39.614387][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.628484][ T3852] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. syzkaller login: [ 57.709119][ T4173] cgroup: Unknown subsys name 'net' [ 57.825774][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.249541][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.653214][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 60.717809][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.754762][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 60.779322][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.852503][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.859670][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.868013][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.881563][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.913331][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.920597][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.928636][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.969455][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.979675][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.987643][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.999803][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.007337][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.015665][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.052557][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.064673][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.098668][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.113243][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.121040][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.128929][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.136501][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.143890][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.151786][ T4197] device bridge_slave_0 entered promiscuous mode [ 61.165651][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.180662][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.187718][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.195700][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.202834][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.209947][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.217982][ T4197] device bridge_slave_1 entered promiscuous mode [ 61.227334][ T4189] team0: Port device team_slave_0 added [ 61.265506][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.276692][ T4189] team0: Port device team_slave_1 added [ 61.287939][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.295411][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.303527][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.312806][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.335038][ T4186] team0: Port device team_slave_0 added [ 61.341723][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.348796][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.357325][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.376645][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.394146][ T4186] team0: Port device team_slave_1 added [ 61.402637][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.421325][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.439618][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.455699][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.463032][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.489470][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.508487][ T4187] team0: Port device team_slave_0 added [ 61.516379][ T4187] team0: Port device team_slave_1 added [ 61.534346][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.541494][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.567693][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.601817][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.608788][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.635514][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.649562][ T4188] team0: Port device team_slave_0 added [ 61.655813][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.663710][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.690208][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.724280][ T4197] team0: Port device team_slave_0 added [ 61.735499][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.742704][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.759638][ T4188] team0: Port device team_slave_1 added [ 61.770049][ T4197] team0: Port device team_slave_1 added [ 61.776795][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.784324][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.810615][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.825689][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.832899][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.859723][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.906842][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.914095][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.940222][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.957950][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.965167][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.991499][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.003582][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.010773][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.036874][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.049164][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.056398][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.082563][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.129380][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.136282][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.143212][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.151381][ T4186] Cannot create hsr debugfs directory [ 62.191317][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.198019][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.205304][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.213125][ T4187] Cannot create hsr debugfs directory [ 62.254752][ T4197] device hsr_slave_0 entered promiscuous mode [ 62.262604][ T4197] device hsr_slave_1 entered promiscuous mode [ 62.269464][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.277167][ T4197] Cannot create hsr debugfs directory [ 62.311547][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.318217][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.327692][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.335501][ T4188] Cannot create hsr debugfs directory [ 62.411323][ T4192] Bluetooth: hci3: command 0x0409 tx timeout [ 62.420915][ T2302] Bluetooth: hci4: command 0x0409 tx timeout [ 62.440636][ T2302] Bluetooth: hci2: command 0x0409 tx timeout [ 62.447291][ T2302] Bluetooth: hci0: command 0x0409 tx timeout [ 62.457465][ T2302] Bluetooth: hci1: command 0x0409 tx timeout [ 62.598774][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.610811][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.619890][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.630116][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.676473][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.686552][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.696014][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.711876][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.792423][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.801532][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.814311][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.832928][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.857849][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.901725][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.909575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.920072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.936580][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.948192][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.965470][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.975633][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.984917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.995698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.006013][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.013241][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.022866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.042766][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.067426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.076456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.086456][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.093668][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.101632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.116635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.125214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.154003][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.163117][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.187916][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.197332][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.206442][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.215737][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.231618][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.245111][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.261780][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.269560][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.279695][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.288390][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.295511][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.303731][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.312348][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.320632][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.329240][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.337781][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.344869][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.352805][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.362316][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.370970][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.384339][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.394576][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.417233][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.436203][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.445543][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.479513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.492053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.503924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.517426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.528364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.546891][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.557469][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.584009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.594482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.605489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.614756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.643750][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.681144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.717206][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.727838][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.740083][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.748834][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.765354][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.777837][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.787918][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.811666][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.818670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.836151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.846576][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.853718][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.863460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.887475][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.897477][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.906624][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.915363][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.927441][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.940891][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.960065][ T4187] device veth0_vlan entered promiscuous mode [ 63.968400][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.977727][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.986364][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.993466][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.001309][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.009065][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.017343][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.026344][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.034831][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.043131][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.068821][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.077655][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.085372][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.096324][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.106705][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.113929][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.122003][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.130773][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.139114][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.146201][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.154165][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.163012][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.172869][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.179913][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.187755][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.196746][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.205346][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.212444][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.220126][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.228877][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.243167][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.269105][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.279778][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.289127][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.301745][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.310335][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.319010][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.328023][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.336855][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.345780][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.357319][ T4187] device veth1_vlan entered promiscuous mode [ 64.378052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.386495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.395381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.406823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.415960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.424938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.442972][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.475300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.485053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.496776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.500999][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 64.507975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.520543][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 64.525717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.526632][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 64.537373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.551851][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 64.556608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.557949][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 64.568395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.582611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.591658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.600309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.608843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.638726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.651569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.660310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.679570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.688655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.698567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.707857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.716074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.724743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.733585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.753104][ T4189] device veth0_vlan entered promiscuous mode [ 64.773953][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.786992][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.796366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.805675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.815177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.824152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.832886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.840979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.853341][ T4187] device veth0_macvtap entered promiscuous mode [ 64.864325][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.873212][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.888689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.897923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.906963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.925350][ T4189] device veth1_vlan entered promiscuous mode [ 64.938511][ T4187] device veth1_macvtap entered promiscuous mode [ 64.981699][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.993033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.017335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.053725][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.071175][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.084265][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.093351][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.103257][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.112899][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.121755][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.136132][ T4189] device veth0_macvtap entered promiscuous mode [ 65.158332][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.173862][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.187291][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.199627][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.226177][ T4197] device veth0_vlan entered promiscuous mode [ 65.235503][ T4189] device veth1_macvtap entered promiscuous mode [ 65.247062][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.269500][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.278809][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.287408][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.296338][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.304441][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.319940][ T4197] device veth1_vlan entered promiscuous mode [ 65.347333][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.356656][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.364505][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.377115][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.388067][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.400692][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.422076][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.435982][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.445319][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.455044][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.463075][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.473239][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.485383][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.497036][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.517236][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.540285][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.553284][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.563118][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.583023][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.593343][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.602537][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.612436][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.648251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.668069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.722900][ T4197] device veth0_macvtap entered promiscuous mode [ 65.730729][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.739442][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.748401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.769365][ T4186] device veth0_vlan entered promiscuous mode [ 65.769443][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.790277][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.801830][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.821158][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.829750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.838601][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.846967][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.865306][ T4197] device veth1_macvtap entered promiscuous mode [ 65.908510][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.924595][ T4186] device veth1_vlan entered promiscuous mode [ 65.947454][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.958239][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.968476][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.979133][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.990962][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.023417][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.033105][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.045140][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.056390][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.066299][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.076901][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.088142][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.111307][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.119160][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.137136][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.147204][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.156630][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.164531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.174591][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.186402][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195946][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.204716][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.213913][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.233538][ T4188] device veth0_vlan entered promiscuous mode [ 66.262315][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.267805][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.289378][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.292413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.305905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.325989][ T4188] device veth1_vlan entered promiscuous mode [ 66.354927][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.366588][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.375222][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.385767][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.395783][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.213859][ T4186] device veth0_macvtap entered promiscuous mode [ 67.214894][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 67.245214][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.276693][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.332697][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 67.338817][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 67.343938][ T4186] device veth1_macvtap entered promiscuous mode [ 67.345325][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 67.351719][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.357394][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 67.421130][ T4188] device veth0_macvtap entered promiscuous mode [ 67.434208][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.459144][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.491411][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.595386][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.637055][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.711271][ T4188] device veth1_macvtap entered promiscuous mode [ 67.772045][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.893632][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.965183][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.023390][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.065913][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.105629][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.143274][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.183668][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.271898][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.329765][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.367944][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.406469][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.439603][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.484527][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.496136][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.513235][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.525188][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.535992][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.546707][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.558337][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.580097][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.603528][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.613520][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.625255][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.643268][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.655026][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.665457][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.676115][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.687753][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.697400][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.706334][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.715429][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.724627][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.738181][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.748476][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.762506][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.771875][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.787303][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.798320][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.798454][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.813033][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.815177][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.832009][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.842740][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.853159][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.863726][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.873610][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.885928][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.897439][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.912736][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.920765][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.920927][ T4266] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.929671][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.975579][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.985704][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.994920][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.004507][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.141834][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.150296][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.164151][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.200775][ T4231] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 69.229767][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.243229][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.249635][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.258660][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.286889][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.302256][ T4286] Zero length message leads to an empty skb [ 69.303487][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.308473][ T4266] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 69.337806][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.340780][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.352138][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.368601][ T4266] usb 3-1: config 0 descriptor?? [ 69.381689][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 69.399084][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 69.405634][ T4231] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 69.424723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.432791][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.460118][ T4231] usb 1-1: Product: syz [ 69.472379][ T4231] usb 1-1: Manufacturer: syz [ 69.477387][ T4231] usb 1-1: SerialNumber: syz [ 69.485940][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 69.497726][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 69.522490][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 70.491615][ T4266] hackrf 3-1:0.0: Board ID: 00 [ 70.496623][ T4266] hackrf 3-1:0.0: Firmware version: [ 70.513506][ T4266] hackrf 3-1:0.0: Registered as swradio24 [ 70.521334][ T4266] hackrf 3-1:0.0: Registered as swradio25 [ 70.528979][ T4266] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 71.445818][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.455585][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.136019][ T4302] ODEBUG: Out of memory. ODEBUG disabled [ 72.160406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 72.180403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 73.204353][ T1111] usb 3-1: USB disconnect, device number 2 [ 73.327706][ T4314] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11'. [ 73.360407][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 73.380406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 73.400402][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.410826][ T4231] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 73.440411][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.470401][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.500400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.520399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 73.540398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.292437][ T4303] autofs4:pid:4303:autofs_fill_super: called with bogus options [ 74.295441][ T4231] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 74.332481][ T4231] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 74.458712][ T4302] syz.3.9 (4302): drop_caches: 2 [ 74.474239][ T4231] usb 1-1: USB disconnect, device number 2 [ 74.622847][ T4323] binfmt_misc: register: failed to install interpreter file ./file2 [ 76.660237][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.895366][ T4352] FAULT_INJECTION: forcing a failure. [ 77.895366][ T4352] name failslab, interval 1, probability 0, space 0, times 1 [ 77.938712][ T4352] CPU: 1 PID: 4352 Comm: syz.0.23 Not tainted syzkaller #0 [ 77.945979][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.956070][ T4352] Call Trace: [ 77.959378][ T4352] [ 77.962338][ T4352] dump_stack_lvl+0x188/0x250 [ 77.967175][ T4352] ? show_regs_print_info+0x20/0x20 [ 77.972396][ T4352] ? load_image+0x410/0x410 [ 77.976935][ T4352] ? __might_sleep+0xf0/0xf0 [ 77.981547][ T4352] ? __lock_acquire+0x7b50/0x7b50 [ 77.986692][ T4352] should_fail+0x383/0x4b0 [ 77.991137][ T4352] should_failslab+0x5/0x20 [ 77.995666][ T4352] slab_pre_alloc_hook+0x51/0xc0 [ 78.000769][ T4352] ? getname_flags+0xb7/0x4f0 [ 78.005478][ T4352] kmem_cache_alloc+0x3d/0x280 [ 78.010274][ T4352] getname_flags+0xb7/0x4f0 [ 78.014814][ T4352] __x64_sys_mkdirat+0x78/0x90 [ 78.019615][ T4352] do_syscall_64+0x4c/0xa0 [ 78.024062][ T4352] ? clear_bhb_loop+0x30/0x80 [ 78.028762][ T4352] ? clear_bhb_loop+0x30/0x80 [ 78.033569][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.039527][ T4352] RIP: 0033:0x7fa9c5159159 [ 78.043968][ T4352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.063868][ T4352] RSP: 002b:00007fa9c33b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 78.072333][ T4352] RAX: ffffffffffffffda RBX: 00007fa9c53e0fa0 RCX: 00007fa9c5159159 [ 78.080449][ T4352] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 78.088517][ T4352] RBP: 00007fa9c51f006b R08: 0000000000000000 R09: 0000000000000000 [ 78.096492][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.104465][ T4352] R13: 00007fa9c53e1038 R14: 00007fa9c53e0fa0 R15: 00007ffcba817648 [ 78.112646][ T4352] [ 78.146672][ T4354] loop3: detected capacity change from 0 to 164 [ 79.989062][ T4366] batman_adv: Cannot find parent device [ 79.997747][ T4366] batman_adv: batadv0: Adding interface: gretap1 [ 80.005368][ T4366] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.040421][ T4366] batman_adv: batadv0: Interface activated: gretap1 [ 80.216240][ T4372] binfmt_misc: register: failed to install interpreter file ./file2 [ 80.823296][ T26] audit: type=1800 audit(1790412505.650:2): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.32" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 83.723997][ T4409] loop2: detected capacity change from 0 to 164 [ 83.884227][ T4416] binfmt_misc: register: failed to install interpreter file ./file2 [ 84.580613][ T4277] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.633557][ T4425] input: syz1 as /devices/virtual/input/input5 [ 84.980643][ T4277] usb 2-1: config 1 has an invalid interface number: 27 but max is 1 [ 84.990129][ T4277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.002690][ T4277] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 85.014094][ T4277] usb 2-1: config 1 has no interface number 2 [ 85.021066][ T4277] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 85.032269][ T4277] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.059342][ T4277] usb 2-1: config 1 interface 1 has no altsetting 0 [ 85.291236][ T4277] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 85.316795][ T4277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.370876][ T4277] usb 2-1: Product: syz [ 85.398141][ T4277] usb 2-1: Manufacturer: syz [ 85.428970][ T4277] usb 2-1: SerialNumber: syz [ 86.062414][ T4418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.616909][ T4266] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.663090][ T1334] cfg80211: failed to load regulatory.db [ 86.770654][ T4277] ATM dev 0: failed to start ADSL synchronisation: -71 [ 86.810599][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e775000 failed (-71)! [ 86.819032][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76be00 failed (-71)! [ 86.827066][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76b000 failed (-71)! [ 86.835050][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76b200 failed (-71)! [ 86.980661][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e775000 failed (-71)! [ 86.988641][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76be00 failed (-71)! [ 86.996723][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76b000 failed (-71)! [ 87.004668][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76b200 failed (-71)! [ 87.030783][ T4277] speedtch 2-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 87.059141][ T4277] speedtch 2-1:1.27: usbatm_usb_probe: bind failed: -16! [ 87.114602][ T4277] speedtch: probe of 2-1:1.27 failed with error -16 [ 87.140420][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e775000 failed (-71)! [ 87.148408][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801e76be00 failed (-71)! [ 87.198190][ T4277] usb 2-1: USB disconnect, device number 2 [ 87.460459][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 87.541876][ T4453] loop1: detected capacity change from 0 to 164 [ 87.620585][ T4266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.720963][ T4266] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 87.729399][ T4266] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 87.770319][ T4457] binfmt_misc: register: failed to install interpreter file ./file2 [ 88.207549][ T4266] usb 3-1: config 14 has no interface number 0 [ 88.222247][ T4266] usb 3-1: config 14 has no interface number 1 [ 88.239528][ T4266] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 88.286596][ T4266] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 88.317495][ T4266] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 88.347133][ T4266] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.436440][ T4459] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 88.520249][ T4266] usb 3-1: config 14 interface 57 has no altsetting 0 [ 88.530460][ T4266] usb 3-1: config 14 interface 228 has no altsetting 0 [ 88.700321][ T4468] capability: warning: `syz.4.62' uses 32-bit capabilities (legacy support in use) [ 88.710699][ T4266] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 88.719765][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.800536][ T4266] usb 3-1: Product: syz [ 88.804755][ T4266] usb 3-1: Manufacturer: syz [ 88.809404][ T4266] usb 3-1: SerialNumber: syz [ 89.181738][ T4266] legousbtower 3-1:14.57: interrupt endpoints not found [ 89.410651][ T4266] legousbtower 3-1:14.228: interrupt endpoints not found [ 89.956715][ T4266] usb 3-1: USB disconnect, device number 3 [ 90.434659][ T4494] WARNING! power/level is deprecated; use power/control instead [ 91.080588][ T4497] binfmt_misc: register: failed to install interpreter file ./file2 [ 92.571041][ T4266] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.930825][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.605486][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.758125][ T4266] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 93.810422][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.848439][ T4266] usb 3-1: config 0 descriptor?? [ 93.962648][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 93.962665][ T26] audit: type=1326 audit(1790412518.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4536 comm="syz.3.84" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c25ed159 code=0x0 [ 94.158136][ T4547] binfmt_misc: register: failed to install interpreter file ./file2 [ 94.685983][ T4549] FAULT_INJECTION: forcing a failure. [ 94.685983][ T4549] name failslab, interval 1, probability 0, space 0, times 0 [ 94.738047][ T4549] CPU: 0 PID: 4549 Comm: syz.3.87 Not tainted syzkaller #0 [ 94.745314][ T4549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.755749][ T4549] Call Trace: [ 94.759053][ T4549] [ 94.762011][ T4549] dump_stack_lvl+0x188/0x250 [ 94.766806][ T4549] ? show_regs_print_info+0x20/0x20 [ 94.772036][ T4549] ? load_image+0x410/0x410 [ 94.776766][ T4549] ? __might_sleep+0xf0/0xf0 [ 94.781386][ T4549] ? __lock_acquire+0x7b50/0x7b50 [ 94.786490][ T4549] should_fail+0x383/0x4b0 [ 94.790936][ T4549] should_failslab+0x5/0x20 [ 94.795463][ T4549] slab_pre_alloc_hook+0x51/0xc0 [ 94.800433][ T4549] kmem_cache_alloc_trace+0x47/0x290 [ 94.805753][ T4549] ? __list_lru_init+0x535/0xac0 [ 94.810721][ T4549] __list_lru_init+0x535/0xac0 [ 94.815527][ T4549] alloc_super+0x787/0x970 [ 94.820186][ T4549] ? kill_litter_super+0xa0/0xa0 [ 94.825166][ T4549] sget_fc+0x2d4/0x6f0 [ 94.829455][ T4549] ? kill_litter_super+0xa0/0xa0 [ 94.834424][ T4549] ? proc_reconfigure+0x370/0x370 [ 94.839562][ T4549] get_tree_nodev+0x26/0x160 [ 94.844180][ T4549] vfs_get_tree+0x88/0x270 [ 94.848623][ T4549] do_new_mount+0x247/0xa40 [ 94.853161][ T4549] __se_sys_mount+0x2e3/0x3d0 [ 94.857868][ T4549] ? __x64_sys_mount+0xc0/0xc0 [ 94.862659][ T4549] ? lockdep_hardirqs_on+0x94/0x140 [ 94.867899][ T4549] ? __x64_sys_mount+0x1c/0xc0 [ 94.872698][ T4549] do_syscall_64+0x4c/0xa0 [ 94.877226][ T4549] ? clear_bhb_loop+0x30/0x80 [ 94.882028][ T4549] ? clear_bhb_loop+0x30/0x80 [ 94.886899][ T4549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.892795][ T4549] RIP: 0033:0x7f41c25ed159 [ 94.897249][ T4549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.916882][ T4549] RSP: 002b:00007f41c0845028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.925348][ T4549] RAX: ffffffffffffffda RBX: 00007f41c2874fa0 RCX: 00007f41c25ed159 [ 94.933318][ T4549] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 94.941284][ T4549] RBP: 00007f41c268406b R08: 0000000000000000 R09: 0000000000000000 [ 94.949263][ T4549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.957316][ T4549] R13: 00007f41c2875038 R14: 00007f41c2874fa0 R15: 00007ffe8f547f78 [ 94.965295][ T4549] [ 94.968329][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.121573][ T4557] loop1: detected capacity change from 0 to 164 [ 95.210606][ T4266] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 95.240162][ T4266] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 95.262588][ T4266] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 95.294015][ T4266] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 95.325492][ T4266] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 95.481975][ T4266] usb 3-1: USB disconnect, device number 4 [ 95.730920][ T1334] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.320671][ T1334] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.508222][ T1334] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.519850][ T1334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.543663][ T1334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 97.141850][ T1334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 97.305741][ T26] audit: type=1326 audit(1790412522.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd359cce159 code=0x0 [ 97.440711][ T1334] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.461161][ T1334] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.524141][ T1334] usb 1-1: Product: syz [ 97.549461][ T1334] usb 1-1: Manufacturer: syz [ 97.736134][ T4593] udc-core: couldn't find an available UDC or it's busy [ 97.783624][ T1334] cdc_wdm 1-1:1.0: skipping garbage [ 97.789044][ T1334] cdc_wdm 1-1:1.0: skipping garbage [ 97.841654][ T1334] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 97.847651][ T1334] cdc_wdm 1-1:1.0: Unknown control protocol [ 98.201979][ T4561] udc-core: couldn't find an available UDC or it's busy [ 98.217532][ T4561] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.262251][ T1111] usb 1-1: USB disconnect, device number 3 [ 98.280561][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 98.287319][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 98.293407][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 99.979388][ T4622] FAULT_INJECTION: forcing a failure. [ 99.979388][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 99.993345][ T4622] CPU: 1 PID: 4622 Comm: syz.4.108 Not tainted syzkaller #0 [ 100.000673][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.010785][ T4622] Call Trace: [ 100.014092][ T4622] [ 100.017044][ T4622] dump_stack_lvl+0x188/0x250 [ 100.021762][ T4622] ? show_regs_print_info+0x20/0x20 [ 100.026988][ T4622] ? load_image+0x410/0x410 [ 100.031520][ T4622] ? __might_sleep+0xf0/0xf0 [ 100.036131][ T4622] ? __lock_acquire+0x7b50/0x7b50 [ 100.041190][ T4622] should_fail+0x383/0x4b0 [ 100.045648][ T4622] should_failslab+0x5/0x20 [ 100.050298][ T4622] slab_pre_alloc_hook+0x51/0xc0 [ 100.055260][ T4622] kmem_cache_alloc_trace+0x47/0x290 [ 100.060767][ T4622] ? register_netdevice+0x500/0x1720 [ 100.066435][ T4622] register_netdevice+0x500/0x1720 [ 100.071574][ T4622] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 100.077586][ T4622] ? __local_bh_enable_ip+0x136/0x1c0 [ 100.082982][ T4622] ? netif_stacked_transfer_operstate+0x200/0x200 [ 100.089521][ T4622] ? slip_open+0xb4c/0xe40 [ 100.093958][ T4622] ? rcu_is_watching+0x11/0xa0 [ 100.098746][ T4622] ? kfree+0x4a/0x2a0 [ 100.102760][ T4622] slip_open+0xbae/0xe40 [ 100.107127][ T4622] ? pptp_ppp_ioctl+0x170/0x170 [ 100.112003][ T4622] ? up_write+0x1b6/0x410 [ 100.116368][ T4622] tty_set_ldisc+0x358/0x660 [ 100.120994][ T4622] tty_ioctl+0xa8b/0xc30 [ 100.125267][ T4622] ? tty_get_icount+0xa0/0xa0 [ 100.129972][ T4622] __se_sys_ioctl+0xfa/0x170 [ 100.134594][ T4622] do_syscall_64+0x4c/0xa0 [ 100.139043][ T4622] ? clear_bhb_loop+0x30/0x80 [ 100.143750][ T4622] ? clear_bhb_loop+0x30/0x80 [ 100.148577][ T4622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.154509][ T4622] RIP: 0033:0x7fd359cce159 [ 100.158955][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.178765][ T4622] RSP: 002b:00007fd357f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.187216][ T4622] RAX: ffffffffffffffda RBX: 00007fd359f55fa0 RCX: 00007fd359cce159 [ 100.195218][ T4622] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000004 [ 100.203217][ T4622] RBP: 00007fd359d6506b R08: 0000000000000000 R09: 0000000000000000 [ 100.211218][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.219253][ T4622] R13: 00007fd359f56038 R14: 00007fd359f55fa0 R15: 00007ffecf3e15d8 [ 100.227274][ T4622] [ 103.024463][ T4660] binfmt_misc: register: failed to install interpreter file ./file2 [ 103.580585][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.826516][ T23] usb 2-1: device descriptor read/all, error -71 [ 107.907794][ T4705] binfmt_misc: register: failed to install interpreter file ./file2 [ 109.595750][ T4746] netlink: 43 bytes leftover after parsing attributes in process `syz.3.146'. [ 111.342433][ T4771] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.902735][ T4787] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.390348][ C0] hrtimer: interrupt took 51326 ns [ 112.499852][ T4790] netlink: 104 bytes leftover after parsing attributes in process `syz.3.162'. [ 112.941530][ T4794] ubi0: attaching mtd0 [ 112.985352][ T4794] ubi0: scanning is finished [ 113.039952][ T4794] ubi0: empty MTD device detected [ 113.315387][ T4794] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 113.395316][ T4794] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 113.568790][ T4794] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 113.705656][ T4794] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 114.010951][ T4794] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 114.017790][ T4794] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 114.094490][ T4794] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1522537647 [ 114.111407][ T4794] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 114.134352][ T4805] ======================================================= [ 114.134352][ T4805] WARNING: The mand mount option has been deprecated and [ 114.134352][ T4805] and is ignored by this kernel. Remove the mand [ 114.134352][ T4805] option from the mount to silence this warning. [ 114.134352][ T4805] ======================================================= [ 114.171398][ T4805] cgroup: Unknown subsys name 'smackfsfloor' [ 114.231780][ T4800] ubi0: background thread "ubi_bgt0d" started, PID 4800 [ 115.194546][ T4199] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 115.273328][ T4816] loop3: detected capacity change from 0 to 164 [ 115.465308][ T4827] FAULT_INJECTION: forcing a failure. [ 115.465308][ T4827] name failslab, interval 1, probability 0, space 0, times 0 [ 115.548370][ T4827] CPU: 0 PID: 4827 Comm: syz.1.174 Not tainted syzkaller #0 [ 115.555717][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.565800][ T4827] Call Trace: [ 115.569107][ T4827] [ 115.572058][ T4827] dump_stack_lvl+0x188/0x250 [ 115.577025][ T4827] ? show_regs_print_info+0x20/0x20 [ 115.582235][ T4827] ? load_image+0x410/0x410 [ 115.586747][ T4827] ? __might_sleep+0xf0/0xf0 [ 115.591335][ T4827] ? __lock_acquire+0x7b50/0x7b50 [ 115.596363][ T4827] ? up_write+0x1b6/0x410 [ 115.600809][ T4827] should_fail+0x383/0x4b0 [ 115.605235][ T4827] should_failslab+0x5/0x20 [ 115.609734][ T4827] slab_pre_alloc_hook+0x51/0xc0 [ 115.614667][ T4827] ? prepare_creds+0x3c/0x610 [ 115.619345][ T4827] kmem_cache_alloc+0x3d/0x280 [ 115.624114][ T4827] prepare_creds+0x3c/0x610 [ 115.628620][ T4827] lookup_user_key+0x3a5/0x1160 [ 115.633479][ T4827] ? lookup_user_key_possessed+0x40/0x40 [ 115.639116][ T4827] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 115.645119][ T4827] keyctl_restrict_keyring+0x8d/0x220 [ 115.650583][ T4827] ? keyctl_session_to_parent+0x9c0/0x9c0 [ 115.656302][ T4827] ? do_futex+0xdc2/0x12b0 [ 115.660729][ T4827] ? vfs_write+0xaa6/0xd70 [ 115.665146][ T4827] __se_sys_keyctl+0x6a1/0xa20 [ 115.669914][ T4827] ? __x64_sys_keyctl+0xc0/0xc0 [ 115.674781][ T4827] ? __context_tracking_exit+0x4c/0x80 [ 115.680245][ T4827] ? __lock_acquire+0x7b50/0x7b50 [ 115.685276][ T4827] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.691261][ T4827] ? lock_chain_count+0x20/0x20 [ 115.696117][ T4827] ? lockdep_hardirqs_on+0x94/0x140 [ 115.701428][ T4827] ? __x64_sys_keyctl+0x1c/0xc0 [ 115.706283][ T4827] do_syscall_64+0x4c/0xa0 [ 115.710706][ T4827] ? clear_bhb_loop+0x30/0x80 [ 115.715388][ T4827] ? clear_bhb_loop+0x30/0x80 [ 115.720063][ T4827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.725956][ T4827] RIP: 0033:0x7f4994e61159 [ 115.730375][ T4827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.750241][ T4827] RSP: 002b:00007f49930b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 115.758746][ T4827] RAX: ffffffffffffffda RBX: 00007f49950e8fa0 RCX: 00007f4994e61159 [ 115.766808][ T4827] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 000000000000001d [ 115.774779][ T4827] RBP: 00007f4994ef806b R08: 0000000000000000 R09: 0000000000000000 [ 115.782751][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.790731][ T4827] R13: 00007f49950e9038 R14: 00007f49950e8fa0 R15: 00007ffe8ead2428 [ 115.798717][ T4827] [ 115.801783][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.431333][ T26] audit: type=1326 audit(1790412541.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c25ed159 code=0x7ffc0000 [ 116.990265][ T26] audit: type=1326 audit(1790412541.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c25ed159 code=0x7ffc0000 [ 117.034098][ T26] audit: type=1326 audit(1790412541.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41c25ad98e code=0x7ffc0000 [ 118.450360][ C0] sched: RT throttling activated [ 119.621011][ T26] audit: type=1326 audit(1790412541.120:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f41c25ee457 code=0x7ffc0000 [ 119.778451][ T26] audit: type=1326 audit(1790412541.120:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41c25ed159 code=0x7ffc0000 [ 119.803143][ T26] audit: type=1326 audit(1790412541.120:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f41c25ee457 code=0x7ffc0000 [ 119.828956][ T26] audit: type=1326 audit(1790412541.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f41c25ad98e code=0x7ffc0000 [ 119.854835][ T26] audit: type=1326 audit(1790412541.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c25ed159 code=0x7ffc0000 [ 119.900549][ T4199] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 120.069126][ T26] audit: type=1326 audit(1790412541.120:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c25ed159 code=0x7ffc0000 [ 120.360093][ T26] audit: type=1326 audit(1790412541.120:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.3.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f41c25ed159 code=0x7ffc0000 [ 126.587684][ T4901] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 126.958309][ T4892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.094403][ T4911] FAULT_INJECTION: forcing a failure. [ 127.094403][ T4911] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.113072][ T4911] CPU: 1 PID: 4911 Comm: syz.1.183 Not tainted syzkaller #0 [ 127.120411][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.130496][ T4911] Call Trace: [ 127.133801][ T4911] [ 127.136762][ T4911] dump_stack_lvl+0x188/0x250 [ 127.141645][ T4911] ? show_regs_print_info+0x20/0x20 [ 127.146869][ T4911] ? load_image+0x410/0x410 [ 127.151408][ T4911] ? __lock_acquire+0x7b50/0x7b50 [ 127.156474][ T4911] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 127.162922][ T4911] should_fail+0x383/0x4b0 [ 127.167372][ T4911] _copy_from_user+0x2e/0x170 [ 127.172403][ T4911] __copy_msghdr_from_user+0xc9/0x630 [ 127.178290][ T4911] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 127.183612][ T4911] ? rcu_is_watching+0x11/0xa0 [ 127.188419][ T4911] ? verify_lock_unused+0x140/0x140 [ 127.193645][ T4911] ? kfree+0x4a/0x2a0 [ 127.197656][ T4911] ___sys_sendmsg+0x19a/0x2e0 [ 127.202540][ T4911] ? __sys_sendmsg+0x290/0x290 [ 127.207458][ T4911] ? __might_fault+0xb3/0x110 [ 127.212338][ T4911] __sys_sendmmsg+0x2ba/0x500 [ 127.217054][ T4911] ? __ia32_sys_sendmsg+0x80/0x80 [ 127.222310][ T4911] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.228329][ T4911] ? lock_chain_count+0x20/0x20 [ 127.233210][ T4911] __x64_sys_sendmmsg+0x9c/0xb0 [ 127.238086][ T4911] do_syscall_64+0x4c/0xa0 [ 127.242526][ T4911] ? clear_bhb_loop+0x30/0x80 [ 127.247224][ T4911] ? clear_bhb_loop+0x30/0x80 [ 127.251928][ T4911] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.257843][ T4911] RIP: 0033:0x7f4994e61159 [ 127.262389][ T4911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.282104][ T4911] RSP: 002b:00007f49930b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.290719][ T4911] RAX: ffffffffffffffda RBX: 00007f49950e8fa0 RCX: 00007f4994e61159 [ 127.298800][ T4911] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000004 [ 127.302481][ T4587] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.306884][ T4911] RBP: 00007f4994ef806b R08: 0000000000000000 R09: 0000000000000000 [ 127.306902][ T4911] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 127.306914][ T4911] R13: 00007f49950e9038 R14: 00007f49950e8fa0 R15: 00007ffe8ead2428 [ 127.306940][ T4911] [ 127.560583][ T4587] usb 5-1: Using ep0 maxpacket: 32 [ 127.684403][ T4587] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 127.724712][ T4587] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.820020][ T4587] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.302716][ T4587] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 128.607676][ T4587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.614750][ T4587] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 128.624404][ T4587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.644436][ T4587] usb 5-1: config 0 descriptor?? [ 128.650992][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 128.670537][ T4932] FAULT_INJECTION: forcing a failure. [ 128.670537][ T4932] name failslab, interval 1, probability 0, space 0, times 0 [ 128.700693][ T4932] CPU: 1 PID: 4932 Comm: syz.1.202 Not tainted syzkaller #0 [ 128.708124][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.718221][ T4932] Call Trace: [ 128.721499][ T4932] [ 128.724423][ T4932] dump_stack_lvl+0x188/0x250 [ 128.729270][ T4932] ? show_regs_print_info+0x20/0x20 [ 128.734488][ T4932] ? load_image+0x410/0x410 [ 128.739079][ T4932] ? __might_sleep+0xf0/0xf0 [ 128.743689][ T4932] ? __lock_acquire+0x7b50/0x7b50 [ 128.748726][ T4932] should_fail+0x383/0x4b0 [ 128.753158][ T4932] should_failslab+0x5/0x20 [ 128.757663][ T4932] slab_pre_alloc_hook+0x51/0xc0 [ 128.762604][ T4932] ? security_file_alloc+0x30/0x110 [ 128.767969][ T4932] kmem_cache_alloc+0x3d/0x280 [ 128.772729][ T4932] ? rcu_is_watching+0x11/0xa0 [ 128.777512][ T4932] security_file_alloc+0x30/0x110 [ 128.782545][ T4932] __alloc_file+0xc2/0x240 [ 128.786962][ T4932] alloc_empty_file+0x90/0x180 [ 128.791812][ T4932] alloc_file+0x5c/0x510 [ 128.796058][ T4932] ? do_raw_spin_unlock+0x11d/0x230 [ 128.801257][ T4932] alloc_file_pseudo+0x180/0x200 [ 128.806195][ T4932] ? alloc_empty_file_noaccount+0x80/0x80 [ 128.811921][ T4932] ? alloc_fd+0x59e/0x650 [ 128.816332][ T4932] sock_alloc_file+0xb3/0x240 [ 128.821114][ T4932] __sys_socket+0x11d/0x170 [ 128.825646][ T4932] __x64_sys_socket+0x76/0x80 [ 128.830444][ T4932] do_syscall_64+0x4c/0xa0 [ 128.834858][ T4932] ? clear_bhb_loop+0x30/0x80 [ 128.839526][ T4932] ? clear_bhb_loop+0x30/0x80 [ 128.844197][ T4932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.850087][ T4932] RIP: 0033:0x7f4994e61159 [ 128.854512][ T4932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.874113][ T4932] RSP: 002b:00007f49930b8fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 128.882522][ T4932] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4994e61159 [ 128.890695][ T4932] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000027 [ 128.898686][ T4932] RBP: 00007f4994ef806b R08: 0000000000000000 R09: 0000000000000000 [ 128.906685][ T4932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.914756][ T4932] R13: 00007f49950e9038 R14: 00007f49950e8fa0 R15: 00007ffe8ead2428 [ 128.922751][ T4932] [ 129.778149][ T4910] udc-core: couldn't find an available UDC or it's busy [ 129.985106][ T4910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.076776][ T4587] wacom 0003:056A:0000.0002: ignoring exceeding usage max [ 130.097332][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 130.110674][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 130.118239][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 130.126454][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 130.608823][ T4945] input: syz1 as /devices/virtual/input/input6 [ 131.329216][ T4266] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.350059][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.548534][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.555552][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.562699][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.569906][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.576884][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.584447][ T4587] wacom 0003:056A:0000.0002: unknown main item tag 0x0 [ 131.593860][ T4587] wacom 0003:056A:0000.0002: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 131.613501][ T4587] wacom 0003:056A:0000.0002: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 131.627160][ T4587] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0002/input/input7 [ 131.710282][ T4950] loop4: detected capacity change from 0 to 164 [ 131.762826][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.791710][ T4587] usb 5-1: USB disconnect, device number 2 [ 131.960605][ T4266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.027470][ T4954] fido_id[4954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 132.050633][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 132.120497][ T4266] usb 3-1: unable to read config index 0 descriptor/all [ 132.138886][ T4266] usb 3-1: can't read configurations, error -71 [ 132.406268][ T4969] No source specified [ 132.420151][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 132.512340][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.781255][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.788427][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.868722][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 133.010991][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.068468][ T23] usb 2-1: config 0 descriptor?? [ 133.170773][ T23] usb 2-1: can't set config #0, error -71 [ 133.190880][ T23] usb 2-1: USB disconnect, device number 5 [ 135.980084][ T4990] input: syz1 as /devices/virtual/input/input10 [ 137.132082][ T4995] loop3: detected capacity change from 0 to 164 [ 139.850514][ T4266] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.349667][ T13] libceph: connect (1)[c::]:6789 error -101 [ 140.378488][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 141.288550][ T5017] ceph: No mds server is up or the cluster is laggy [ 141.301775][ T4587] libceph: connect (1)[c::]:6789 error -101 [ 141.307803][ T4587] libceph: mon0 (1)[c::]:6789 connect error [ 141.530811][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 141.660953][ T4266] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.706592][ T4266] usb 4-1: config 0 has no interface number 0 [ 141.990661][ T4266] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 142.030451][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.075793][ T5038] loop4: detected capacity change from 0 to 164 [ 142.088228][ T4266] usb 4-1: Product: syz [ 142.121468][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 142.121484][ T26] audit: type=1326 audit(1790412566.960:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5035 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9c5159159 code=0x0 [ 142.162841][ T4266] usb 4-1: Manufacturer: syz [ 142.180379][ T4266] usb 4-1: SerialNumber: syz [ 142.194893][ T4266] usb 4-1: config 0 descriptor?? [ 142.262654][ T4266] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 142.277503][ T4266] usb 4-1: selecting invalid altsetting 1 [ 142.289462][ T4266] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 142.327173][ T4266] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.357251][ T4266] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 142.385400][ T4266] usb 4-1: media controller created [ 142.672619][ T5049] Set syz1 is full, maxelem 2 reached [ 144.415657][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.940508][ T4266] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 144.947787][ T4266] zl10353_read_register: readreg error (reg=127, ret==-71) [ 145.001253][ T4266] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 145.143918][ T4266] usb 4-1: USB disconnect, device number 2 [ 145.607533][ T5076] process 'syz.0.246' launched '/dev/fd/6' with NULL argv: empty string added [ 145.819672][ T5080] loop2: detected capacity change from 0 to 164 [ 145.960449][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.006708][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.030438][ T4232] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 147.063755][ T4232] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 147.089222][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.119721][ T4232] usb 1-1: config 0 descriptor?? [ 147.389202][ T4232] usb 1-1: USB disconnect, device number 4 [ 151.883674][ T5136] loop1: detected capacity change from 0 to 164 [ 153.740375][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 154.440051][ T5157] input: syz1 as /devices/virtual/input/input11 [ 156.699442][ T5187] ALSA: mixer_oss: invalid OSS volume '' [ 156.797187][ T5168] Set syz1 is full, maxelem 6117 reached [ 157.305919][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.480015][ T5195] loop4: detected capacity change from 0 to 164 [ 157.671416][ T13] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.687681][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.779886][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.890108][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.022445][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.106695][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 158.220889][ T13] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.252985][ T13] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.322480][ T13] usb 3-1: Product: syz [ 158.357306][ T13] usb 3-1: Manufacturer: syz [ 158.504969][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 158.505479][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 158.547545][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 158.598438][ T13] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 158.640457][ T13] cdc_wdm 3-1:1.0: Unknown control protocol [ 159.140025][ T5204] input: syz1 as /devices/virtual/input/input12 [ 159.873014][ T5193] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 159.928909][ T4231] usb 3-1: USB disconnect, device number 7 [ 160.570784][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 160.576909][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 161.068765][ T5213] syz.4.283 (5213) used greatest stack depth: 21008 bytes left [ 161.120689][ T5215] ALSA: mixer_oss: invalid OSS volume '' [ 161.312547][ T5220] loop0: detected capacity change from 0 to 164 [ 161.524961][ T5227] FAULT_INJECTION: forcing a failure. [ 161.524961][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 161.538235][ T5227] CPU: 0 PID: 5227 Comm: syz.3.286 Not tainted syzkaller #0 [ 161.545552][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.555639][ T5227] Call Trace: [ 161.558958][ T5227] [ 161.561904][ T5227] dump_stack_lvl+0x188/0x250 [ 161.566619][ T5227] ? show_regs_print_info+0x20/0x20 [ 161.571918][ T5227] ? load_image+0x410/0x410 [ 161.576482][ T5227] ? __might_sleep+0xf0/0xf0 [ 161.581098][ T5227] ? __lock_acquire+0x7b50/0x7b50 [ 161.586131][ T5227] should_fail+0x383/0x4b0 [ 161.590566][ T5227] should_failslab+0x5/0x20 [ 161.595092][ T5227] slab_pre_alloc_hook+0x51/0xc0 [ 161.600054][ T5227] kmem_cache_alloc_trace+0x47/0x290 [ 161.605369][ T5227] ? nft_chain_parse_netdev+0xd5/0x340 [ 161.610928][ T5227] nft_chain_parse_netdev+0xd5/0x340 [ 161.616211][ T5227] ? nft_stats_alloc+0x430/0x430 [ 161.621150][ T5227] ? __nla_parse+0x3c/0x50 [ 161.625567][ T5227] nft_chain_parse_hook+0x8a7/0xbb0 [ 161.630859][ T5227] ? nf_tables_updchain+0xfc0/0xfc0 [ 161.636059][ T5227] nf_tables_newchain+0x103c/0x2ad0 [ 161.641292][ T5227] ? nf_tables_deltable+0xd90/0xd90 [ 161.646519][ T5227] ? __lock_acquire+0x7b50/0x7b50 [ 161.651554][ T5227] ? nf_tables_newtable+0xce0/0x1680 [ 161.656858][ T5227] ? __nla_parse+0x3c/0x50 [ 161.661317][ T5227] nfnetlink_rcv+0x1117/0x2450 [ 161.666106][ T5227] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 161.671662][ T5227] ? skb_clone+0x1f1/0x350 [ 161.676078][ T5227] ? rcu_lock_release+0x5/0x20 [ 161.680835][ T5227] ? __lock_acquire+0x7b50/0x7b50 [ 161.685882][ T5227] netlink_unicast+0x78f/0x940 [ 161.690664][ T5227] netlink_sendmsg+0x8ba/0xbe0 [ 161.695658][ T5227] ? netlink_getsockopt+0x570/0x570 [ 161.700857][ T5227] ? aa_sock_msg_perm+0x94/0x150 [ 161.705806][ T5227] ? apparmor_socket_sendmsg+0x88/0x230 [ 161.711448][ T5227] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 161.716732][ T5227] ? security_socket_sendmsg+0x7c/0xa0 [ 161.722203][ T5227] ? netlink_getsockopt+0x570/0x570 [ 161.727432][ T5227] ____sys_sendmsg+0x5be/0x8f0 [ 161.732220][ T5227] ? __sys_sendmsg_sock+0x30/0x30 [ 161.737289][ T5227] ? import_iovec+0x6f/0xa0 [ 161.741807][ T5227] ___sys_sendmsg+0x236/0x2e0 [ 161.746535][ T5227] ? __sys_sendmsg+0x290/0x290 [ 161.751315][ T5227] __se_sys_sendmsg+0x1b7/0x2a0 [ 161.756162][ T5227] ? __x64_sys_sendmsg+0x80/0x80 [ 161.761205][ T5227] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.767233][ T5227] ? lockdep_hardirqs_on+0x94/0x140 [ 161.772431][ T5227] do_syscall_64+0x4c/0xa0 [ 161.776837][ T5227] ? clear_bhb_loop+0x30/0x80 [ 161.781506][ T5227] ? clear_bhb_loop+0x30/0x80 [ 161.786178][ T5227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.790563][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.792062][ T5227] RIP: 0033:0x7f41c25ed159 [ 161.803964][ T5227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.823680][ T5227] RSP: 002b:00007f41c0845028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.832097][ T5227] RAX: ffffffffffffffda RBX: 00007f41c2874fa0 RCX: 00007f41c25ed159 [ 161.840166][ T5227] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 161.848259][ T5227] RBP: 00007f41c268406b R08: 0000000000000000 R09: 0000000000000000 [ 161.856270][ T5227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.864256][ T5227] R13: 00007f41c2875038 R14: 00007f41c2874fa0 R15: 00007ffe8f547f78 [ 161.872235][ T5227] [ 162.180561][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 162.652561][ T5240] input: syz1 as /devices/virtual/input/input13 [ 163.414682][ T4277] Bluetooth: hci5: command 0x1009 tx timeout [ 163.510393][ T4231] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.543612][ T4231] usb 1-1: config 0 has no interface number 0 [ 163.556685][ T4231] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 163.580444][ T4231] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 163.604545][ T4231] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.810213][ T4231] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.855379][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.948613][ T4231] usb 1-1: config 0 descriptor?? [ 164.124977][ T4231] ldusb 1-1:0.55: Interrupt in endpoint not found [ 164.541477][ T4231] usb 1-1: USB disconnect, device number 5 [ 165.209195][ T5254] ALSA: mixer_oss: invalid OSS volume '' [ 167.092378][ T5261] loop0: detected capacity change from 0 to 164 [ 169.098265][ T26] audit: type=1800 audit(1790412593.920:33): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.307" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 169.377352][ T26] audit: type=1800 audit(1790412593.930:34): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.306" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 170.058322][ T5289] input: syz1 as /devices/virtual/input/input14 [ 171.336804][ T5293] ALSA: mixer_oss: invalid OSS volume '' [ 171.763029][ T5304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 171.774429][ T5304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 172.601591][ T5301] Set syz1 is full, maxelem 6117 reached [ 172.640525][ T26] audit: type=1326 audit(1790412597.450:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5307 comm="syz.3.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41c25ed159 code=0x0 [ 176.529603][ T1111] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.157218][ T5360] input: syz1 as /devices/virtual/input/input15 [ 178.039282][ T5363] Set syz1 is full, maxelem 6117 reached [ 179.930430][ T5376] ALSA: mixer_oss: invalid OSS volume '' [ 181.250716][ T5404] autofs4:pid:5404:autofs_fill_super: called with bogus options [ 181.759222][ T5410] input: syz1 as /devices/virtual/input/input16 [ 182.585955][ T5408] overlayfs: missing 'workdir' [ 183.260477][ T5427] Set syz1 is full, maxelem 2 reached [ 183.936030][ T4203] ------------[ cut here ]------------ [ 183.944883][ T4203] WARNING: CPU: 1 PID: 4203 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 183.955567][ T4203] Modules linked in: [ 183.960926][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 183.969176][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.984100][ T4203] Workqueue: hci4 hci_conn_timeout [ 183.989666][ T4203] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 183.995574][ T4203] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 184.016076][ T4203] RSP: 0018:ffffc9000304fc08 EFLAGS: 00010293 [ 184.023904][ T4203] RAX: ffffffff88e08a1f RBX: ffff88801a782138 RCX: ffff88801a3dd940 [ 184.032391][ T4203] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.040856][ T4203] RBP: 00000000ffffffff R08: ffff88801a782013 R09: 1ffff110034f0402 [ 184.049301][ T4203] R10: dffffc0000000000 R11: ffffed10034f0403 R12: ffff88802c7b0c08 [ 184.057924][ T4203] R13: dffffc0000000000 R14: ffff88801a782000 R15: ffff88801a782010 [ 184.066777][ T4203] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 184.076680][ T4203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.086959][ T4203] CR2: 0000000000000000 CR3: 000000002a8dc000 CR4: 00000000003506e0 [ 184.095676][ T4203] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.104206][ T4203] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.112869][ T4203] Call Trace: [ 184.116752][ T4203] [ 184.120098][ T4203] process_one_work+0x867/0xff0 [ 184.126769][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 184.132862][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 184.138620][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.145315][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.151640][ T4203] ? wq_worker_running+0x97/0x170 [ 184.157064][ T4203] worker_thread+0xad7/0x12a0 [ 184.162535][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.169092][ T4203] kthread+0x42e/0x520 [ 184.173519][ T4203] ? rcu_lock_release+0x20/0x20 [ 184.178750][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 184.187099][ T4203] ret_from_fork+0x1f/0x30 [ 184.191953][ T4203] [ 184.195346][ T4203] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.202657][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 184.210217][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.220375][ T4203] Workqueue: hci4 hci_conn_timeout [ 184.225521][ T4203] Call Trace: [ 184.228817][ T4203] [ 184.231762][ T4203] dump_stack_lvl+0x188/0x250 [ 184.236465][ T4203] ? show_regs_print_info+0x20/0x20 [ 184.241688][ T4203] ? load_image+0x410/0x410 [ 184.246222][ T4203] panic+0x2f8/0x850 [ 184.250149][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 184.254684][ T4203] ? ret_from_fork+0x1f/0x30 [ 184.259294][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 184.264516][ T4203] __warn+0x248/0x2b0 [ 184.268523][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 184.273568][ T4203] report_bug+0x1b9/0x2e0 [ 184.277935][ T4203] handle_bug+0x3a/0x70 [ 184.282210][ T4203] exc_invalid_op+0x16/0x40 [ 184.286762][ T4203] asm_exc_invalid_op+0x16/0x20 [ 184.291735][ T4203] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 184.297392][ T4203] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 184.317621][ T4203] RSP: 0018:ffffc9000304fc08 EFLAGS: 00010293 [ 184.323800][ T4203] RAX: ffffffff88e08a1f RBX: ffff88801a782138 RCX: ffff88801a3dd940 [ 184.331793][ T4203] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.339781][ T4203] RBP: 00000000ffffffff R08: ffff88801a782013 R09: 1ffff110034f0402 [ 184.347788][ T4203] R10: dffffc0000000000 R11: ffffed10034f0403 R12: ffff88802c7b0c08 [ 184.355775][ T4203] R13: dffffc0000000000 R14: ffff88801a782000 R15: ffff88801a782010 [ 184.363779][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 184.368849][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 184.373904][ T4203] process_one_work+0x867/0xff0 [ 184.378794][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 184.384445][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 184.389757][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.394802][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.400454][ T4203] ? wq_worker_running+0x97/0x170 [ 184.405509][ T4203] worker_thread+0xad7/0x12a0 [ 184.410224][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.416155][ T4203] kthread+0x42e/0x520 [ 184.420245][ T4203] ? rcu_lock_release+0x20/0x20 [ 184.425141][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 184.429755][ T4203] ret_from_fork+0x1f/0x30 [ 184.434205][ T4203] [ 184.437334][ T4203] Kernel Offset: disabled [ 184.442039][ T4203] Rebooting in 86400 seconds..