last executing test programs: 37.324666905s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)="b8", 0x1) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 32.835916088s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) 25.873252642s ago: executing program 2 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 25.56530303s ago: executing program 2 (id=28): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 24.700115172s ago: executing program 2 (id=34): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10.159549506s ago: executing program 4 (id=118): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 9.20806864s ago: executing program 32 (id=34): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.19677287s ago: executing program 4 (id=121): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r4, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(r2) 6.020531569s ago: executing program 4 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.793505055s ago: executing program 4 (id=134): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000640000004300000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000400), 0xfffffffe, r2}, 0x38) 2.479650588s ago: executing program 0 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x27}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) 2.37961545s ago: executing program 3 (id=151): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc01fd}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) 2.37655692s ago: executing program 0 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff9}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.212572804s ago: executing program 3 (id=153): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 2.159477796s ago: executing program 0 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYBLOB="210000000000000020001280080001"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 991.046155ms ago: executing program 3 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 n', 0x35) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000240)={0xade1, 0xb}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0x4}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = fsopen(&(0x7f0000000180)='autofs\x00', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x19}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./dev\x00', r0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @link_local}]}) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 827.814699ms ago: executing program 0 (id=157): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 770.692251ms ago: executing program 1 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 676.207853ms ago: executing program 4 (id=159): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x50703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040884}, 0x0) 583.866005ms ago: executing program 1 (id=160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 566.470946ms ago: executing program 0 (id=161): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x85, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) 485.285018ms ago: executing program 4 (id=162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 464.057798ms ago: executing program 0 (id=163): timer_create(0x0, &(0x7f0000000240)={0x0, 0x25, 0x4, @thr={&(0x7f0000000280)="6f425e243226ab13cdce3e76efdf7041b0f9873f1c3c9e9646c7cfeb96e5828f0e3b1f9ebd6d60a681a4ac9d9fcbcb6946a2d9ddef88f9f85c272bfe1d883ab1120df6929841bd8a02dae0931f44880e525fa396884f46a9dfe954bfcccc01b929e56f868bda407172f1034e6c", 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x224031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) pipe2$9p(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x803, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x50, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xf3) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) 415.849489ms ago: executing program 1 (id=164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 399.28752ms ago: executing program 1 (id=165): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233eeff00112233445566778899aabbccddeeffc1f00f15112233045566778899aabbccddeeff00000000000000000100", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x34, 0x30, 0x6d, 0x62, 0x30, 0x30, 0x64, 0x30, 0x66, 0x61, 0x30, 0x35]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb0600000000000000445566778899aabbccddeeff", 0x36}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x37, 0x65, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x64, 0x63, 0x63, 0x30, 0x30, 0x66, 0x61]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "fe1b5c4bf346207d87478c27b86bb51289055bc124bb60432572800f18aa4fd90aabed9d0fe61c88c11301a15ee3f0f5cdf737eba09fed73da1807ecb5b00d17", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x37, 0x62, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbcc0e000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x34, 0x37, 0x30, 0x54, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00152233445566778999aabbccddeeff0011223344445566778899aab5ccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(0x0, &(0x7f00000003c0)={'fscrypt:', @auto=[0x35, 0x30, 0x30, 0x30, 0x30, 0x33, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x31, 0x32, 0x0, 0x30, 0x34, 0x30, 0x34, 0x30, 0x30, 0x30, 0x32, 0x65, 0x30, 0x30, 0x8, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x33, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x36, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "bd79659c024f48b5e34a802d41dfdc553eea39517e4be298a5e6c7c1934111314bd6d38465a2326646832764d1609201f568517d108fe44375613ec929462ced", 0x15}, 0x48, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='nodatacow', r0) 362.483231ms ago: executing program 1 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) 239.817004ms ago: executing program 1 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) r3 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x1, 0x3f00, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 239.448794ms ago: executing program 3 (id=168): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 141.856317ms ago: executing program 3 (id=169): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8c2) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 0s ago: executing program 3 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x26, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x7, 0x4, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0xf56e, 0x1ff, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffe, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0xc00, 0x20, 0x5, 0xffffffdf, 0x389, 0x4, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x667, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0xfffffffc, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb4, 0xfffffffe, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x0, 0x8008, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0xb, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x1, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x8000, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x2, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x7f, 0x1000, 0xb, 0x4, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x800005, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x8000007, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x800, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7f, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0x8000db5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7b, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x0, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0x101, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0xa1, 0x7fff, 0xe, 0x101, 0x7, 0x5, 0x3, 0x4, 0x3, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 60.637551][ T4173] cgroup: Unknown subsys name 'net' [ 60.782418][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.270761][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.753903][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.793696][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.819616][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 63.865196][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.948554][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.956404][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.964833][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.992874][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.000088][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.008585][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.059485][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.070525][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.077814][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.086437][ T4185] device bridge_slave_0 entered promiscuous mode [ 64.093840][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.101224][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.109581][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.133040][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.140331][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.148747][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.156882][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.163964][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.173231][ T4185] device bridge_slave_1 entered promiscuous mode [ 64.180578][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.187927][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.196859][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.206587][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.224286][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.233837][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.241168][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.249574][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.313085][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.324488][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.342490][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.354214][ T4194] team0: Port device team_slave_0 added [ 64.362235][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.383432][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.401403][ T4194] team0: Port device team_slave_1 added [ 64.409065][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.437968][ T4188] team0: Port device team_slave_0 added [ 64.471440][ T4186] team0: Port device team_slave_0 added [ 64.479082][ T4188] team0: Port device team_slave_1 added [ 64.486527][ T4186] team0: Port device team_slave_1 added [ 64.505069][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.512850][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.539060][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.577175][ T4185] team0: Port device team_slave_0 added [ 64.583460][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.590613][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.616778][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.629129][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.636953][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.663225][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.674718][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.682243][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.690682][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.705099][ T4185] team0: Port device team_slave_1 added [ 64.711349][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.718614][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.744569][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.760432][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.768223][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.776521][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.783736][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.790942][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.816953][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.835673][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.842650][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.869326][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.912336][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.919436][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.946118][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.981464][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.991202][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.998281][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.024465][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.055503][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.090268][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.097622][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.108209][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.114873][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.122287][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.130236][ T4186] Cannot create hsr debugfs directory [ 65.147876][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.154571][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.161897][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.173816][ T4188] Cannot create hsr debugfs directory [ 65.181879][ T4187] team0: Port device team_slave_0 added [ 65.189937][ T4187] team0: Port device team_slave_1 added [ 65.253777][ T4185] device hsr_slave_0 entered promiscuous mode [ 65.260835][ T4185] device hsr_slave_1 entered promiscuous mode [ 65.267686][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.275279][ T4185] Cannot create hsr debugfs directory [ 65.313872][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.321484][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.347727][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.378729][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.386143][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.412568][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.476412][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 65.486276][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 65.486302][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 65.501454][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.507858][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 65.514021][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 65.514890][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.527131][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.534719][ T4187] Cannot create hsr debugfs directory [ 65.741064][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.754248][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.782556][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.806235][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.855470][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.867658][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.883406][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.902951][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.944531][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.953936][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.984011][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.994208][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.063412][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.071923][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.082387][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.092950][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.111732][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.139672][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.149598][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.184959][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.194497][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.204253][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.225416][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.238866][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.288195][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.306468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.316928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.325819][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.333061][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.342610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.353923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.364117][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.371204][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.379528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.408908][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.429990][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.439766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.449118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.459939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.468058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.477594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.486074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.493818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.503422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.515479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.527914][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.546198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.556222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.564948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.574844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.584469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.597366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.606025][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.613135][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.621847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.638181][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.647736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.658424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.667135][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.674241][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.684109][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.692852][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.714530][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.724651][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.733547][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.740691][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.750614][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.760442][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.769082][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.776204][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.787705][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.808340][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.816768][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.825853][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.834659][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.854495][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.880626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.892199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.905319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.917925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.934105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.943274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.952453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.961512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.970649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.980911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.990799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.999961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.008713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.032298][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.050524][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.070031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.083050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.095509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.104374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.113604][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.120763][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.130000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.139651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.148518][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.155630][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.163786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.173829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.182982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.191831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.201437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.210050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.219066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.233481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.242669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.253003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.262770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.273079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.289415][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.310882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.326848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.348720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.366373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.402841][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.421458][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.439639][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.452430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.461329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.482557][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.498670][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.516625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.524164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.539425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.551531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.559120][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 67.565644][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 67.583479][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 67.598368][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.616416][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.624835][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.631982][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.645792][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 67.651946][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 67.674479][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.685497][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.694293][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.701676][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.729673][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.738227][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.747233][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.756759][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.767356][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.819147][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.830201][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.846167][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.858693][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.876450][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.898455][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.932100][ T4194] device veth0_vlan entered promiscuous mode [ 67.952847][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.964750][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.980262][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.992144][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.004700][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.014094][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.024165][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.032484][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.048401][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.060627][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.082098][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.093680][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.128593][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.152335][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.169393][ T4194] device veth1_vlan entered promiscuous mode [ 68.192311][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.207620][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.217804][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.246324][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.286517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.296886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.315876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.324577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.364304][ T4194] device veth0_macvtap entered promiscuous mode [ 68.382376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.391277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.400839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.419727][ T4194] device veth1_macvtap entered promiscuous mode [ 68.430672][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.439693][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.448612][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.462208][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.470395][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.507977][ T4188] device veth0_vlan entered promiscuous mode [ 68.514508][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.523391][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.533259][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.542036][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.551079][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.559538][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.568596][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.577468][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.588826][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.601791][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.619259][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.628295][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.638460][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.649285][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.658625][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.667774][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.678222][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.685402][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.693402][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.705283][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.714658][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.723770][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.732658][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.744288][ T4186] device veth0_vlan entered promiscuous mode [ 68.756182][ T4185] device veth0_vlan entered promiscuous mode [ 68.764234][ T4186] device veth1_vlan entered promiscuous mode [ 68.798483][ T4188] device veth1_vlan entered promiscuous mode [ 68.808670][ T4185] device veth1_vlan entered promiscuous mode [ 68.822239][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.830524][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.839977][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.848625][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.857206][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.866360][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.878538][ T4186] device veth0_macvtap entered promiscuous mode [ 68.918677][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.928896][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.939240][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.950301][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.959939][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.970668][ T4186] device veth1_macvtap entered promiscuous mode [ 69.007385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.016505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.025003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.035855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.044653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.070391][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.087334][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.103108][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.116866][ T4185] device veth0_macvtap entered promiscuous mode [ 69.125493][ T4188] device veth0_macvtap entered promiscuous mode [ 69.137859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.147097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.155372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.164951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.175094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.184678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.196821][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.207639][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.220364][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.228514][ T4187] device veth0_vlan entered promiscuous mode [ 69.247345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.255252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.263489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.274569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.287898][ T4185] device veth1_macvtap entered promiscuous mode [ 69.299103][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.308801][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.318623][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.328191][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.339923][ T4188] device veth1_macvtap entered promiscuous mode [ 69.370651][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.381345][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.409943][ T4187] device veth1_vlan entered promiscuous mode [ 69.418927][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.427803][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.438388][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.448753][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.459678][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.471409][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.494544][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.506720][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.519922][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.531605][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.541775][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.552768][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.563430][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.573997][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.585374][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.599128][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.609835][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.620406][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.631863][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.642173][ T4193] Bluetooth: hci0: command 0x040f tx timeout [ 69.648431][ T4193] Bluetooth: hci2: command 0x040f tx timeout [ 69.656284][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.673222][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.681299][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.690148][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.698479][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.707491][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.716752][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.717195][ T4193] Bluetooth: hci4: command 0x040f tx timeout [ 69.731861][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.743179][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.754200][ T4193] Bluetooth: hci1: command 0x040f tx timeout [ 69.760845][ T4193] Bluetooth: hci3: command 0x040f tx timeout [ 69.767149][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.779313][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.790012][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.801465][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.812126][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.824515][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.834408][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.843261][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.852835][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.863831][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.884142][ T4187] device veth0_macvtap entered promiscuous mode [ 69.902007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.918434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.932635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.941931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.962864][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974444][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.989026][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.998439][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.024001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.075212][ T4187] device veth1_macvtap entered promiscuous mode [ 70.095011][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.110761][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.131224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.140632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.180715][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.187366][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.199865][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.209049][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.219561][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.230421][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.240662][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.251595][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.262309][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.275331][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.288034][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.307604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.323329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.337354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.378574][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.392550][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.404149][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.415962][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.426094][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.437360][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.447900][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.458674][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.470477][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.478046][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.490117][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.496414][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.504730][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.517472][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.526312][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.535087][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.568501][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.584036][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.598453][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.606498][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.621414][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.630203][ T164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.684128][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.701495][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.722473][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.745817][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 70.761000][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.779515][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.792113][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.800278][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.843595][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.866297][ T7] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 70.891501][ T7] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 70.915764][ T7] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 70.947161][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.957392][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.985352][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.986213][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.010132][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.029594][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.125956][ T7] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 71.143259][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.170094][ T7] usb 3-1: Product: syz [ 71.194230][ T7] usb 3-1: Manufacturer: syz [ 71.202312][ T7] usb 3-1: SerialNumber: syz [ 71.240348][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.247176][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.035566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.055570][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.065565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.075566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.085564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.095567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.105567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 72.115566][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 72.125568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 72.135569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 72.255718][ T4283] process 'syz.4.5' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 73.045365][ T4280] sched: RT throttling activated [ 73.860991][ T4281] 8021q: VLANs not supported on gre0 [ 73.958095][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 74.450872][ T7] imon 3-1:155.0: unable to initialize intf0, err -19 [ 74.513169][ T7] imon:imon_probe: failed to initialize context! [ 74.559733][ T7] imon 3-1:155.0: unable to register, err -19 [ 74.578752][ T4291] netlink: 'syz.4.6': attribute type 1 has an invalid length. [ 74.614427][ T7] usb 3-1: USB disconnect, device number 2 [ 74.655378][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 74.682628][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 74.701443][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 74.724016][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 74.743278][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 75.004052][ T4301] FAULT_INJECTION: forcing a failure. [ 75.004052][ T4301] name failslab, interval 1, probability 0, space 0, times 1 [ 75.047829][ T4301] CPU: 0 PID: 4301 Comm: syz.3.9 Not tainted syzkaller #0 [ 75.055006][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.065112][ T4301] Call Trace: [ 75.068445][ T4301] [ 75.071407][ T4301] dump_stack_lvl+0x188/0x250 [ 75.076151][ T4301] ? show_regs_print_info+0x20/0x20 [ 75.081387][ T4301] ? load_image+0x410/0x410 [ 75.085935][ T4301] ? __lock_acquire+0x7d40/0x7d40 [ 75.091007][ T4301] should_fail+0x383/0x4b0 [ 75.095490][ T4301] should_failslab+0x5/0x20 [ 75.100026][ T4301] slab_pre_alloc_hook+0x51/0xc0 [ 75.105015][ T4301] ? __alloc_file+0x25/0x240 [ 75.109652][ T4301] kmem_cache_alloc+0x3d/0x280 [ 75.114475][ T4301] __alloc_file+0x25/0x240 [ 75.118928][ T4301] alloc_empty_file+0x90/0x180 [ 75.123746][ T4301] alloc_file+0x5c/0x510 [ 75.128023][ T4301] ? do_raw_spin_unlock+0x11d/0x230 [ 75.133264][ T4301] alloc_file_pseudo+0x180/0x200 [ 75.138244][ T4301] ? alloc_empty_file_noaccount+0x80/0x80 [ 75.143998][ T4301] ? do_raw_spin_unlock+0x11d/0x230 [ 75.149239][ T4301] ? put_pid+0xc3/0x120 [ 75.153456][ T4301] sock_alloc_file+0xb3/0x240 [ 75.158178][ T4301] __sys_socketpair+0x372/0x540 [ 75.163078][ T4301] __x64_sys_socketpair+0x97/0xb0 [ 75.168157][ T4301] do_syscall_64+0x4c/0xa0 [ 75.172611][ T4301] ? clear_bhb_loop+0x30/0x80 [ 75.177322][ T4301] ? clear_bhb_loop+0x30/0x80 [ 75.182045][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.188012][ T4301] RIP: 0033:0x7fbbcf9101d9 [ 75.192466][ T4301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.212101][ T4301] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 75.220557][ T4301] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 75.228562][ T4301] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 75.236569][ T4301] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 75.244664][ T4301] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 75.252669][ T4301] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 75.260709][ T4301] [ 75.298608][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.392908][ T26] audit: type=1326 audit(1791506205.893:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1b271d9 code=0x7ffc0000 [ 75.516054][ T26] audit: type=1326 audit(1791506205.893:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1b271d9 code=0x7ffc0000 [ 75.567343][ T26] audit: type=1326 audit(1791506205.933:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 75.642083][ T26] audit: type=1326 audit(1791506205.933:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 75.740684][ T26] audit: type=1326 audit(1791506205.933:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 76.777469][ T4324] FAULT_INJECTION: forcing a failure. [ 76.777469][ T4324] name failslab, interval 1, probability 0, space 0, times 0 [ 76.877247][ T26] audit: type=1326 audit(1791506205.933:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 76.915842][ T4324] CPU: 0 PID: 4324 Comm: syz.3.17 Not tainted syzkaller #0 [ 76.923101][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.933192][ T4324] Call Trace: [ 76.936503][ T4324] [ 76.939464][ T4324] dump_stack_lvl+0x188/0x250 [ 76.944177][ T4324] ? show_regs_print_info+0x20/0x20 [ 76.949400][ T4324] ? load_image+0x410/0x410 [ 76.953929][ T4324] ? __lock_acquire+0x7d40/0x7d40 [ 76.958965][ T4324] should_fail+0x383/0x4b0 [ 76.963406][ T4324] should_failslab+0x5/0x20 [ 76.967913][ T4324] slab_pre_alloc_hook+0x51/0xc0 [ 76.972850][ T4324] ? nfs_get_tree+0xd4d/0x1510 [ 76.977618][ T4324] __kmalloc_track_caller+0x69/0x330 [ 76.982906][ T4324] ? nfs_get_tree+0xd4d/0x1510 [ 76.987676][ T4324] kmemdup_nul+0x28/0xa0 [ 76.991919][ T4324] nfs_get_tree+0xd4d/0x1510 [ 76.996518][ T4324] vfs_get_tree+0x88/0x270 [ 77.000943][ T4324] do_new_mount+0x247/0xa40 [ 77.005463][ T4324] __se_sys_mount+0x2e3/0x3d0 [ 77.010149][ T4324] ? __x64_sys_mount+0xc0/0xc0 [ 77.014921][ T4324] ? lockdep_hardirqs_on+0x94/0x140 [ 77.020127][ T4324] ? __x64_sys_mount+0x1c/0xc0 [ 77.024912][ T4324] do_syscall_64+0x4c/0xa0 [ 77.029354][ T4324] ? clear_bhb_loop+0x30/0x80 [ 77.034040][ T4324] ? clear_bhb_loop+0x30/0x80 [ 77.038740][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.044640][ T4324] RIP: 0033:0x7fbbcf9101d9 [ 77.049073][ T4324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.068698][ T4324] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.077145][ T4324] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 77.085124][ T4324] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 77.093100][ T4324] RBP: 00007fbbcf9a7888 R08: 0000200000000140 R09: 0000000000000000 [ 77.101095][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.109068][ T4324] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 77.117050][ T4324] [ 77.211969][ T26] audit: type=1326 audit(1791506205.933:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 77.335192][ T26] audit: type=1326 audit(1791506205.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 77.399541][ T26] audit: type=1326 audit(1791506205.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 77.531028][ T26] audit: type=1326 audit(1791506205.933:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 81.613026][ T4349] device syzkaller0 entered promiscuous mode [ 81.754926][ T4352] FAULT_INJECTION: forcing a failure. [ 81.754926][ T4352] name failslab, interval 1, probability 5, space 0, times 1000 [ 81.824601][ T4352] CPU: 1 PID: 4352 Comm: syz.3.25 Not tainted syzkaller #0 [ 81.831870][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.841969][ T4352] Call Trace: [ 81.845276][ T4352] [ 81.848239][ T4352] dump_stack_lvl+0x188/0x250 [ 81.852969][ T4352] ? show_regs_print_info+0x20/0x20 [ 81.858214][ T4352] ? load_image+0x410/0x410 [ 81.862757][ T4352] ? prandom_u32+0x217/0x250 [ 81.867396][ T4352] should_fail+0x383/0x4b0 [ 81.871865][ T4352] should_failslab+0x5/0x20 [ 81.876405][ T4352] slab_pre_alloc_hook+0x51/0xc0 [ 81.881389][ T4352] ? __kernfs_new_node+0xe3/0x6b0 [ 81.886465][ T4352] kmem_cache_alloc+0x3d/0x280 [ 81.891311][ T4352] __kernfs_new_node+0xe3/0x6b0 [ 81.896217][ T4352] ? __lock_acquire+0x7d40/0x7d40 [ 81.901290][ T4352] ? kernfs_new_node+0x250/0x250 [ 81.906282][ T4352] ? kernfs_activate+0x1eb/0x210 [ 81.911348][ T4352] kernfs_new_node+0x148/0x250 [ 81.916187][ T4352] __kernfs_create_file+0x47/0x2e0 [ 81.921347][ T4352] sysfs_add_file_mode_ns+0x2d2/0x390 [ 81.926770][ T4352] internal_create_group+0x492/0xd00 [ 81.932103][ T4352] ? sysfs_create_group+0x20/0x20 [ 81.937171][ T4352] ? kernfs_add_one+0x564/0x6c0 [ 81.942088][ T4352] sysfs_create_groups+0x55/0x120 [ 81.947151][ T4352] device_add_attrs+0x82/0x690 [ 81.951982][ T4352] device_add+0x677/0x1050 [ 81.956445][ T4352] netdev_register_kobject+0x184/0x320 [ 81.961951][ T4352] register_netdevice+0x10e8/0x1720 [ 81.967201][ T4352] ? netif_stacked_transfer_operstate+0x200/0x200 [ 81.973662][ T4352] ? lockdep_rtnl_is_held+0x22/0x30 [ 81.978909][ T4352] ipip6_tunnel_create+0x1af/0x660 [ 81.983493][ T4362] FAULT_INJECTION: forcing a failure. [ 81.983493][ T4362] name failslab, interval 1, probability 5, space 0, times 1000 [ 81.984065][ T4352] ipip6_newlink+0x179/0x5d0 [ 81.984099][ T4352] ? ipip6_validate+0xd0/0xd0 [ 81.984121][ T4352] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 82.011361][ T4352] ? validate_linkmsg+0x3db/0x4c0 [ 82.016441][ T4352] ? rtnl_create_link+0x85f/0xa90 [ 82.021505][ T4352] ? ipip6_validate+0xd0/0xd0 [ 82.026216][ T4352] rtnl_newlink+0x139e/0x1920 [ 82.030945][ T4352] ? rtnl_setlink+0x500/0x500 [ 82.035660][ T4352] ? mark_lock+0x94/0x320 [ 82.040025][ T4352] ? __lock_acquire+0x13b3/0x7d40 [ 82.045258][ T4352] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 82.050433][ T4352] ? rtnl_setlink+0x500/0x500 [ 82.055141][ T4352] rtnetlink_rcv_msg+0x7f1/0xf10 [ 82.060127][ T4352] ? lock_chain_count+0x20/0x20 [ 82.065020][ T4352] ? rtnetlink_bind+0x80/0x80 [ 82.069762][ T4352] ? __local_bh_enable_ip+0x136/0x1c0 [ 82.075171][ T4352] ? lockdep_hardirqs_on+0x94/0x140 [ 82.080428][ T4352] ? __local_bh_enable_ip+0x136/0x1c0 [ 82.085831][ T4352] ? _local_bh_enable+0xa0/0xa0 [ 82.090738][ T4352] ? __dev_queue_xmit+0x1b64/0x2e50 [ 82.095979][ T4352] ? dev_queue_xmit+0x20/0x20 [ 82.100700][ T4352] ? memcpy+0x3c/0x60 [ 82.104714][ T4352] ? __copy_skb_header+0x3ba/0x4f0 [ 82.109858][ T4352] netlink_rcv_skb+0x1e9/0x430 [ 82.114653][ T4352] ? rtnetlink_bind+0x80/0x80 [ 82.119370][ T4352] ? netlink_ack+0xb10/0xb10 [ 82.124017][ T4352] netlink_unicast+0x78f/0x940 [ 82.128821][ T4352] netlink_sendmsg+0x8ba/0xbe0 [ 82.133652][ T4352] ? netlink_getsockopt+0x570/0x570 [ 82.138882][ T4352] ? aa_sock_msg_perm+0x94/0x150 [ 82.143863][ T4352] ? apparmor_socket_sendmsg+0x88/0x230 [ 82.149443][ T4352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 82.154762][ T4352] ? security_socket_sendmsg+0x7c/0xa0 [ 82.160256][ T4352] ? netlink_getsockopt+0x570/0x570 [ 82.165489][ T4352] ____sys_sendmsg+0x5be/0x8f0 [ 82.170297][ T4352] ? __sys_sendmsg_sock+0x30/0x30 [ 82.175359][ T4352] ? import_iovec+0x6f/0xa0 [ 82.179929][ T4352] ___sys_sendmsg+0x236/0x2e0 [ 82.184654][ T4352] ? __sys_sendmsg+0x290/0x290 [ 82.189505][ T4352] __se_sys_sendmsg+0x1b7/0x2a0 [ 82.194393][ T4352] ? __x64_sys_sendmsg+0x80/0x80 [ 82.199356][ T4352] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.205396][ T4352] ? lockdep_hardirqs_on+0x94/0x140 [ 82.210632][ T4352] do_syscall_64+0x4c/0xa0 [ 82.215074][ T4352] ? clear_bhb_loop+0x30/0x80 [ 82.219778][ T4352] ? clear_bhb_loop+0x30/0x80 [ 82.224483][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.230405][ T4352] RIP: 0033:0x7fbbcf9101d9 [ 82.234847][ T4352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.254481][ T4352] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.263024][ T4352] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 82.271052][ T4352] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 82.279051][ T4352] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 82.287047][ T4352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.295043][ T4352] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 82.303059][ T4352] [ 82.306096][ T4362] CPU: 0 PID: 4362 Comm: syz.0.29 Not tainted syzkaller #0 [ 82.313329][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.323428][ T4362] Call Trace: [ 82.326741][ T4362] [ 82.329698][ T4362] dump_stack_lvl+0x188/0x250 [ 82.334429][ T4362] ? show_regs_print_info+0x20/0x20 [ 82.339673][ T4362] ? load_image+0x410/0x410 [ 82.344237][ T4362] ? __might_sleep+0xf0/0xf0 [ 82.348865][ T4362] ? __lock_acquire+0x7d40/0x7d40 [ 82.353930][ T4362] ? fib_rules_register+0x3cc/0x3f0 [ 82.359171][ T4362] should_fail+0x383/0x4b0 [ 82.363636][ T4362] should_failslab+0x5/0x20 [ 82.368176][ T4362] slab_pre_alloc_hook+0x51/0xc0 [ 82.373152][ T4362] __kmalloc+0x6b/0x340 [ 82.377349][ T4362] ? fib_default_rule_add+0x4b/0x390 [ 82.382676][ T4362] fib_default_rule_add+0x4b/0x390 [ 82.388036][ T4362] fib4_rules_init+0x46/0x160 [ 82.392768][ T4362] fib_net_init+0x177/0x360 [ 82.397330][ T4362] ? rcu_lock_release+0x20/0x20 [ 82.402229][ T4362] ? _raw_spin_unlock+0x24/0x40 [ 82.407116][ T4362] ? __register_sysctl_table+0x1175/0x1240 [ 82.412973][ T4362] ? devinet_init_net+0x364/0x590 [ 82.418039][ T4362] ops_init+0x360/0x5f0 [ 82.422248][ T4362] setup_net+0x39e/0xa10 [ 82.426541][ T4362] ? copy_net_ns+0x5b0/0x5b0 [ 82.431171][ T4362] ? copy_net_ns+0x324/0x5b0 [ 82.435793][ T4362] ? down_read_killable+0x1ce/0x340 [ 82.441032][ T4362] copy_net_ns+0x33e/0x5b0 [ 82.445487][ T4362] create_new_namespaces+0x3ce/0x700 [ 82.450819][ T4362] unshare_nsproxy_namespaces+0x116/0x160 [ 82.456582][ T4362] ksys_unshare+0x4f6/0x8e0 [ 82.461119][ T4362] ? __lock_acquire+0x7d40/0x7d40 [ 82.466182][ T4362] ? sighand_ctor+0x40/0x40 [ 82.470715][ T4362] ? lock_chain_count+0x20/0x20 [ 82.475614][ T4362] ? syscall_enter_from_user_mode+0x21/0x70 [ 82.481553][ T4362] __x64_sys_unshare+0x34/0x40 [ 82.486371][ T4362] do_syscall_64+0x4c/0xa0 [ 82.490822][ T4362] ? clear_bhb_loop+0x30/0x80 [ 82.495534][ T4362] ? clear_bhb_loop+0x30/0x80 [ 82.500253][ T4362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.506200][ T4362] RIP: 0033:0x7f85583b21d9 [ 82.510646][ T4362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.530294][ T4362] RSP: 002b:00007f855660a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.538777][ T4362] RAX: ffffffffffffffda RBX: 00007f8558639fa0 RCX: 00007f85583b21d9 [ 82.546814][ T4362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 82.554814][ T4362] RBP: 00007f8558449888 R08: 0000000000000000 R09: 0000000000000000 [ 82.562825][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.570849][ T4362] R13: 00007f855863a038 R14: 00007f8558639fa0 R15: 00007ffc116ba418 [ 82.578876][ T4362] [ 82.778183][ T4374] FAULT_INJECTION: forcing a failure. [ 82.778183][ T4374] name failslab, interval 1, probability 5, space 0, times 998 [ 82.792199][ T4374] CPU: 0 PID: 4374 Comm: syz.4.31 Not tainted syzkaller #0 [ 82.799460][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.809552][ T4374] Call Trace: [ 82.812859][ T4374] [ 82.815815][ T4374] dump_stack_lvl+0x188/0x250 [ 82.820535][ T4374] ? show_regs_print_info+0x20/0x20 [ 82.825767][ T4374] ? load_image+0x410/0x410 [ 82.830309][ T4374] ? __lock_acquire+0x7d40/0x7d40 [ 82.835373][ T4374] ? rcu_lock_release+0x5/0x20 [ 82.840178][ T4374] should_fail+0x383/0x4b0 [ 82.844633][ T4374] should_failslab+0x5/0x20 [ 82.849168][ T4374] slab_pre_alloc_hook+0x51/0xc0 [ 82.854140][ T4374] kmem_cache_alloc_trace+0x47/0x290 [ 82.859456][ T4374] ? nat_init_net+0x61/0x190 [ 82.864090][ T4374] nat_init_net+0x61/0x190 [ 82.868552][ T4374] ops_init+0x360/0x5f0 [ 82.872766][ T4374] setup_net+0x39e/0xa10 [ 82.877042][ T4374] ? copy_net_ns+0x5b0/0x5b0 [ 82.881668][ T4374] ? copy_net_ns+0x324/0x5b0 [ 82.886287][ T4374] ? down_read_killable+0x1ce/0x340 [ 82.891526][ T4374] copy_net_ns+0x33e/0x5b0 [ 82.895984][ T4374] create_new_namespaces+0x3ce/0x700 [ 82.901321][ T4374] unshare_nsproxy_namespaces+0x116/0x160 [ 82.907085][ T4374] ksys_unshare+0x4f6/0x8e0 [ 82.911621][ T4374] ? __lock_acquire+0x7d40/0x7d40 [ 82.916690][ T4374] ? sighand_ctor+0x40/0x40 [ 82.921245][ T4374] ? lock_chain_count+0x20/0x20 [ 82.926145][ T4374] ? syscall_enter_from_user_mode+0x21/0x70 [ 82.932077][ T4374] __x64_sys_unshare+0x34/0x40 [ 82.936874][ T4374] do_syscall_64+0x4c/0xa0 [ 82.941323][ T4374] ? clear_bhb_loop+0x30/0x80 [ 82.946029][ T4374] ? clear_bhb_loop+0x30/0x80 [ 82.950738][ T4374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.956668][ T4374] RIP: 0033:0x7f66b1b271d9 [ 82.961120][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.980761][ T4374] RSP: 002b:00007f66afd5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.989240][ T4374] RAX: ffffffffffffffda RBX: 00007f66b1daf090 RCX: 00007f66b1b271d9 [ 82.997267][ T4374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 83.005265][ T4374] RBP: 00007f66b1bbe888 R08: 0000000000000000 R09: 0000000000000000 [ 83.013281][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.021279][ T4374] R13: 00007f66b1daf128 R14: 00007f66b1daf090 R15: 00007fff86df1c88 [ 83.029297][ T4374] [ 86.112436][ T4384] FAULT_INJECTION: forcing a failure. [ 86.112436][ T4384] name failslab, interval 1, probability 5, space 0, times 997 [ 86.220955][ T4384] CPU: 0 PID: 4384 Comm: syz.0.36 Not tainted syzkaller #0 [ 86.228234][ T4384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.238330][ T4384] Call Trace: [ 86.241655][ T4384] [ 86.244623][ T4384] dump_stack_lvl+0x188/0x250 [ 86.249350][ T4384] ? show_regs_print_info+0x20/0x20 [ 86.254603][ T4384] ? load_image+0x410/0x410 [ 86.259168][ T4384] ? __might_sleep+0xf0/0xf0 [ 86.263828][ T4384] ? __lock_acquire+0x7d40/0x7d40 [ 86.268896][ T4384] should_fail+0x383/0x4b0 [ 86.273356][ T4384] should_failslab+0x5/0x20 [ 86.277896][ T4384] slab_pre_alloc_hook+0x51/0xc0 [ 86.282882][ T4384] ? __proc_create+0x36f/0x8b0 [ 86.287685][ T4384] kmem_cache_alloc+0x3d/0x280 [ 86.292507][ T4384] __proc_create+0x36f/0x8b0 [ 86.297139][ T4384] ? proc_symlink+0x210/0x210 [ 86.304132][ T4384] ? make_kgid+0x1c4/0x650 [ 86.308632][ T4384] ? from_kuid_munged+0x6e0/0x6e0 [ 86.313700][ T4384] _proc_mkdir+0x5f/0x160 [ 86.318046][ T4384] proc_net_ns_init+0x287/0x380 [ 86.322947][ T4384] ops_init+0x360/0x5f0 [ 86.327145][ T4384] setup_net+0x39e/0xa10 [ 86.331421][ T4384] ? copy_net_ns+0x5b0/0x5b0 [ 86.336025][ T4384] ? copy_net_ns+0x324/0x5b0 [ 86.340631][ T4384] ? down_read_killable+0x1ce/0x340 [ 86.345838][ T4384] copy_net_ns+0x33e/0x5b0 [ 86.350285][ T4384] create_new_namespaces+0x3ce/0x700 [ 86.355606][ T4384] unshare_nsproxy_namespaces+0x116/0x160 [ 86.361368][ T4384] ksys_unshare+0x4f6/0x8e0 [ 86.365896][ T4384] ? __lock_acquire+0x7d40/0x7d40 [ 86.370954][ T4384] ? sighand_ctor+0x40/0x40 [ 86.375463][ T4384] ? lock_chain_count+0x20/0x20 [ 86.380320][ T4384] ? syscall_enter_from_user_mode+0x21/0x70 [ 86.386240][ T4384] __x64_sys_unshare+0x34/0x40 [ 86.391039][ T4384] do_syscall_64+0x4c/0xa0 [ 86.395461][ T4384] ? clear_bhb_loop+0x30/0x80 [ 86.400163][ T4384] ? clear_bhb_loop+0x30/0x80 [ 86.404844][ T4384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.410743][ T4384] RIP: 0033:0x7f85583b21d9 [ 86.415164][ T4384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.434771][ T4384] RSP: 002b:00007f855660a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.443189][ T4384] RAX: ffffffffffffffda RBX: 00007f8558639fa0 RCX: 00007f85583b21d9 [ 86.451166][ T4384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 86.459138][ T4384] RBP: 00007f8558449888 R08: 0000000000000000 R09: 0000000000000000 [ 86.467108][ T4384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.475080][ T4384] R13: 00007f855863a038 R14: 00007f8558639fa0 R15: 00007ffc116ba418 [ 86.483078][ T4384] [ 86.599174][ T1325] cfg80211: failed to load regulatory.db [ 86.982469][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.990049][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709029][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.755271][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.243438][ T4367] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.252506][ T4367] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.262905][ T4367] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.272184][ T4367] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.405187][ T4387] netlink: 830 bytes leftover after parsing attributes in process `syz.1.37'. [ 88.568854][ T4410] FAULT_INJECTION: forcing a failure. [ 88.568854][ T4410] name failslab, interval 1, probability 5, space 0, times 1000 [ 88.609605][ T4410] CPU: 1 PID: 4410 Comm: syz.3.42 Not tainted syzkaller #0 [ 88.616873][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.626974][ T4410] Call Trace: [ 88.630292][ T4410] [ 88.633257][ T4410] dump_stack_lvl+0x188/0x250 [ 88.637980][ T4410] ? show_regs_print_info+0x20/0x20 [ 88.643336][ T4410] ? load_image+0x410/0x410 [ 88.647898][ T4410] ? prandom_u32+0x217/0x250 [ 88.652532][ T4410] should_fail+0x383/0x4b0 [ 88.656992][ T4410] should_failslab+0x5/0x20 [ 88.661539][ T4410] slab_pre_alloc_hook+0x51/0xc0 [ 88.666523][ T4410] __kmalloc+0x6b/0x340 [ 88.670716][ T4410] ? sk_prot_alloc+0xe7/0x210 [ 88.675438][ T4410] sk_prot_alloc+0xe7/0x210 [ 88.679983][ T4410] ? sk_alloc+0x1d/0x310 [ 88.684273][ T4410] sk_alloc+0x2f/0x310 [ 88.688389][ T4410] __netlink_create+0x6c/0x290 [ 88.693200][ T4410] ? __lock_acquire+0x7d40/0x7d40 [ 88.698273][ T4410] netlink_create+0x3a7/0x510 [ 88.702998][ T4410] ? rtnetlink_rcv+0x20/0x20 [ 88.707720][ T4410] __sock_create+0x473/0x910 [ 88.712361][ T4410] __sys_socket+0xe2/0x170 [ 88.716859][ T4410] __x64_sys_socket+0x76/0x80 [ 88.721588][ T4410] do_syscall_64+0x4c/0xa0 [ 88.726052][ T4410] ? clear_bhb_loop+0x30/0x80 [ 88.730779][ T4410] ? clear_bhb_loop+0x30/0x80 [ 88.735516][ T4410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.741489][ T4410] RIP: 0033:0x7fbbcf9101d9 [ 88.745954][ T4410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.765687][ T4410] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 88.774146][ T4410] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 88.782155][ T4410] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 88.790366][ T4410] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 88.791822][ T4285] tipc: Subscription rejected, illegal request [ 88.798371][ T4410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.798389][ T4410] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 88.798420][ T4410] [ 88.971680][ T4433] FAULT_INJECTION: forcing a failure. [ 88.971680][ T4433] name failslab, interval 1, probability 5, space 0, times 999 [ 88.984781][ T4433] CPU: 0 PID: 4433 Comm: syz.0.51 Not tainted syzkaller #0 [ 88.992018][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.002106][ T4433] Call Trace: [ 89.005507][ T4433] [ 89.008474][ T4433] dump_stack_lvl+0x188/0x250 [ 89.013197][ T4433] ? show_regs_print_info+0x20/0x20 [ 89.018440][ T4433] ? load_image+0x410/0x410 [ 89.023002][ T4433] should_fail+0x383/0x4b0 [ 89.027469][ T4433] should_failslab+0x5/0x20 [ 89.032019][ T4433] slab_pre_alloc_hook+0x51/0xc0 [ 89.037000][ T4433] __kmalloc_node_track_caller+0x68/0x3a0 [ 89.042760][ T4433] ? tipc_buf_acquire+0x27/0xd0 [ 89.047647][ T4433] ? __alloc_skb+0xf4/0x750 [ 89.052184][ T4433] ? tipc_buf_acquire+0x27/0xd0 [ 89.057103][ T4433] __alloc_skb+0x22c/0x750 [ 89.061563][ T4433] tipc_buf_acquire+0x27/0xd0 [ 89.066299][ T4433] tipc_named_publish+0x262/0x760 [ 89.071385][ T4433] tipc_nametbl_publish+0x15a/0x270 [ 89.076632][ T4433] tipc_sk_publish+0x1c8/0x420 [ 89.081436][ T4433] ? __lock_acquire+0x7d40/0x7d40 [ 89.086525][ T4433] ? tipc_sk_withdraw+0x640/0x640 [ 89.091585][ T4433] ? tipc_nametbl_build_group+0x447/0x480 [ 89.097355][ T4433] ? tipc_group_create+0x357/0x4e0 [ 89.102725][ T4433] tipc_sk_join+0x3ac/0x6a0 [ 89.107274][ T4433] ? __tipc_sendstream+0x1280/0x1280 [ 89.112613][ T4433] tipc_setsockopt+0x6b8/0x960 [ 89.117430][ T4433] ? tipc_shutdown+0x4d0/0x4d0 [ 89.122256][ T4433] ? aa_sock_opt_perm+0x74/0x100 [ 89.127262][ T4433] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 89.132843][ T4433] ? security_socket_setsockopt+0x7a/0xa0 [ 89.138601][ T4433] ? tipc_shutdown+0x4d0/0x4d0 [ 89.143412][ T4433] __sys_setsockopt+0x2bf/0x3d0 [ 89.148320][ T4433] __x64_sys_setsockopt+0xb1/0xc0 [ 89.153396][ T4433] do_syscall_64+0x4c/0xa0 [ 89.157854][ T4433] ? clear_bhb_loop+0x30/0x80 [ 89.162576][ T4433] ? clear_bhb_loop+0x30/0x80 [ 89.167301][ T4433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.173242][ T4433] RIP: 0033:0x7f85583b21d9 [ 89.177700][ T4433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.197346][ T4433] RSP: 002b:00007f855660a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.205801][ T4433] RAX: ffffffffffffffda RBX: 00007f8558639fa0 RCX: 00007f85583b21d9 [ 89.213820][ T4433] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 89.221832][ T4433] RBP: 00007f8558449888 R08: 000000000000001c R09: 0000000000000000 [ 89.230358][ T4433] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 89.238362][ T4433] R13: 00007f855863a038 R14: 00007f8558639fa0 R15: 00007ffc116ba418 [ 89.246381][ T4433] [ 89.249613][ T4433] tipc: Publication distribution failure [ 89.362545][ T4437] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 89.375349][ T4437] device syzkaller1 entered promiscuous mode [ 89.539085][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.401584][ T4451] FAULT_INJECTION: forcing a failure. [ 90.401584][ T4451] name failslab, interval 1, probability 5, space 0, times 1000 [ 90.416001][ T4451] CPU: 1 PID: 4451 Comm: syz.3.57 Not tainted syzkaller #0 [ 90.423279][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.433365][ T4451] Call Trace: [ 90.436677][ T4451] [ 90.439644][ T4451] dump_stack_lvl+0x188/0x250 [ 90.444363][ T4451] ? show_regs_print_info+0x20/0x20 [ 90.449596][ T4451] ? load_image+0x410/0x410 [ 90.454154][ T4451] should_fail+0x383/0x4b0 [ 90.458620][ T4451] should_failslab+0x5/0x20 [ 90.463151][ T4451] slab_pre_alloc_hook+0x51/0xc0 [ 90.468125][ T4451] ? __alloc_file+0x25/0x240 [ 90.472748][ T4451] kmem_cache_alloc+0x3d/0x280 [ 90.477564][ T4451] __alloc_file+0x25/0x240 [ 90.482036][ T4451] alloc_empty_file+0x90/0x180 [ 90.486846][ T4451] alloc_file+0x5c/0x510 [ 90.491127][ T4451] ? do_raw_spin_unlock+0x11d/0x230 [ 90.496363][ T4451] alloc_file_pseudo+0x180/0x200 [ 90.501338][ T4451] ? alloc_empty_file_noaccount+0x80/0x80 [ 90.507098][ T4451] ? alloc_fd+0x59e/0x650 [ 90.511471][ T4451] sock_alloc_file+0xb3/0x240 [ 90.516183][ T4451] __sys_socket+0x11d/0x170 [ 90.520726][ T4451] __x64_sys_socket+0x76/0x80 [ 90.525445][ T4451] do_syscall_64+0x4c/0xa0 [ 90.529900][ T4451] ? clear_bhb_loop+0x30/0x80 [ 90.534615][ T4451] ? clear_bhb_loop+0x30/0x80 [ 90.539337][ T4451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.545269][ T4451] RIP: 0033:0x7fbbcf9101d9 [ 90.549718][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.569356][ T4451] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 90.577813][ T4451] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 90.585819][ T4451] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 90.593832][ T4451] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 90.601838][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.609841][ T4451] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 90.617847][ T4451] [ 90.634662][ T4451] FAULT_INJECTION: forcing a failure. [ 90.634662][ T4451] name failslab, interval 1, probability 5, space 0, times 999 [ 90.648417][ T4451] CPU: 0 PID: 4451 Comm: syz.3.57 Not tainted syzkaller #0 [ 90.655662][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.665748][ T4451] Call Trace: [ 90.669063][ T4451] [ 90.672022][ T4451] dump_stack_lvl+0x188/0x250 [ 90.676742][ T4451] ? show_regs_print_info+0x20/0x20 [ 90.681982][ T4451] ? load_image+0x410/0x410 [ 90.686535][ T4451] should_fail+0x383/0x4b0 [ 90.691001][ T4451] should_failslab+0x5/0x20 [ 90.695536][ T4451] slab_pre_alloc_hook+0x51/0xc0 [ 90.700505][ T4451] ? getname_flags+0xb7/0x4f0 [ 90.705218][ T4451] kmem_cache_alloc+0x3d/0x280 [ 90.710017][ T4451] getname_flags+0xb7/0x4f0 [ 90.714572][ T4451] do_sys_openat2+0xdd/0x500 [ 90.719191][ T4451] ? __lock_acquire+0x7d40/0x7d40 [ 90.724258][ T4451] ? do_sys_open+0xe0/0xe0 [ 90.725798][ T21] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 90.728708][ T4451] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.744691][ T4451] ? lock_chain_count+0x20/0x20 [ 90.749592][ T4451] __x64_sys_openat+0x135/0x160 [ 90.754485][ T4451] do_syscall_64+0x4c/0xa0 [ 90.755699][ T21] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 90.758932][ T4451] ? clear_bhb_loop+0x30/0x80 [ 90.773519][ T4451] ? clear_bhb_loop+0x30/0x80 [ 90.778261][ T4451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.784201][ T4451] RIP: 0033:0x7fbbcf9101d9 [ 90.788649][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.808290][ T4451] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.816764][ T4451] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 90.824773][ T4451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 90.832779][ T4451] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 90.840786][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.848796][ T4451] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 90.856812][ T4451] [ 90.948370][ T21] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.968558][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.977431][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 90.977444][ T26] audit: type=1326 audit(1791506221.483:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b1b271d9 code=0x7ffc0000 [ 90.997495][ T21] usb 2-1: Product: ᐊ [ 91.032640][ T21] usb 2-1: Manufacturer: 墀댑蚵殞ﹹ肽意휁蕮楉졭휻蚺馹㺅Ḋᜩ띐끬ฯ誸뷅∭愀ᨓ煰鿊闢鐝퀨火㚸嚭簆譼듢造蕜늱툚嘐ⷂ勲吐ᖭ璆ᕺꈞ㯩䷙嚜콢ｑ씛쬻‪済⚖뾦돖띂疙ꄓ斳僐堭퇙륔⺰獯⃬䮇ꢅ捶옢᷺恙驕䁃ᛆ쮇៘ܺɓ縭ߌꮁ㌮鬊억ࡷ浽ꬔぴ꧓ꪼ [ 91.062209][ T26] audit: type=1326 audit(1791506221.513:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.111785][ T26] audit: type=1326 audit(1791506221.513:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.139001][ T26] audit: type=1326 audit(1791506221.513:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.173893][ T26] audit: type=1326 audit(1791506221.513:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.204876][ T26] audit: type=1326 audit(1791506221.513:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.234571][ T26] audit: type=1326 audit(1791506221.513:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.270126][ T26] audit: type=1326 audit(1791506221.523:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.294439][ T26] audit: type=1326 audit(1791506221.523:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.319083][ T26] audit: type=1326 audit(1791506221.523:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66b1b26e6b code=0x7ffc0000 [ 91.676378][ T21] cdc_ncm 2-1:1.0: bind() failure [ 91.764045][ T21] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 91.821006][ T21] cdc_ncm 2-1:1.1: bind() failure [ 91.970256][ T21] usb 2-1: USB disconnect, device number 2 [ 92.490952][ T4492] FAULT_INJECTION: forcing a failure. [ 92.490952][ T4492] name failslab, interval 1, probability 5, space 0, times 1000 [ 92.565280][ T4492] CPU: 1 PID: 4492 Comm: syz.0.72 Not tainted syzkaller #0 [ 92.572561][ T4492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.582646][ T4492] Call Trace: [ 92.585979][ T4492] [ 92.588947][ T4492] dump_stack_lvl+0x188/0x250 [ 92.593679][ T4492] ? show_regs_print_info+0x20/0x20 [ 92.598913][ T4492] ? load_image+0x410/0x410 [ 92.603576][ T4492] ? prandom_u32+0x217/0x250 [ 92.608217][ T4492] should_fail+0x383/0x4b0 [ 92.612677][ T4492] should_failslab+0x5/0x20 [ 92.617216][ T4492] slab_pre_alloc_hook+0x51/0xc0 [ 92.622188][ T4492] ? __kernfs_new_node+0xe3/0x6b0 [ 92.623153][ T4495] jffs2: notice: (4495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.627252][ T4492] kmem_cache_alloc+0x3d/0x280 [ 92.627284][ T4492] __kernfs_new_node+0xe3/0x6b0 [ 92.627315][ T4492] ? __lock_acquire+0x7d40/0x7d40 [ 92.658620][ T4492] ? kernfs_new_node+0x250/0x250 [ 92.663619][ T4492] ? kernfs_activate+0x1eb/0x210 [ 92.668604][ T4492] kernfs_new_node+0x148/0x250 [ 92.673430][ T4492] __kernfs_create_file+0x47/0x2e0 [ 92.678599][ T4492] sysfs_add_file_mode_ns+0x2d2/0x390 [ 92.684024][ T4492] internal_create_group+0x492/0xd00 [ 92.689357][ T4492] ? sysfs_create_group+0x20/0x20 [ 92.694429][ T4492] ? kernfs_add_one+0x564/0x6c0 [ 92.699345][ T4492] sysfs_create_groups+0x55/0x120 [ 92.704408][ T4492] device_add_attrs+0x82/0x690 [ 92.709224][ T4492] device_add+0x677/0x1050 [ 92.713692][ T4492] netdev_register_kobject+0x184/0x320 [ 92.719201][ T4492] register_netdevice+0x10e8/0x1720 [ 92.724452][ T4492] ? netif_stacked_transfer_operstate+0x200/0x200 [ 92.730926][ T4492] ? lockdep_rtnl_is_held+0x22/0x30 [ 92.736180][ T4492] ipip6_tunnel_create+0x1af/0x660 [ 92.741340][ T4492] ipip6_newlink+0x179/0x5d0 [ 92.745973][ T4492] ? ipip6_validate+0xd0/0xd0 [ 92.750696][ T4492] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 92.755670][ T4492] ? validate_linkmsg+0x3db/0x4c0 [ 92.760734][ T4492] ? rtnl_create_link+0x85f/0xa90 [ 92.765792][ T4492] ? ipip6_validate+0xd0/0xd0 [ 92.770495][ T4492] rtnl_newlink+0x139e/0x1920 [ 92.775198][ T4492] ? rtnl_setlink+0x500/0x500 [ 92.779895][ T4492] ? mark_lock+0x94/0x320 [ 92.784246][ T4492] ? __lock_acquire+0x13b3/0x7d40 [ 92.789356][ T4492] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 92.794515][ T4492] ? rtnl_setlink+0x500/0x500 [ 92.799219][ T4492] rtnetlink_rcv_msg+0x7f1/0xf10 [ 92.804447][ T4492] ? lock_chain_count+0x20/0x20 [ 92.809328][ T4492] ? rtnetlink_bind+0x80/0x80 [ 92.814030][ T4492] ? __local_bh_enable_ip+0x136/0x1c0 [ 92.819423][ T4492] ? lockdep_hardirqs_on+0x94/0x140 [ 92.824642][ T4492] ? __local_bh_enable_ip+0x136/0x1c0 [ 92.830039][ T4492] ? _local_bh_enable+0xa0/0xa0 [ 92.834917][ T4492] ? __dev_queue_xmit+0x1b64/0x2e50 [ 92.840156][ T4492] ? dev_queue_xmit+0x20/0x20 [ 92.844849][ T4492] ? memcpy+0x3c/0x60 [ 92.848852][ T4492] ? __copy_skb_header+0x3ba/0x4f0 [ 92.853993][ T4492] netlink_rcv_skb+0x1e9/0x430 [ 92.858779][ T4492] ? rtnetlink_bind+0x80/0x80 [ 92.863483][ T4492] ? netlink_ack+0xb10/0xb10 [ 92.868103][ T4492] netlink_unicast+0x78f/0x940 [ 92.872895][ T4492] netlink_sendmsg+0x8ba/0xbe0 [ 92.877683][ T4492] ? netlink_getsockopt+0x570/0x570 [ 92.882893][ T4492] ? aa_sock_msg_perm+0x94/0x150 [ 92.887885][ T4492] ? apparmor_socket_sendmsg+0x88/0x230 [ 92.893468][ T4492] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 92.898770][ T4492] ? security_socket_sendmsg+0x7c/0xa0 [ 92.904250][ T4492] ? netlink_getsockopt+0x570/0x570 [ 92.909464][ T4492] ____sys_sendmsg+0x5be/0x8f0 [ 92.914260][ T4492] ? __sys_sendmsg_sock+0x30/0x30 [ 92.919327][ T4492] ? import_iovec+0x6f/0xa0 [ 92.924021][ T4492] ___sys_sendmsg+0x236/0x2e0 [ 92.928719][ T4492] ? __sys_sendmsg+0x290/0x290 [ 92.933542][ T4492] __se_sys_sendmsg+0x1b7/0x2a0 [ 92.938416][ T4492] ? __x64_sys_sendmsg+0x80/0x80 [ 92.943369][ T4492] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.949380][ T4492] ? lockdep_hardirqs_on+0x94/0x140 [ 92.954603][ T4492] do_syscall_64+0x4c/0xa0 [ 92.959041][ T4492] ? clear_bhb_loop+0x30/0x80 [ 92.963731][ T4492] ? clear_bhb_loop+0x30/0x80 [ 92.968428][ T4492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.974346][ T4492] RIP: 0033:0x7f85583b21d9 [ 92.978799][ T4492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.998423][ T4492] RSP: 002b:00007f855660a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.006856][ T4492] RAX: ffffffffffffffda RBX: 00007f8558639fa0 RCX: 00007f85583b21d9 [ 93.014866][ T4492] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 93.022858][ T4492] RBP: 00007f8558449888 R08: 0000000000000000 R09: 0000000000000000 [ 93.030859][ T4492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.038853][ T4492] R13: 00007f855863a038 R14: 00007f8558639fa0 R15: 00007ffc116ba418 [ 93.046872][ T4492] [ 93.329675][ T4505] Zero length message leads to an empty skb [ 94.070221][ T4513] bridge0: port 3(netdevsim0) entered blocking state [ 94.078358][ T4513] bridge0: port 3(netdevsim0) entered disabled state [ 94.088795][ T4513] device netdevsim0 entered promiscuous mode [ 94.095646][ T4513] bridge0: port 3(netdevsim0) entered blocking state [ 94.102640][ T4513] bridge0: port 3(netdevsim0) entered forwarding state [ 94.188306][ T4514] device syzkaller0 entered promiscuous mode [ 94.195862][ T4193] syzkaller0: tun_net_xmit 48 [ 94.211180][ T4514] syzkaller0: tun_net_xmit 1280 [ 94.331246][ T4527] FAULT_INJECTION: forcing a failure. [ 94.331246][ T4527] name failslab, interval 1, probability 5, space 0, times 1000 [ 94.344423][ T4527] CPU: 1 PID: 4527 Comm: syz.1.86 Not tainted syzkaller #0 [ 94.351663][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.361767][ T4527] Call Trace: [ 94.365073][ T4527] [ 94.368027][ T4527] dump_stack_lvl+0x188/0x250 [ 94.372911][ T4527] ? show_regs_print_info+0x20/0x20 [ 94.378118][ T4527] ? load_image+0x410/0x410 [ 94.382647][ T4527] ? prandom_u32+0x217/0x250 [ 94.387294][ T4527] should_fail+0x383/0x4b0 [ 94.391733][ T4527] should_failslab+0x5/0x20 [ 94.396263][ T4527] slab_pre_alloc_hook+0x51/0xc0 [ 94.401245][ T4527] kmem_cache_alloc_trace+0x47/0x290 [ 94.406571][ T4527] ? device_add+0xb2/0x1050 [ 94.411118][ T4527] device_add+0xb2/0x1050 [ 94.415487][ T4527] ? device_initialize+0x2a5/0x4d0 [ 94.420630][ T4527] netdev_register_kobject+0x184/0x320 [ 94.426114][ T4527] register_netdevice+0x10e8/0x1720 [ 94.431372][ T4527] ? netif_stacked_transfer_operstate+0x200/0x200 [ 94.437852][ T4527] ? lockdep_rtnl_is_held+0x22/0x30 [ 94.443109][ T4527] ipip6_tunnel_create+0x1af/0x660 [ 94.448238][ T4527] ipip6_newlink+0x179/0x5d0 [ 94.452884][ T4527] ? ipip6_validate+0xd0/0xd0 [ 94.457605][ T4527] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 94.462586][ T4527] ? validate_linkmsg+0x3db/0x4c0 [ 94.467652][ T4527] ? rtnl_create_link+0x85f/0xa90 [ 94.472712][ T4527] ? ipip6_validate+0xd0/0xd0 [ 94.477425][ T4527] rtnl_newlink+0x139e/0x1920 [ 94.482128][ T4527] ? rtnl_setlink+0x500/0x500 [ 94.486825][ T4527] ? mark_lock+0x94/0x320 [ 94.491183][ T4527] ? __lock_acquire+0x13b3/0x7d40 [ 94.496353][ T4527] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 94.501589][ T4527] ? rtnl_setlink+0x500/0x500 [ 94.506325][ T4527] rtnetlink_rcv_msg+0x7f1/0xf10 [ 94.511332][ T4527] ? lock_chain_count+0x20/0x20 [ 94.516243][ T4527] ? rtnetlink_bind+0x80/0x80 [ 94.520954][ T4527] ? __local_bh_enable_ip+0x136/0x1c0 [ 94.526375][ T4527] ? lockdep_hardirqs_on+0x94/0x140 [ 94.531599][ T4527] ? __local_bh_enable_ip+0x136/0x1c0 [ 94.536988][ T4527] ? _local_bh_enable+0xa0/0xa0 [ 94.541894][ T4527] ? __dev_queue_xmit+0x1b64/0x2e50 [ 94.547427][ T4527] ? dev_queue_xmit+0x20/0x20 [ 94.552147][ T4527] ? memcpy+0x3c/0x60 [ 94.556197][ T4527] ? __copy_skb_header+0x3ba/0x4f0 [ 94.561361][ T4527] netlink_rcv_skb+0x1e9/0x430 [ 94.566173][ T4527] ? rtnetlink_bind+0x80/0x80 [ 94.570876][ T4527] ? netlink_ack+0xb10/0xb10 [ 94.575491][ T4527] netlink_unicast+0x78f/0x940 [ 94.580311][ T4527] netlink_sendmsg+0x8ba/0xbe0 [ 94.585087][ T4527] ? netlink_getsockopt+0x570/0x570 [ 94.590396][ T4527] ? aa_sock_msg_perm+0x94/0x150 [ 94.595356][ T4527] ? apparmor_socket_sendmsg+0x88/0x230 [ 94.600940][ T4527] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 94.606275][ T4527] ? security_socket_sendmsg+0x7c/0xa0 [ 94.611778][ T4527] ? netlink_getsockopt+0x570/0x570 [ 94.617046][ T4527] ____sys_sendmsg+0x5be/0x8f0 [ 94.621873][ T4527] ? __sys_sendmsg_sock+0x30/0x30 [ 94.626926][ T4527] ? import_iovec+0x6f/0xa0 [ 94.631443][ T4527] ___sys_sendmsg+0x236/0x2e0 [ 94.636340][ T4527] ? __sys_sendmsg+0x290/0x290 [ 94.641220][ T4527] __se_sys_sendmsg+0x1b7/0x2a0 [ 94.646188][ T4527] ? __x64_sys_sendmsg+0x80/0x80 [ 94.651176][ T4527] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.657217][ T4527] ? lockdep_hardirqs_on+0x94/0x140 [ 94.662554][ T4527] do_syscall_64+0x4c/0xa0 [ 94.666988][ T4527] ? clear_bhb_loop+0x30/0x80 [ 94.671695][ T4527] ? clear_bhb_loop+0x30/0x80 [ 94.676423][ T4527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.682369][ T4527] RIP: 0033:0x7f0a589d61d9 [ 94.686828][ T4527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.706531][ T4527] RSP: 002b:00007f0a56c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.714993][ T4527] RAX: ffffffffffffffda RBX: 00007f0a58c5dfa0 RCX: 00007f0a589d61d9 [ 94.722969][ T4527] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 94.730947][ T4527] RBP: 00007f0a58a6d888 R08: 0000000000000000 R09: 0000000000000000 [ 94.738931][ T4527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.746932][ T4527] R13: 00007f0a58c5e038 R14: 00007f0a58c5dfa0 R15: 00007ffdc94197e8 [ 94.754958][ T4527] [ 94.760760][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.825742][ T4530] FAULT_INJECTION: forcing a failure. [ 94.825742][ T4530] name failslab, interval 1, probability 5, space 0, times 999 [ 94.837034][ T4268] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.885007][ T4530] CPU: 0 PID: 4530 Comm: syz.4.87 Not tainted syzkaller #0 [ 94.892279][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.902372][ T4530] Call Trace: [ 94.905685][ T4530] [ 94.908670][ T4530] dump_stack_lvl+0x188/0x250 [ 94.913566][ T4530] ? show_regs_print_info+0x20/0x20 [ 94.918804][ T4530] ? load_image+0x410/0x410 [ 94.923377][ T4530] ? __lock_acquire+0x7d40/0x7d40 [ 94.928464][ T4530] should_fail+0x383/0x4b0 [ 94.932924][ T4530] should_failslab+0x5/0x20 [ 94.937463][ T4530] slab_pre_alloc_hook+0x51/0xc0 [ 94.942467][ T4530] __kmalloc+0x6b/0x340 [ 94.946653][ T4530] ? mpi_powm+0x1694/0x2390 [ 94.951201][ T4530] mpi_powm+0x1694/0x2390 [ 94.955597][ T4530] ? mpihelp_release_karatsuba_ctx+0x160/0x160 [ 94.961795][ T4530] ? mpihelp_cmp+0xb6/0xd0 [ 94.966251][ T4530] ? mpi_cmp+0x1b4/0x290 [ 94.970540][ T4530] rsa_enc+0x28f/0x3c0 [ 94.974651][ T4530] ? rsa_exit+0x20/0x20 [ 94.978874][ T4530] pkcs1pad_verify+0x465/0x670 [ 94.983686][ T4530] public_key_verify_signature+0x87f/0xd40 [ 94.989549][ T4530] ? public_key_free+0x80/0x80 [ 94.994381][ T4530] ? asymmetric_key_id_same+0x63/0xe0 [ 94.999802][ T4530] x509_check_for_self_signed+0x317/0x420 [ 95.005564][ T4530] x509_cert_parse+0x59c/0x7a0 [ 95.010371][ T4530] x509_key_preparse+0x60/0x5d0 [ 95.015264][ T4530] ? down_read+0x1aa/0x2e0 [ 95.019739][ T4530] asymmetric_key_preparse+0xa5/0x140 [ 95.025149][ T4530] key_create_or_update+0x432/0xa40 [ 95.030381][ T4530] ? security_key_permission+0x7c/0xa0 [ 95.035881][ T4530] ? key_type_put+0x20/0x20 [ 95.040423][ T4530] ? lookup_user_key_possessed+0x40/0x40 [ 95.046105][ T4530] ? __might_fault+0xb3/0x110 [ 95.050823][ T4530] __se_sys_add_key+0x34b/0x410 [ 95.055718][ T4530] ? __x64_sys_add_key+0xc0/0xc0 [ 95.060704][ T4530] ? lockdep_hardirqs_on+0x94/0x140 [ 95.065941][ T4530] ? __x64_sys_add_key+0x1c/0xc0 [ 95.071266][ T4530] do_syscall_64+0x4c/0xa0 [ 95.075716][ T4530] ? clear_bhb_loop+0x30/0x80 [ 95.080425][ T4530] ? clear_bhb_loop+0x30/0x80 [ 95.085140][ T4530] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.091069][ T4530] RIP: 0033:0x7f66b1b271d9 [ 95.095516][ T4530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.115157][ T4530] RSP: 002b:00007f66afd7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.123621][ T4530] RAX: ffffffffffffffda RBX: 00007f66b1daefa0 RCX: 00007f66b1b271d9 [ 95.131621][ T4530] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 95.139627][ T4530] RBP: 00007f66b1bbe888 R08: 000000001e3f4f23 R09: 0000000000000000 [ 95.147630][ T4530] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 95.155633][ T4530] R13: 00007f66b1daf038 R14: 00007f66b1daefa0 R15: 00007fff86df1c88 [ 95.163674][ T4530] [ 95.220876][ T4233] usb 1-1: not running at top speed; connect to a high speed hub [ 95.405798][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.417426][ T4233] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 95.426576][ T4233] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 95.435795][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.565784][ T4268] usb 4-1: Using ep0 maxpacket: 32 [ 95.685701][ T4268] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.701087][ T4268] usb 4-1: config 0 has no interface number 0 [ 95.709118][ T4231] usb 1-1: USB disconnect, device number 2 [ 95.865903][ T4268] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 95.915625][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.930333][ T4268] usb 4-1: Product: syz [ 95.935623][ T4268] usb 4-1: Manufacturer: syz [ 95.940453][ T4268] usb 4-1: SerialNumber: syz [ 95.962021][ T4268] usb 4-1: config 0 descriptor?? [ 96.018971][ T4268] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 96.048387][ T4268] usb 4-1: selecting invalid altsetting 1 [ 96.061778][ T4268] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 96.093049][ T4268] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.111665][ T4268] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 96.123813][ T4268] usb 4-1: media controller created [ 96.168246][ T4268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.244932][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 96.306429][ T4268] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 96.314129][ T4268] zl10353_read_register: readreg error (reg=127, ret==-71) [ 96.345797][ T4268] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 96.453023][ T4268] usb 4-1: USB disconnect, device number 2 [ 96.491619][ T4569] bond0: (slave bond_slave_0): Releasing backup interface [ 96.660979][ T4581] device syzkaller1 entered promiscuous mode [ 96.705905][ T4334] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.954439][ T4597] FAULT_INJECTION: forcing a failure. [ 96.954439][ T4597] name failslab, interval 1, probability 5, space 0, times 998 [ 96.967915][ T4597] CPU: 0 PID: 4597 Comm: syz.4.117 Not tainted syzkaller #0 [ 96.975254][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.985330][ T4597] Call Trace: [ 96.988626][ T4597] [ 96.991586][ T4597] dump_stack_lvl+0x188/0x250 [ 96.996305][ T4597] ? show_regs_print_info+0x20/0x20 [ 97.001540][ T4597] ? load_image+0x410/0x410 [ 97.006084][ T4597] ? __lock_acquire+0x7d40/0x7d40 [ 97.011161][ T4597] should_fail+0x383/0x4b0 [ 97.015632][ T4597] should_failslab+0x5/0x20 [ 97.020165][ T4597] slab_pre_alloc_hook+0x51/0xc0 [ 97.025143][ T4597] ? prepare_creds+0x3c/0x610 [ 97.029853][ T4597] kmem_cache_alloc+0x3d/0x280 [ 97.034659][ T4597] prepare_creds+0x3c/0x610 [ 97.039200][ T4597] join_session_keyring+0x17/0x440 [ 97.044348][ T4597] __se_sys_keyctl+0x933/0xa20 [ 97.049146][ T4597] ? __x64_sys_keyctl+0xc0/0xc0 [ 97.054038][ T4597] ? __context_tracking_exit+0x4c/0x80 [ 97.059540][ T4597] ? __lock_acquire+0x7d40/0x7d40 [ 97.064625][ T4597] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.070652][ T4597] ? lock_chain_count+0x20/0x20 [ 97.075572][ T4597] ? lockdep_hardirqs_on+0x94/0x140 [ 97.080813][ T4597] ? __x64_sys_keyctl+0x1c/0xc0 [ 97.085706][ T4597] do_syscall_64+0x4c/0xa0 [ 97.085879][ T4233] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.090154][ T4597] ? clear_bhb_loop+0x30/0x80 [ 97.090182][ T4597] ? clear_bhb_loop+0x30/0x80 [ 97.107023][ T4597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.112955][ T4597] RIP: 0033:0x7f66b1b271d9 [ 97.117406][ T4597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.137056][ T4597] RSP: 002b:00007f66afd7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 97.145509][ T4597] RAX: ffffffffffffffda RBX: 00007f66b1daefa0 RCX: 00007f66b1b271d9 [ 97.153507][ T4597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 97.161515][ T4597] RBP: 00007f66b1bbe888 R08: 0000000000000000 R09: 0000000000000000 [ 97.169517][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.177514][ T4597] R13: 00007f66b1daf038 R14: 00007f66b1daefa0 R15: 00007fff86df1c88 [ 97.185532][ T4597] [ 97.319246][ T4334] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 97.466167][ T4334] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 97.481884][ T4334] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 97.554351][ T4334] usb 1-1: Manufacturer: syz [ 97.586446][ T4334] usb 1-1: SerialNumber: syz [ 97.675798][ T4233] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 98.021049][ T4334] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 98.065649][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 98.073844][ T4233] usb 2-1: Product: syz [ 98.078153][ T4233] usb 2-1: Manufacturer: syz [ 98.082771][ T4233] usb 2-1: SerialNumber: syz [ 98.104202][ T4233] usb 2-1: config 0 descriptor?? [ 98.110912][ T4334] usb 1-1: USB disconnect, device number 3 [ 98.320364][ T4611] FAULT_INJECTION: forcing a failure. [ 98.320364][ T4611] name failslab, interval 1, probability 5, space 0, times 997 [ 98.355245][ T4610] binder: 4609:4610 ioctl c00c6211 0 returned -22 [ 98.400479][ T4233] usb 2-1: USB disconnect, device number 3 [ 98.418035][ T4611] CPU: 1 PID: 4611 Comm: syz.3.122 Not tainted syzkaller #0 [ 98.425434][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.435533][ T4611] Call Trace: [ 98.438841][ T4611] [ 98.441805][ T4611] dump_stack_lvl+0x188/0x250 [ 98.446531][ T4611] ? show_regs_print_info+0x20/0x20 [ 98.451772][ T4611] ? load_image+0x410/0x410 [ 98.456313][ T4611] ? __might_sleep+0xf0/0xf0 [ 98.460945][ T4611] ? __lock_acquire+0x7d40/0x7d40 [ 98.466017][ T4611] should_fail+0x383/0x4b0 [ 98.470491][ T4611] should_failslab+0x5/0x20 [ 98.475029][ T4611] slab_pre_alloc_hook+0x51/0xc0 [ 98.480046][ T4611] ? __proc_create+0x36f/0x8b0 [ 98.484861][ T4611] kmem_cache_alloc+0x3d/0x280 [ 98.489675][ T4611] __proc_create+0x36f/0x8b0 [ 98.494314][ T4611] ? proc_symlink+0x210/0x210 [ 98.499037][ T4611] ? make_kgid+0x1c4/0x650 [ 98.503509][ T4611] ? _raw_write_unlock+0x24/0x40 [ 98.508486][ T4611] _proc_mkdir+0x5f/0x160 [ 98.512871][ T4611] netfilter_net_init+0x2f2/0x350 [ 98.517961][ T4611] ops_init+0x360/0x5f0 [ 98.522187][ T4611] setup_net+0x39e/0xa10 [ 98.526483][ T4611] ? copy_net_ns+0x5b0/0x5b0 [ 98.531131][ T4611] ? copy_net_ns+0x324/0x5b0 [ 98.535764][ T4611] ? down_read_killable+0x1ce/0x340 [ 98.541018][ T4611] copy_net_ns+0x33e/0x5b0 [ 98.545518][ T4611] create_new_namespaces+0x3ce/0x700 [ 98.550869][ T4611] unshare_nsproxy_namespaces+0x116/0x160 [ 98.556644][ T4611] ksys_unshare+0x4f6/0x8e0 [ 98.561192][ T4611] ? __lock_acquire+0x7d40/0x7d40 [ 98.566277][ T4611] ? sighand_ctor+0x40/0x40 [ 98.570825][ T4611] ? lock_chain_count+0x20/0x20 [ 98.575731][ T4611] ? syscall_enter_from_user_mode+0x21/0x70 [ 98.581687][ T4611] __x64_sys_unshare+0x34/0x40 [ 98.586503][ T4611] do_syscall_64+0x4c/0xa0 [ 98.590960][ T4611] ? clear_bhb_loop+0x30/0x80 [ 98.595681][ T4611] ? clear_bhb_loop+0x30/0x80 [ 98.600410][ T4611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.606378][ T4611] RIP: 0033:0x7fbbcf9101d9 [ 98.610832][ T4611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.630481][ T4611] RSP: 002b:00007fbbcdb47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 98.638971][ T4611] RAX: ffffffffffffffda RBX: 00007fbbcfb98090 RCX: 00007fbbcf9101d9 [ 98.646988][ T4611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 98.654996][ T4611] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 98.663005][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.671015][ T4611] R13: 00007fbbcfb98128 R14: 00007fbbcfb98090 R15: 00007ffd16bee768 [ 98.679058][ T4611] [ 98.890342][ T4611] cannot create netfilter proc entry [ 99.641426][ T4608] bridge0: port 3(netdevsim0) entered disabled state [ 99.653638][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.661443][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.995763][ T4233] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 100.170358][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.202947][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.365643][ T4233] usb 1-1: config 8 has an invalid interface number: 16 but max is 0 [ 100.374517][ T4233] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 100.424836][ T4233] usb 1-1: config 8 has no interface number 0 [ 100.431090][ T4233] usb 1-1: config 8 interface 16 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 100.444284][ T4233] usb 1-1: config 8 interface 16 has no altsetting 0 [ 100.451270][ T4233] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 100.460400][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.517898][ T4233] usbhid 1-1:8.16: couldn't find an input interrupt endpoint [ 100.761765][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 100.761805][ T26] audit: type=1326 audit(1791506232.261:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85583b21d9 code=0x7ffc0000 [ 100.801309][ T26] audit: type=1326 audit(1791506232.301:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85583b21d9 code=0x7ffc0000 [ 100.827059][ T4608] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.835764][ T26] audit: type=1326 audit(1791506232.301:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 100.847284][ T4608] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.875604][ T26] audit: type=1326 audit(1791506232.301:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 100.907753][ T4608] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.920353][ T4233] usb 1-1: USB disconnect, device number 4 [ 100.925942][ T4608] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.931973][ T26] audit: type=1326 audit(1791506232.301:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 100.962496][ T26] audit: type=1326 audit(1791506232.301:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 100.992518][ T26] audit: type=1326 audit(1791506232.301:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 101.022106][ T26] audit: type=1326 audit(1791506232.301:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 101.057567][ T26] audit: type=1326 audit(1791506232.301:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 101.093531][ T26] audit: type=1326 audit(1791506232.301:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4632 comm="syz.0.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85583b1e6b code=0x7ffc0000 [ 101.168433][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 101.223409][ T4623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 101.594033][ T164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.644664][ T4620] chnl_net:caif_netlink_parms(): no params data found [ 101.673369][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 101.765744][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.891930][ T164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.995063][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.003534][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.011232][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 102.059654][ T4620] device bridge_slave_0 entered promiscuous mode [ 102.101196][ T164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.145981][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 102.176106][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.188760][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.210295][ T4620] device bridge_slave_1 entered promiscuous mode [ 102.278648][ T164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.337769][ T4620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.366001][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.379779][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.407371][ T4620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.422754][ T13] usb 2-1: Product: syz [ 102.435654][ T13] usb 2-1: Manufacturer: syz [ 102.452940][ T13] usb 2-1: SerialNumber: syz [ 102.490814][ T13] usb 2-1: config 0 descriptor?? [ 102.542329][ T4620] team0: Port device team_slave_0 added [ 102.593429][ T4620] team0: Port device team_slave_1 added [ 102.703583][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.712676][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.916925][ T4620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.037374][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.066416][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.143509][ T4620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.236967][ T1111] usb 2-1: USB disconnect, device number 4 [ 103.245678][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 103.375496][ T4620] device hsr_slave_0 entered promiscuous mode [ 103.410975][ T4620] device hsr_slave_1 entered promiscuous mode [ 103.464450][ T4620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.483140][ T4620] Cannot create hsr debugfs directory [ 103.510321][ T4683] FAULT_INJECTION: forcing a failure. [ 103.510321][ T4683] name failslab, interval 1, probability 5, space 0, times 996 [ 103.644504][ T4683] CPU: 1 PID: 4683 Comm: syz.3.140 Not tainted syzkaller #0 [ 103.651828][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.661882][ T4683] Call Trace: [ 103.665160][ T4683] [ 103.668103][ T4683] dump_stack_lvl+0x188/0x250 [ 103.672790][ T4683] ? show_regs_print_info+0x20/0x20 [ 103.677989][ T4683] ? load_image+0x410/0x410 [ 103.682502][ T4683] ? __might_sleep+0xf0/0xf0 [ 103.687106][ T4683] ? __lock_acquire+0x7d40/0x7d40 [ 103.692168][ T4683] should_fail+0x383/0x4b0 [ 103.696611][ T4683] should_failslab+0x5/0x20 [ 103.701159][ T4683] slab_pre_alloc_hook+0x51/0xc0 [ 103.706101][ T4683] kmem_cache_alloc_trace+0x47/0x290 [ 103.711404][ T4683] ? netdev_init+0x93/0x1f0 [ 103.715919][ T4683] netdev_init+0x93/0x1f0 [ 103.720252][ T4683] ops_init+0x360/0x5f0 [ 103.724417][ T4683] setup_net+0x39e/0xa10 [ 103.728670][ T4683] ? copy_net_ns+0x5b0/0x5b0 [ 103.733270][ T4683] ? copy_net_ns+0x324/0x5b0 [ 103.737864][ T4683] ? down_read_killable+0x1ce/0x340 [ 103.743068][ T4683] copy_net_ns+0x33e/0x5b0 [ 103.747500][ T4683] create_new_namespaces+0x3ce/0x700 [ 103.752836][ T4683] unshare_nsproxy_namespaces+0x116/0x160 [ 103.758595][ T4683] ksys_unshare+0x4f6/0x8e0 [ 103.763157][ T4683] ? __lock_acquire+0x7d40/0x7d40 [ 103.768226][ T4683] ? sighand_ctor+0x40/0x40 [ 103.772758][ T4683] ? lock_chain_count+0x20/0x20 [ 103.777653][ T4683] ? syscall_enter_from_user_mode+0x21/0x70 [ 103.783587][ T4683] __x64_sys_unshare+0x34/0x40 [ 103.788381][ T4683] do_syscall_64+0x4c/0xa0 [ 103.792847][ T4683] ? clear_bhb_loop+0x30/0x80 [ 103.797574][ T4683] ? clear_bhb_loop+0x30/0x80 [ 103.802292][ T4683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.808222][ T4683] RIP: 0033:0x7fbbcf9101d9 [ 103.812667][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.832299][ T4683] RSP: 002b:00007fbbcdb68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.840743][ T4683] RAX: ffffffffffffffda RBX: 00007fbbcfb97fa0 RCX: 00007fbbcf9101d9 [ 103.848744][ T4683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 103.856746][ T4683] RBP: 00007fbbcf9a7888 R08: 0000000000000000 R09: 0000000000000000 [ 103.864741][ T4683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.872826][ T4683] R13: 00007fbbcfb98038 R14: 00007fbbcfb97fa0 R15: 00007ffd16bee768 [ 103.880845][ T4683] [ 104.462398][ T4701] bond0: option slaves: interface -b does not exist! [ 105.043285][ T4620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.101448][ T4620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.129570][ T4620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.216191][ T4620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.316032][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 105.399561][ T4733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'. [ 106.703236][ T4745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.155'. [ 106.787393][ T4758] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 106.955488][ T4620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.106812][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.114726][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.174244][ T164] device hsr_slave_0 left promiscuous mode [ 107.203966][ T4786] 0x000000000000-0x000000010000 : "" [ 107.211065][ T164] device hsr_slave_1 left promiscuous mode [ 107.229878][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.254641][ T164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.270380][ T4786] ftl_cs: FTL header not found. [ 107.302883][ T164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.310645][ T4786] FAULT_INJECTION: forcing a failure. [ 107.310645][ T4786] name failslab, interval 1, probability 5, space 0, times 995 [ 107.334065][ T164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.363321][ T164] device bridge_slave_1 left promiscuous mode [ 107.373290][ T4786] CPU: 0 PID: 4786 Comm: syz.1.167 Not tainted syzkaller #0 [ 107.380638][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.390724][ T4786] Call Trace: [ 107.394036][ T4786] [ 107.396999][ T4786] dump_stack_lvl+0x188/0x250 [ 107.401746][ T4786] ? show_regs_print_info+0x20/0x20 [ 107.406983][ T4786] ? load_image+0x410/0x410 [ 107.411529][ T4786] ? __might_sleep+0xf0/0xf0 [ 107.416154][ T4786] ? __lock_acquire+0x7d40/0x7d40 [ 107.421231][ T4786] should_fail+0x383/0x4b0 [ 107.425702][ T4786] should_failslab+0x5/0x20 [ 107.430399][ T4786] slab_pre_alloc_hook+0x51/0xc0 [ 107.435391][ T4786] kmem_cache_alloc_trace+0x47/0x290 [ 107.440725][ T4786] ? kobject_create_and_add+0x54/0x220 [ 107.446243][ T4786] kobject_create_and_add+0x54/0x220 [ 107.451589][ T4786] device_add_disk+0x5b7/0xde0 [ 107.456416][ T4786] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 107.461769][ T4786] mtdblock_add_mtd+0x186/0x240 [ 107.466673][ T4786] blktrans_notify_add+0x95/0xe0 [ 107.471657][ T4786] add_mtd_device+0xd40/0x1260 [ 107.476492][ T4786] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 107.482358][ T4786] ? mtd_cls_resume+0x130/0x130 [ 107.487291][ T4786] mtd_add_partition+0x25d/0x420 [ 107.492292][ T4786] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 107.497477][ T4786] ? shrink_ecclayout+0xab0/0xab0 [ 107.502567][ T4786] ? __might_fault+0xb3/0x110 [ 107.507311][ T4786] ? _copy_from_user+0x111/0x170 [ 107.512306][ T4786] mtdchar_ioctl+0x14cb/0x1d70 [ 107.517131][ T4786] ? mtdchar_close+0x180/0x180 [ 107.521959][ T4786] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.527992][ T4786] ? verify_lock_unused+0x140/0x140 [ 107.533363][ T4786] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 107.539200][ T4786] ? rcu_lock_release+0x5/0x20 [ 107.544059][ T4786] ? __mutex_trylock_common+0x15c/0x260 [ 107.549651][ T4786] ? rcu_lock_release+0x20/0x20 [ 107.554550][ T4786] ? __mutex_lock_common+0x435/0x2400 [ 107.560072][ T4786] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 107.565487][ T4786] ? mutex_lock_io_nested+0x60/0x60 [ 107.570750][ T4786] mtdchar_unlocked_ioctl+0xad/0xd0 [ 107.576017][ T4786] ? mtdchar_write+0x5a0/0x5a0 [ 107.580905][ T4786] __se_sys_ioctl+0xfa/0x170 [ 107.585540][ T4786] do_syscall_64+0x4c/0xa0 [ 107.589992][ T4786] ? clear_bhb_loop+0x30/0x80 [ 107.594728][ T4786] ? clear_bhb_loop+0x30/0x80 [ 107.599467][ T4786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.605508][ T4786] RIP: 0033:0x7f0a589d61d9 [ 107.609959][ T4786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.629601][ T4786] RSP: 002b:00007f0a56c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.638140][ T4786] RAX: ffffffffffffffda RBX: 00007f0a58c5dfa0 RCX: 00007f0a589d61d9 [ 107.646146][ T4786] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000008 [ 107.654251][ T4786] RBP: 00007f0a58a6d888 R08: 0000000000000000 R09: 0000000000000000 [ 107.662284][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.670291][ T4786] R13: 00007f0a58c5e038 R14: 00007f0a58c5dfa0 R15: 00007ffdc94197e8 [ 107.678314][ T4786] [ 107.683828][ T4193] Bluetooth: hci5: command 0x0419 tx timeout [ 107.700826][ T164] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.733110][ T164] device bridge_slave_0 left promiscuous mode [ 107.746022][ T4786] ------------[ cut here ]------------ [ 107.751562][ T4786] WARNING: CPU: 0 PID: 4786 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 107.761637][ T164] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.776436][ T4786] Modules linked in: [ 107.798211][ T4786] CPU: 0 PID: 4786 Comm: syz.1.167 Not tainted syzkaller #0 [ 107.809753][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.820954][ T4786] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 107.832497][ T164] device veth1_macvtap left promiscuous mode [ 107.840345][ T164] device veth0_macvtap left promiscuous mode [ 107.848254][ T4786] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 107.873233][ T164] device veth1_vlan left promiscuous mode [ 107.880108][ T164] device veth0_vlan left promiscuous mode [ 107.890827][ T4786] RSP: 0018:ffffc9000349f470 EFLAGS: 00010287 [ 107.916892][ T4786] RAX: ffffffff83d31e76 RBX: ffff888062c5fc00 RCX: 0000000000080000 [ 107.941998][ T4786] RDX: ffffc9000c611000 RSI: 000000000006f1b6 RDI: 000000000006f1b7 [ 107.969242][ T4786] RBP: 000000000000001f R08: ffff8880607261db R09: 1ffff1100c0e4c3b [ 107.989750][ T4786] R10: dffffc0000000000 R11: ffffed100c0e4c3c R12: ffff888145e13b00 [ 108.008776][ T4786] R13: 1ffff1100c58bf94 R14: dffffc0000000000 R15: ffff888145e13b00 [ 108.024185][ T4786] FS: 00007f0a56c2e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 108.033514][ T4786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.040620][ T4786] CR2: 00007fd70d637e9c CR3: 000000005c96e000 CR4: 00000000003506e0 [ 108.049235][ T4786] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.067846][ T4786] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.085170][ T4786] Call Trace: [ 108.091049][ T4786] [ 108.094041][ T4786] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 108.099573][ T4786] mtdblock_add_mtd+0x186/0x240 [ 108.104470][ T4786] blktrans_notify_add+0x95/0xe0 [ 108.109569][ T4786] add_mtd_device+0xd40/0x1260 [ 108.114399][ T4786] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 108.120431][ T4786] ? mtd_cls_resume+0x130/0x130 [ 108.125361][ T4786] mtd_add_partition+0x25d/0x420 [ 108.130428][ T4786] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 108.135685][ T4786] ? shrink_ecclayout+0xab0/0xab0 [ 108.140781][ T4786] ? __might_fault+0xb3/0x110 [ 108.145498][ T4786] ? _copy_from_user+0x111/0x170 [ 108.151357][ T4786] mtdchar_ioctl+0x14cb/0x1d70 [ 108.160904][ T4786] ? mtdchar_close+0x180/0x180 [ 108.167120][ T4786] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.173203][ T4786] ? verify_lock_unused+0x140/0x140 [ 108.183291][ T4786] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 108.191523][ T4786] ? rcu_lock_release+0x5/0x20 [ 108.202860][ T4786] ? __mutex_trylock_common+0x15c/0x260 [ 108.211057][ T4786] ? rcu_lock_release+0x20/0x20 [ 108.220672][ T4786] ? __mutex_lock_common+0x435/0x2400 [ 108.228490][ T4786] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 108.233958][ T4786] ? mutex_lock_io_nested+0x60/0x60 [ 108.243859][ T4786] mtdchar_unlocked_ioctl+0xad/0xd0 [ 108.251391][ T4786] ? mtdchar_write+0x5a0/0x5a0 [ 108.261679][ T4786] __se_sys_ioctl+0xfa/0x170 [ 108.268740][ T4786] do_syscall_64+0x4c/0xa0 [ 108.273265][ T4786] ? clear_bhb_loop+0x30/0x80 [ 108.282664][ T4786] ? clear_bhb_loop+0x30/0x80 [ 108.289783][ T4786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.300207][ T4786] RIP: 0033:0x7f0a589d61d9 [ 108.304690][ T4786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.326341][ T4786] RSP: 002b:00007f0a56c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.334811][ T4786] RAX: ffffffffffffffda RBX: 00007f0a58c5dfa0 RCX: 00007f0a589d61d9 [ 108.342908][ T4786] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000008 [ 108.351091][ T4786] RBP: 00007f0a58a6d888 R08: 0000000000000000 R09: 0000000000000000 [ 108.359970][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.368218][ T4786] R13: 00007f0a58c5e038 R14: 00007f0a58c5dfa0 R15: 00007ffdc94197e8 [ 108.376312][ T4786] [ 108.379381][ T4786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.386708][ T4786] CPU: 1 PID: 4786 Comm: syz.1.167 Not tainted syzkaller #0 [ 108.394019][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.404196][ T4786] Call Trace: [ 108.407510][ T4786] [ 108.410461][ T4786] dump_stack_lvl+0x188/0x250 [ 108.415152][ T4786] ? show_regs_print_info+0x20/0x20 [ 108.420366][ T4786] ? load_image+0x410/0x410 [ 108.424910][ T4786] panic+0x2f8/0x850 [ 108.428827][ T4786] ? bpf_jit_dump+0xd0/0xd0 [ 108.433799][ T4786] ? device_add_disk+0x8d6/0xde0 [ 108.438756][ T4786] __warn+0x248/0x2b0 [ 108.442778][ T4786] ? device_add_disk+0x8d6/0xde0 [ 108.447770][ T4786] report_bug+0x1b9/0x2e0 [ 108.452147][ T4786] handle_bug+0x3a/0x70 [ 108.456344][ T4786] exc_invalid_op+0x16/0x40 [ 108.460887][ T4786] asm_exc_invalid_op+0x16/0x20 [ 108.465951][ T4786] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 108.471507][ T4786] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 108.491219][ T4786] RSP: 0018:ffffc9000349f470 EFLAGS: 00010287 [ 108.497414][ T4786] RAX: ffffffff83d31e76 RBX: ffff888062c5fc00 RCX: 0000000000080000 [ 108.505508][ T4786] RDX: ffffc9000c611000 RSI: 000000000006f1b6 RDI: 000000000006f1b7 [ 108.513510][ T4786] RBP: 000000000000001f R08: ffff8880607261db R09: 1ffff1100c0e4c3b [ 108.521511][ T4786] R10: dffffc0000000000 R11: ffffed100c0e4c3c R12: ffff888145e13b00 [ 108.529492][ T4786] R13: 1ffff1100c58bf94 R14: dffffc0000000000 R15: ffff888145e13b00 [ 108.537518][ T4786] ? device_add_disk+0x8d6/0xde0 [ 108.542514][ T4786] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 108.547842][ T4786] mtdblock_add_mtd+0x186/0x240 [ 108.552739][ T4786] blktrans_notify_add+0x95/0xe0 [ 108.557713][ T4786] add_mtd_device+0xd40/0x1260 [ 108.562707][ T4786] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 108.568570][ T4786] ? mtd_cls_resume+0x130/0x130 [ 108.573460][ T4786] mtd_add_partition+0x25d/0x420 [ 108.578470][ T4786] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 108.583636][ T4786] ? shrink_ecclayout+0xab0/0xab0 [ 108.588710][ T4786] ? __might_fault+0xb3/0x110 [ 108.593435][ T4786] ? _copy_from_user+0x111/0x170 [ 108.598418][ T4786] mtdchar_ioctl+0x14cb/0x1d70 [ 108.603252][ T4786] ? mtdchar_close+0x180/0x180 [ 108.608055][ T4786] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.614073][ T4786] ? verify_lock_unused+0x140/0x140 [ 108.619288][ T4786] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 108.624952][ T4786] ? rcu_lock_release+0x5/0x20 [ 108.629748][ T4786] ? __mutex_trylock_common+0x15c/0x260 [ 108.635308][ T4786] ? rcu_lock_release+0x20/0x20 [ 108.640190][ T4786] ? __mutex_lock_common+0x435/0x2400 [ 108.645614][ T4786] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 108.651031][ T4786] ? mutex_lock_io_nested+0x60/0x60 [ 108.656285][ T4786] mtdchar_unlocked_ioctl+0xad/0xd0 [ 108.661517][ T4786] ? mtdchar_write+0x5a0/0x5a0 [ 108.666310][ T4786] __se_sys_ioctl+0xfa/0x170 [ 108.670944][ T4786] do_syscall_64+0x4c/0xa0 [ 108.675370][ T4786] ? clear_bhb_loop+0x30/0x80 [ 108.680058][ T4786] ? clear_bhb_loop+0x30/0x80 [ 108.684749][ T4786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.690675][ T4786] RIP: 0033:0x7f0a589d61d9 [ 108.695151][ T4786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.714783][ T4786] RSP: 002b:00007f0a56c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.723211][ T4786] RAX: ffffffffffffffda RBX: 00007f0a58c5dfa0 RCX: 00007f0a589d61d9 [ 108.731228][ T4786] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000008 [ 108.739220][ T4786] RBP: 00007f0a58a6d888 R08: 0000000000000000 R09: 0000000000000000 [ 108.747227][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.755227][ T4786] R13: 00007f0a58c5e038 R14: 00007f0a58c5dfa0 R15: 00007ffdc94197e8 [ 108.763236][ T4786] [ 108.766488][ T4786] Kernel Offset: disabled [ 108.770963][ T4786] Rebooting in 86400 seconds..