last executing test programs: 17.044937997s ago: executing program 3 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0x24, &(0x7f0000000440)="f0c46000", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 16.873041172s ago: executing program 3 (id=555): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x10, 0x4, 0x0, &(0x7f00000016c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r3}, &(0x7f0000001f40), &(0x7f0000001f80)=r2}, 0x20) recvmmsg(r1, &(0x7f0000002080), 0x400023c, 0x300, 0x0) 7.54907998s ago: executing program 3 (id=602): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42}, 0x10) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e32, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40811}, 0x4c880) 7.362302386s ago: executing program 3 (id=605): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000ac0)=@newtfilter={0x1344, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0xb3e663cebd849897, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1314, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0xebc, 0x1, [@m_csum={0x38, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0xc, 0x6, "e4b02c332e9fbca9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0xe50, 0x15, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0xffffffffffffffff, 0x9, 0x80000001}, 0x5, 0x8}, [{0x6e, 0xfffffffc, 0x80000000, 0xfe, 0x4, 0x4}, {0x7, 0x89af, 0x79a8, 0xb00, 0x8, 0x1}, {0x81, 0x7, 0x8, 0x1, 0x3, 0x8}, {0x4, 0x2, 0x8001, 0x5, 0x7, 0x6}, {0xfff, 0x4, 0x8001, 0x3, 0x2, 0x5}, {0x5d, 0xfff, 0x1, 0x9, 0x5, 0xfffffffb}, {0x2, 0x10000, 0x5, 0x7, 0xfffffffa, 0x80000000}, {0x6d, 0x9, 0x7, 0xf, 0x2, 0xe}, {0xd, 0x3, 0x3, 0x6, 0x3, 0x5}, {0xfd3, 0x61, 0xfffffffd, 0x39c, 0x1, 0x80000000}, {0xfffffffe, 0x1000, 0xf, 0x8001, 0xd6, 0x2}, {0xc1, 0x6, 0x5, 0x5, 0x0, 0x8}, {0xc0c, 0x8b69, 0x8001, 0x8, 0xfffffff8, 0xfff}, {0x3, 0x7, 0x59, 0x2682c656, 0x53, 0x5}, {0x7f, 0x53, 0x2, 0x8001, 0xae0, 0x6}, {0x2, 0x9, 0x6, 0xc4, 0x6, 0x40}, {0x7fffffff, 0x80, 0x7, 0x2, 0x1, 0x1}, {0x10001, 0x1, 0x10000, 0x6, 0x0, 0x5}, {0x1, 0x1, 0x0, 0x9, 0x30000000, 0x9}, {0xfffffff8, 0x7205, 0x0, 0x0, 0xfb40, 0x2}, {0x1, 0x6, 0x2, 0xdc16, 0x5, 0x1ff}, {0xc, 0x4, 0x100, 0xb21, 0x7fff, 0x2}, {0x3f, 0x6, 0xb1, 0x0, 0x8, 0xf2}, {0x10000, 0x229d, 0x5, 0x8ea9, 0x7, 0x58}, {0x6, 0x2, 0x10001, 0x81, 0xc1, 0x80}, {0x4, 0x7, 0x8001, 0x7fffffff, 0x80000000, 0xa4}, {0x7, 0x10000000, 0xa2, 0x200, 0xe4, 0x8f75}, {0x2, 0x6, 0x800, 0x1, 0x6, 0x6}, {0x2, 0x8, 0x3, 0x7, 0x6, 0x6}, {0x6d, 0xf, 0x7fff, 0x2, 0x3, 0x7fffffff}, {0xff, 0x3, 0x40a, 0x4, 0xfff, 0xfffffffe}, {0x3, 0x3, 0xa7, 0x5, 0x93}, {0x8, 0x200, 0x4, 0xc, 0x7, 0x9}, {0x1000, 0x7fffffff, 0x563, 0x0, 0x7, 0x8}, {0x1000, 0x1, 0x3ff, 0x2, 0x400000}, {0x2, 0x3, 0x0, 0xe, 0x340, 0x5}, {0x9, 0x7, 0x9e, 0x80000001, 0x3, 0x7}, {0x9, 0x7, 0x375b, 0x5, 0x1000, 0x2}, {0x7fffffff, 0x8000, 0x6738470f, 0x0, 0x4, 0x9}, {0x4, 0x7, 0x6, 0x5b, 0x1ff, 0x1}, {0x4, 0x1af, 0x1, 0x9, 0xfffffff8, 0x2}, {0x8, 0x5, 0x39780000, 0xffffffff, 0x0, 0x7fffffff}, {0x0, 0x2, 0x3, 0xba4c, 0x7f, 0x1}, {0x5, 0x5, 0x3, 0x0, 0x7, 0xb18}, {0x9f, 0x1, 0x9, 0x8, 0x4, 0x7}, {0x9, 0x6, 0xe752, 0x5, 0x3, 0x1}, {0xdc, 0x5, 0x1, 0x3, 0x6, 0x4}, {0x4, 0x7e0, 0x3, 0x3, 0x80000000, 0xbb8}, {0x10, 0x40, 0x7, 0x37, 0x9, 0xa}, {0x9, 0x3, 0xff, 0x4, 0x9, 0x400000}, {0xd4, 0x10, 0x2, 0xffffffff, 0x0, 0x70e}, {0x4, 0x6, 0x1, 0x401, 0x9, 0x7}, {0x5, 0x4, 0x4, 0x0, 0x0, 0xfff}, {0xa0, 0x9, 0x1ff, 0x7, 0x6bc, 0xeafa}, {0x710, 0x0, 0xeeb5, 0x67c1, 0x81, 0xffffffff}, {0x2, 0x5, 0x40000, 0x8, 0x8, 0x3}, {0x1, 0x80, 0x8, 0x7, 0xffff619b, 0x7}, {0x9, 0xa748, 0x4, 0xd, 0x2, 0x400}, {0xde91, 0x1, 0x9, 0x9, 0x9, 0xffffffff}, {0x9, 0x3, 0xb8e, 0x6, 0xd}, {0xfc, 0x12, 0x0, 0x0, 0x5, 0x100}, {0x100, 0xb, 0x7, 0x8, 0x400, 0x3}, {0x5, 0x5, 0xffffffff, 0xff, 0x908d, 0x7}, {0x3, 0x3, 0x2, 0x2, 0xfffffc00, 0x101}, {0x3, 0x0, 0x4a, 0x7, 0x4, 0x2}, {0x5, 0x1, 0x3, 0xffffffff, 0x4, 0xd92}, {0x835, 0x6, 0xfff, 0x0, 0xe, 0x2}, {0x5, 0x800, 0x7fff, 0x9, 0x3, 0x7}, {0x800, 0x800, 0x400, 0x0, 0x800, 0x40}, {0x1, 0x2, 0x7, 0x3, 0xc, 0x6}, {0x10001, 0x0, 0xb, 0xffff, 0xfffffffa}, {0xffff, 0x8001, 0x7, 0x4, 0x8, 0x264c}, {0x5a7, 0x3, 0x0, 0xfffffff7, 0xfffffffe, 0xfffff255}, {0xe13, 0xa, 0x100, 0x3ff, 0x0, 0x101}, {0x1, 0x6, 0x1ff, 0x8, 0x7, 0x8}, {0xc1bf, 0xfffffffd, 0x1, 0x7fffffff, 0x3, 0x7f}, {0x3000000, 0x6, 0x7, 0x9, 0x5, 0x8}, {0x400, 0xf, 0x6, 0x6, 0x3, 0x28}, {0x7, 0x0, 0x1, 0xfffff385, 0x8001, 0x40}, {0x80000000, 0x0, 0x8, 0x401, 0x7, 0x9}, {0xf, 0xffffff00, 0x2, 0xffffffff, 0x9, 0x5}, {0x7ff, 0x5, 0x7, 0x5ff7, 0xa7, 0x8}, {0x4, 0x4, 0x0, 0x1, 0x6, 0x8}, {0x822, 0xb7a, 0x6, 0xffffffff, 0x4, 0x2}, {0xf3d5, 0x4, 0x4, 0x6, 0x4, 0x604}, {0x8, 0xffffffff, 0x7, 0x9b, 0xffff1d42, 0xf7ca}, {0x9, 0x0, 0x6, 0x4, 0x400, 0xcb}, {0x1, 0x0, 0x2, 0x6, 0x3a580e47, 0x5}, {0x7, 0xfffffffa, 0x101, 0x98, 0x8875, 0x9}, {0x5, 0x333, 0x10001, 0x8000, 0xf3dd, 0x8a5f96a}, {0xfffffffa, 0x4, 0x3, 0x80, 0x5, 0x9}, {0xe, 0x6f3, 0x5, 0xfffff6e6, 0x800, 0x8}, {0x100, 0xffff, 0x4, 0x8, 0x1, 0x400}, {0x7, 0x3ff, 0x8, 0x5, 0x6, 0x4}, {0x6, 0x40, 0x0, 0xffff, 0xd, 0x3}, {0x9, 0x0, 0x2, 0x3, 0x5, 0xd5}, {0x6, 0xfffff853, 0x2, 0x2, 0x8, 0x2}, {0xf14d, 0x7, 0xedb7, 0x1, 0xe, 0x601}, {0x0, 0x101, 0x5, 0x1, 0x10, 0x8}, {0x1, 0x5, 0x2, 0x3, 0x2, 0x10}, {0x0, 0x4, 0xc, 0x6, 0x5b, 0x54}, {0x6f24, 0x28000, 0x80000001, 0xd17, 0x5, 0x9}, {0x8000000, 0x5, 0x8, 0x6, 0x5, 0x1ff}, {0x1, 0x0, 0xb, 0x8, 0x4, 0x3}, {0xfff, 0x5, 0x8000, 0x4, 0x6, 0x2}, {0xffffff80, 0x8, 0x8, 0x0, 0x10001, 0x4}, {0x1, 0x4e16f82d, 0x2, 0x8, 0x2, 0x6}, {0x1000, 0x7f, 0x1, 0x2a, 0x4, 0x9}, {0x7, 0x5, 0x5fba, 0x6ee, 0x80, 0x8001}, {0x944, 0x1, 0x4, 0x7, 0x5, 0xab}, {0x5, 0x6, 0x4, 0x10001, 0x6, 0x9}, {0x2, 0x1, 0x0, 0x6, 0x2, 0x4}, {0xe5, 0x3, 0xbc68, 0x1, 0x2, 0xff}, {0x6, 0x9, 0x3, 0x3, 0x10, 0x3}, {0x8, 0x7, 0x7, 0xd, 0x800, 0x6}, {0x20, 0xffff, 0x1, 0x700000, 0x9, 0x8}, {0x2, 0x3, 0x3, 0xffff95bc, 0x2, 0x10000}, {0x100, 0x7ff, 0x5, 0xffff, 0xc, 0xffff17d2}, {0x5, 0x55, 0x1, 0x5, 0x22, 0x8001}, {0x5, 0x4, 0x7f, 0x9, 0x55, 0x8000}, {0xbab6, 0xffff, 0x8, 0x71b, 0x3, 0xd6e}, {0x5, 0x9, 0x1, 0x1ff, 0x4, 0x7}, {0x4, 0x6, 0x1ff, 0x5, 0x400, 0x7}, {0xf, 0x9, 0x6, 0x8, 0x3, 0x1}, {0xe9e, 0x2, 0x80, 0xb2c8, 0x1, 0x3}, {0x80000, 0x80000000, 0x0, 0x5, 0x5, 0x958}, {0xa8, 0x200, 0xffff0bd5, 0x593, 0x0, 0x6}, {0x699, 0x7fffffff, 0x6, 0x2, 0x1ff, 0x2410}], [{0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x35016d068ccffba}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x4}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x4}, {0x1}, {}, {}, {0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x2}, {0x6}, {0x3}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x30, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x9a5, 0x1, 0xfffffffc, 0x9, 0x8, 0x4, 0x3, 0x6, 0x8c, 0x1, 0x4, 0x5, 0xfffffffc, 0x10, 0xb781, 0x8, 0xfb2f, 0x7, 0x80000000, 0x3, 0x0, 0x7fff, 0x80, 0xb2, 0x9, 0x7, 0xa, 0x7, 0x3, 0x3, 0xc7c, 0x95e, 0x0, 0x3, 0x64, 0x0, 0x7, 0x1, 0x2, 0x81, 0xfc2a8e0, 0xaab, 0x7, 0x6, 0xf41e, 0x0, 0x89, 0x1, 0x1000, 0x9, 0x5, 0x7, 0x2, 0x9, 0xa7, 0x2, 0x10001, 0x9, 0x1, 0xe8f4, 0x9, 0xf, 0x48e, 0x4, 0x5, 0x1, 0x6, 0x5, 0x4ea, 0x26, 0x2, 0x4, 0xb8, 0x2, 0x704, 0xb, 0x0, 0x7f, 0x3, 0x7, 0x400, 0xfffffff2, 0x3, 0x9, 0x9, 0x6d, 0x5, 0x40, 0x6, 0xfffffff1, 0x8, 0x6, 0xe, 0x3, 0x5, 0x8, 0x8, 0x1, 0x7, 0x2, 0x8, 0x6, 0x3ff, 0x985, 0x2, 0x0, 0x7, 0x3, 0x3, 0x9, 0x10, 0x2, 0x8d1, 0x3f7, 0x2, 0x9, 0x7fff, 0x0, 0x2, 0x4, 0x7, 0x76, 0x2, 0xfffffff7, 0x0, 0x1, 0xa648, 0x2c, 0xffff, 0x7, 0x3, 0x2, 0x4, 0xff, 0xf55a, 0xf0, 0x5, 0x1, 0x300, 0x9, 0x6, 0xe6, 0x0, 0x90, 0x2, 0x3, 0x6, 0x7, 0x2, 0x4, 0x5, 0x7ff, 0x2, 0x6, 0x8, 0x0, 0x3ff, 0x3, 0x2, 0x100, 0xfffffffa, 0xfffe0000, 0x0, 0x1, 0x10001, 0x8, 0x7, 0x5, 0x10, 0x18, 0x102, 0x100000, 0xa, 0x8, 0x8, 0x8, 0x49, 0x9, 0x0, 0x80000000, 0xdbe, 0x8, 0x9, 0x1ff, 0x890f, 0x5, 0x4, 0xffff, 0xe5240000, 0x5, 0x2, 0x401, 0x2, 0x4cea, 0xfffeffff, 0x4, 0x0, 0x7, 0x88, 0x5, 0x677, 0x10, 0x4, 0xdf, 0x80, 0x2, 0x2, 0x5, 0x1, 0x8a3e, 0x32, 0x4, 0x3, 0x1ff, 0x3, 0x3, 0x4, 0x8, 0x1, 0x79a, 0x1, 0x9, 0x3f3, 0x9, 0x9, 0x101, 0x7, 0x6, 0x2, 0x5, 0x9, 0xffffffa1, 0x7fffffff, 0x1, 0x5, 0x10f, 0x1ff, 0xff, 0x100, 0x2, 0x2, 0x8, 0x1, 0x8, 0x3, 0x5, 0xff, 0x5, 0x1, 0x0, 0xeff2, 0x4, 0x5, 0x7, 0x8f3b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x200, 0x7, 0x8, {0x6, 0x2, 0x3, 0xfffa, 0x5, 0x6}, {0x40, 0x2, 0xbd77, 0x1, 0x2, 0x9}, 0x8, 0x200, 0x1}}]}]}}]}, 0x1344}, 0x1, 0x0, 0x0, 0x4894}, 0x42) 7.048835005s ago: executing program 3 (id=607): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000e40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x448c2}, 0x42) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000240)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r5, 0x5) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) 6.875560949s ago: executing program 3 (id=612): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x10, 0x4, 0x0, &(0x7f00000016c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000001700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001800)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r3}, &(0x7f0000001f40), &(0x7f0000001f80)=r2}, 0x20) recvmmsg(r1, &(0x7f0000002080), 0x400023c, 0x300, 0x0) 5.369626351s ago: executing program 4 (id=626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000013c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000001400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x25, &(0x7f0000001440)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) 5.320768452s ago: executing program 0 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2efe}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x48}}, 0x0) 5.234454935s ago: executing program 4 (id=629): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x341488, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x1a9ae43988baf4a2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000540)={0x2201000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 5.147981017s ago: executing program 0 (id=631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000001500)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000001540)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x81010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x4, 0x9, 0x0, 0x5, {[@mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x6, 0x8, 0x7}, @timestamp={0x8, 0xa, 0xffffff69, 0x6}, @md5sig={0x13, 0x12, "3c8a8cc1846b6758a74d5181aba89e2e"}]}}}}}}}, 0x0) 4.33902333s ago: executing program 0 (id=633): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x6, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{r0}, &(0x7f0000001a80), &(0x7f0000001ac0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001b00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b40)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001b80)=ANY=[], 0x0) 2.203162759s ago: executing program 1 (id=634): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000fc0)=0x73fc, 0x4) 1.781769061s ago: executing program 2 (id=635): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="01154e000100001122334455885d", 0xe, 0x44011, &(0x7f0000000540)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) 1.45043234s ago: executing program 4 (id=636): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)) r8 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r8, 0x0, 0x0, 0x8041) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.43813747s ago: executing program 1 (id=637): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000e40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f0000000240)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) 1.402986051s ago: executing program 0 (id=638): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbff, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x3}}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.298522664s ago: executing program 2 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0xfa, 0x0, @void}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x1c, 0xe, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b80)={0x54, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40082) 1.298279233s ago: executing program 0 (id=640): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, 0x0, 0x0) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) 1.07562293s ago: executing program 2 (id=641): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001140)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 930.638654ms ago: executing program 4 (id=642): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x100) sched_setscheduler(0x0, 0x3, &(0x7f0000000b80)=0x45) r1 = add_key$user(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x1}, &(0x7f0000000c40)="fe", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000d40)={r2, r2, r1}, &(0x7f0000000d80)=""/83, 0x53, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="5cc20000000000001800128008000100677470000c00028008000200", @ANYRES32=r4, @ANYBLOB="829bcff05ca83e360bcca6a2a4d4d4a9e3f2279e1758c8f0ed15d4b250ef6b37115df96e9da024add3121e3a666fb9eef7097be987118bd11ced87539aacc31a6a4716e5b3f88e2a406ecb2116e7a10440d4e801f83effe540ddd86000f48600"/106, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r5 = accept4$unix(r0, &(0x7f0000000380), &(0x7f0000000040)=0x6e, 0x0) bind$unix(r5, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x7, &(0x7f0000000500)={0x0, 0x33, 0x2}, &(0x7f00000005c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000600), &(0x7f0000000640)) r7 = openat$tun(0xffffff9c, &(0x7f0000000680), 0x0, 0x0) write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x232) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r9, &(0x7f00000009c0)="020052487f00000100000000000000000000000100"/128, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) 923.214914ms ago: executing program 1 (id=643): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x2020400) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, 0x0, 0x0) 864.397866ms ago: executing program 2 (id=644): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000010c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25df5c01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448b4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001380)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000013c0)={&(0x7f00000014c0)=@xdp={0x2c, 0x2, r3, 0x3e}, 0x80, &(0x7f0000001540)=[{&(0x7f00000025c0)="e2", 0x1}], 0x1}, 0x0) 832.495887ms ago: executing program 1 (id=645): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001f40)={@mcast2}, 0x14) 759.243759ms ago: executing program 1 (id=646): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r0, 0x0, 0xc012) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 681.920561ms ago: executing program 4 (id=647): sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900060000001100000014000201435299f33e311373cabe935e9ae3adc3140002011ac9099e103520af1afe49293e06139f14000201413c8a5aca5b36c49a0d2597bf91af9314000201b6f48f64527022dc359ed8f04a81f6d90a00060008021100000100001400fe003908ec17f067de08b56873f97b580863140002011e1fe359064ff3a26f131a102179e2241400fe007032a41d4328eb5105b42a9845224ee7140002011d91cb46835499b800c7c9ef6deadc25"], 0xd4}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000640)=ANY=[], 0x5d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f0000000780)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000008c0)={0x1, [0x0]}, &(0x7f0000000900)=0x8) bind$alg(r3, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="300000001000010800000002000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a", @ANYRES16, @ANYBLOB="08001b000000"], 0x30}, 0x1, 0x0, 0x0, 0xdcf770d1d4b7b4c9}, 0x4004884) sendmsg$nl_generic(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)="927d5aad6b893a2ea6702ebc37d7ab9a385e08a0ce29ee436f35121d877a6d93b5eeefc88c6782d0d1beec14a33f91540b2fe482135df76f49f8b032d7ab4dc034e42ee52f40d0710d25db5f38f5d51f0fba0e66503ed50a5de29080cdeca0d0236c5209734a2b3800cd82890107478a450aae794718c412d403633d2d4d54ebafd5e1779eb846", 0x87}], 0x1, &(0x7f0000000d80)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x51c}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x78}}, {{&(0x7f0000000e40)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="91ccb811db652dbe6e16d005aa03e50b2b752021b698836579f2dc530f53660d7cd124ed62a6ebfccf60bc7c1df06eba824815f8d284d267ff15dcea4992ea8e963087ffa81aa6f24060cfc2adc2b629c9e212b708ae63ac8963bf96f9246c54b18106331fefa3ac1e7486a1033be336d932c1011e2b0b88ac1e07c79a4137262b10521acfc2628a6ed7da22264bd1d7a5eaca34bb93d1cf6389d43ceb9cadb694edc2525b4b23202ce854a1bc1678640b28422fd7d68ddcc0ca99ce00ccfeea7594cd21a09003c15b85ab7333c3b7feeb300769c5e790de66fc98b83287e650ce882e5ec849cf9f755ba5f910695d1199cbdf490e1f", 0xf6}], 0x1, &(0x7f0000001000)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x3, 0x0) 557.795214ms ago: executing program 2 (id=648): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 440.144728ms ago: executing program 2 (id=649): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x101, 0x2e4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0xfffffffffffffc20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000780), 0x56) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 185.009225ms ago: executing program 0 (id=650): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000080)={0x18, 0x15, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfff}]}, 0x18}, {0x0}], 0x7, 0x0, 0x0, 0x24000081}, 0x24048800) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 174.379475ms ago: executing program 1 (id=651): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 0s ago: executing program 4 (id=652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) kernel console output (not intermixed with test programs): terface not active [ 63.753578][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.765571][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.782737][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.791329][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.817730][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.849050][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.856232][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.882468][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.894426][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.901620][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.928073][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.942235][ T4198] device hsr_slave_0 entered promiscuous mode [ 63.949144][ T4198] device hsr_slave_1 entered promiscuous mode [ 63.956189][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.964004][ T4198] Cannot create hsr debugfs directory [ 63.978912][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.986028][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.997422][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 64.012860][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 64.027131][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.030456][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 64.074837][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 64.080971][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 64.150175][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.157458][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.164027][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.172561][ T4184] Cannot create hsr debugfs directory [ 64.197801][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.205177][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.211758][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.219775][ T4192] Cannot create hsr debugfs directory [ 64.447469][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.523575][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.530846][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.539142][ T4185] device bridge_slave_0 entered promiscuous mode [ 64.548955][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.560201][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.567509][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.575682][ T4185] device bridge_slave_1 entered promiscuous mode [ 64.587933][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.603819][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.620410][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.637841][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.649569][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.684312][ T4185] team0: Port device team_slave_0 added [ 64.694658][ T4185] team0: Port device team_slave_1 added [ 64.712933][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.724627][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.734231][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.742042][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.768295][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.780769][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.791497][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.805461][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.812420][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.838680][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.908368][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.915535][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.922532][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.930717][ T4185] Cannot create hsr debugfs directory [ 64.984579][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.999580][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.016778][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.051527][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.089180][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.128232][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.152768][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.172205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.181939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.195486][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.203961][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.228203][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.238905][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.263034][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.278794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.288459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.297955][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.305284][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.318778][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.327668][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.343877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.352728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.360973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.369062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.379184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.388591][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.395710][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.404271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.413090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.422025][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.429135][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.437274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.449322][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.459512][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.481750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.491387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.500146][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.507267][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.515925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.524541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.534206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.544267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.588536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.600099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.609371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.619353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.628317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.638173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.646971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.656133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.664577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.672606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.705620][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.723619][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.736898][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.749836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.759590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.768631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.777293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.786027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.794301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.803435][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.812720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.823126][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.848288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.875469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.885888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.912125][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.939240][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.968409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.983381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.993627][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.000791][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.018134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.027332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.059835][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.070899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.079286][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 66.086013][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 66.096181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.110618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.115310][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 66.121134][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.131791][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.146129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.165224][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 66.179376][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 66.202359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.219184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.228764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.238701][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.245819][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.254083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.263044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.272111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.280927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.289651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.297408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.305037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.313527][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.322136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.331843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.349999][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.362347][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.376430][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.413318][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.425799][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.438440][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.447006][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.454081][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.463043][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.471909][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.481281][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.490352][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.499713][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.507769][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.515639][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.526654][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.548539][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.565940][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.579175][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.588952][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.597931][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.613206][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.631157][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.640565][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.677485][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.693692][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.705199][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.727643][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.748550][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.775529][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.806531][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.832292][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.845619][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.852835][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.877484][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.896430][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.906234][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.913566][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.922641][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.938877][ T4196] device veth0_vlan entered promiscuous mode [ 66.959715][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.969273][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.977892][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.987628][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.995906][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.004065][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.012833][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.022226][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.031749][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.042189][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.051310][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.060216][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.068119][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.076207][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.092823][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.111020][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.134129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.143583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.158670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.168805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.177646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.196520][ T4196] device veth1_vlan entered promiscuous mode [ 67.230778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.239371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.258129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.273493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.283726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.324524][ T4184] device veth0_vlan entered promiscuous mode [ 67.348965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.360306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.369322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.386039][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.404163][ T4184] device veth1_vlan entered promiscuous mode [ 67.416246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.426461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.434216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.443444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.453934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.461905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.471427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.480038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.488575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.503974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.511985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.522957][ T4196] device veth0_macvtap entered promiscuous mode [ 67.535646][ T4196] device veth1_macvtap entered promiscuous mode [ 67.542660][ T4198] device veth0_vlan entered promiscuous mode [ 67.576058][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.584200][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.593399][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.602522][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.610747][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.618769][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.628538][ T4198] device veth1_vlan entered promiscuous mode [ 67.638082][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.652876][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.660784][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.671945][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.681609][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.690707][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.699733][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.728301][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.737749][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.747401][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.757801][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.769335][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.781037][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.789783][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.799881][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.811287][ T4184] device veth0_macvtap entered promiscuous mode [ 67.855390][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.863567][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.873356][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.882269][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.893330][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.902069][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.911057][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.922361][ T4184] device veth1_macvtap entered promiscuous mode [ 67.929692][ T4192] device veth0_vlan entered promiscuous mode [ 67.947216][ T4198] device veth0_macvtap entered promiscuous mode [ 67.955859][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.964209][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.973088][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.982519][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.996856][ T4192] device veth1_vlan entered promiscuous mode [ 68.019911][ T4198] device veth1_macvtap entered promiscuous mode [ 68.036637][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.048363][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.060293][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.073828][ T4185] device veth0_vlan entered promiscuous mode [ 68.093594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.108220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.117229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.125855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.134557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.143481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.152906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.161290][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 68.167870][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 68.173962][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 68.181781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.189820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.200159][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.212464][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.228416][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.236301][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 68.243166][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 68.253099][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.262049][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271088][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.284751][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.320798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.330598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.349236][ T4185] device veth1_vlan entered promiscuous mode [ 68.367035][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.378095][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.388427][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.399354][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.410998][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.430287][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.441893][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.452001][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.463616][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.475088][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.483462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.492907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.501754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.510787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.519686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.529066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.538052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.549843][ T4192] device veth0_macvtap entered promiscuous mode [ 68.578056][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587476][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.598018][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.607619][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.631801][ T4185] device veth0_macvtap entered promiscuous mode [ 68.641615][ T4185] device veth1_macvtap entered promiscuous mode [ 68.649080][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.658686][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.670838][ T4192] device veth1_macvtap entered promiscuous mode [ 68.695108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.703416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.713698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.728257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.736328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.744919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.753398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.762279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.793638][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.808631][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.818865][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.830376][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.840700][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.851809][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.862925][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.875479][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.887169][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.898107][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.908734][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.918995][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.929603][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.941943][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.953037][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.964223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.974654][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.985212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.997728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.007454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.016612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.042900][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.062319][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.072879][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.083540][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.093767][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.104440][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.115061][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.127167][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.143582][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.157704][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.167907][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.176915][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.186468][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.202582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.212353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.232727][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.253754][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.265459][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.284482][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.295429][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.306375][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.316481][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.327228][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.339251][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.352303][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.362487][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.371986][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.380999][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.408625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.422871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.435472][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.443331][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.485045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.519546][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.543597][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.551920][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.572558][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.628974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.644379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.725937][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.733909][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.792422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.811655][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.826197][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.834507][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.849646][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.882831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.896364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.905440][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.946501][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.963832][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.984588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.018091][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.041744][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.058213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.177835][ T4304] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 70.240645][ T4250] Bluetooth: hci1: command 0x0419 tx timeout [ 70.247267][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 70.263471][ T4250] Bluetooth: hci0: command 0x0419 tx timeout [ 70.281708][ T4304] TC_ACT_REPEAT abuse ? [ 70.315763][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 70.331815][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 70.472095][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 71.180008][ T4344] netlink: 100 bytes leftover after parsing attributes in process `syz.4.23'. [ 71.199495][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.206194][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.158257][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 72.340022][ T4408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.403294][ T4408] 9pnet_virtio: no channels available for device syz [ 72.607895][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 72.686767][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 73.654946][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 73.686473][ T4439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 73.711826][ T4439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 73.742291][ T4439] device syz_tun entered promiscuous mode [ 73.775141][ T4439] device syz_tun left promiscuous mode [ 74.030832][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.050671][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.214344][ T4474] 9pnet_virtio: no channels available for device syz [ 74.254990][ T4469] netlink: 'syz.3.51': attribute type 16 has an invalid length. [ 74.255041][ T4469] netlink: 'syz.3.51': attribute type 17 has an invalid length. [ 74.302974][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.303092][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.359063][ T4469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.684751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.704757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.714750][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.724743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.734740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.744745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.754754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.764743][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.774745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 74.784746][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.449194][ T4173] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.516981][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 77.052495][ T4532] 9pnet_virtio: no channels available for device syz [ 77.177861][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 77.307519][ T4555] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001 [ 77.495688][ T4568] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 77.550475][ T4570] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 77.594506][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 77.617296][ T4570] netlink: 'syz.2.82': attribute type 3 has an invalid length. [ 77.743522][ T4581] 9pnet_virtio: no channels available for device syz [ 77.759764][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 77.851676][ T4590] Zero length message leads to an empty skb [ 77.988960][ T4600] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 78.003331][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 78.020229][ T4600] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 78.155288][ T26] audit: type=1326 audit(1792259149.456:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.188144][ T26] audit: type=1326 audit(1792259149.466:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.212962][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 78.231486][ T26] audit: type=1326 audit(1792259149.486:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.255185][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.285572][ T26] audit: type=1326 audit(1792259149.486:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.312672][ T26] audit: type=1326 audit(1792259149.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.336464][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.346393][ T26] audit: type=1326 audit(1792259149.486:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.370062][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.404613][ T26] audit: type=1326 audit(1792259149.486:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.461911][ T26] audit: type=1326 audit(1792259149.486:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.485706][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.582561][ T26] audit: type=1326 audit(1792259149.486:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.649078][ T26] audit: type=1326 audit(1792259149.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.4.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f56f1559 code=0x7ffc0000 [ 78.708727][ T4623] 9pnet_virtio: no channels available for device syz [ 78.770443][ T4173] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.805165][ T4630] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 78.828348][ T4630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 78.847805][ T4630] netlink: 'syz.2.109': attribute type 3 has an invalid length. [ 78.939218][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 79.045102][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 79.195361][ T4173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.218519][ T4173] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.287973][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 79.309632][ T4656] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 79.332279][ T4656] batman_adv: Cannot find parent device [ 79.440074][ T4173] usb 5-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 79.465370][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.488490][ T4173] usb 5-1: Product: syz [ 79.493182][ T4173] usb 5-1: Manufacturer: syz [ 79.504303][ T4173] usb 5-1: SerialNumber: syz [ 79.770411][ T4609] FAULT_INJECTION: forcing a failure. [ 79.770411][ T4609] name failslab, interval 1, probability 0, space 0, times 1 [ 79.808935][ T4609] CPU: 0 PID: 4609 Comm: syz.4.99 Not tainted syzkaller #0 [ 79.816280][ T4609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.826366][ T4609] Call Trace: [ 79.829660][ T4609] [ 79.832611][ T4609] dump_stack_lvl+0x188/0x250 [ 79.837330][ T4609] ? show_regs_print_info+0x20/0x20 [ 79.842557][ T4609] ? load_image+0x410/0x410 [ 79.847082][ T4609] ? snprintf+0xe5/0x140 [ 79.851355][ T4609] ? vscnprintf+0x80/0x80 [ 79.855708][ T4609] should_fail+0x383/0x4b0 [ 79.860162][ T4609] should_failslab+0x5/0x20 [ 79.864696][ T4609] slab_pre_alloc_hook+0x51/0xc0 [ 79.869673][ T4609] __kmalloc+0x6b/0x340 [ 79.873855][ T4609] ? aa_label_asxprint+0x6c/0x120 [ 79.874977][ T4274] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.878920][ T4609] aa_label_asxprint+0x6c/0x120 [ 79.891244][ T4609] apparmor_secid_to_secctx+0x8a/0x130 [ 79.896731][ T4609] security_secid_to_secctx+0x6c/0xa0 [ 79.902135][ T4609] audit_log_task_context+0xd8/0x210 [ 79.907469][ T4609] ? audit_log_key+0x140/0x140 [ 79.912261][ T4609] ? from_kgid+0x14f/0x6a0 [ 79.916718][ T4609] ? audit_log_start+0x6dd/0x870 [ 79.921738][ T4609] audit_log_task+0x199/0x2e0 [ 79.926452][ T4609] ? audit_core_dumps+0x100/0x100 [ 79.931514][ T4609] ? __cant_sleep+0x220/0x220 [ 79.936222][ T4609] ? futex_wait+0x680/0x680 [ 79.940772][ T4609] audit_seccomp+0x81/0x180 [ 79.945341][ T4609] __seccomp_filter+0xa66/0x1a00 [ 79.950334][ T4609] ? __secure_computing+0x2f0/0x2f0 [ 79.955577][ T4609] ? __context_tracking_exit+0x4c/0x80 [ 79.961064][ T4609] ? __lock_acquire+0x7d40/0x7d40 [ 79.966135][ T4609] ? lock_chain_count+0x20/0x20 [ 79.971031][ T4609] ? __secure_computing+0x10d/0x2f0 [ 79.976269][ T4609] syscall_trace_enter+0xd0/0x180 [ 79.981329][ T4609] do_syscall_64+0x24/0xa0 [ 79.985773][ T4609] ? clear_bhb_loop+0x30/0x80 [ 79.990482][ T4609] ? clear_bhb_loop+0x30/0x80 [ 79.995194][ T4609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.001142][ T4609] RIP: 0033:0x7f34f56f1559 [ 80.005588][ T4609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.025223][ T4609] RSP: 002b:00007f34f3949028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 80.033662][ T4609] RAX: ffffffffffffffda RBX: 00007f34f5978fa0 RCX: 00007f34f56f1559 [ 80.041654][ T4609] RDX: 0000000000001000 RSI: 0000200000000400 RDI: ffffffffffffffff [ 80.049652][ T4609] RBP: 00007f34f5788ab8 R08: 0000000000000000 R09: 0000000000000000 [ 80.057652][ T4609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.065675][ T4609] R13: 00007f34f5979038 R14: 00007f34f5978fa0 R15: 00007ffc270654a8 [ 80.073693][ T4609] [ 80.076822][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.181118][ T4683] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 80.200802][ T4683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.270596][ T4274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.308007][ T4274] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 80.333822][ T4173] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 80.342571][ T4173] disable ehci-hcd to run US-144 [ 80.349548][ T4274] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 80.360697][ T4173] usb 5-1: USB disconnect, device number 2 [ 80.420341][ T4274] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 80.441478][ T4274] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 80.450752][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.505706][ T4666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.515524][ T4666] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.526659][ T4274] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 80.542700][ T4274] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 80.559222][ T4274] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 80.585070][ T4274] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 80.598623][ T4274] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 80.608970][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.632459][ T4274] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 80.661651][ T4274] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 80.876088][ T4699] Cannot find add_set index 0 as target [ 81.020602][ T4705] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 81.063361][ T4705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.153802][ T7] usb 3-1: USB disconnect, device number 2 [ 81.167107][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 81.187471][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 81.219070][ T7] keyspan 3-1:1.0: device disconnected [ 81.379781][ T4725] device ip6gretap0 entered promiscuous mode [ 81.394103][ T4725] device syz_tun entered promiscuous mode [ 81.402136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 81.552921][ T4735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.594547][ T4737] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 81.614537][ T4737] __nla_validate_parse: 12 callbacks suppressed [ 81.614551][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 82.292814][ T4777] device syzkaller0 entered promiscuous mode [ 82.344251][ T4779] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 82.423236][ T4779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.508928][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 82.612752][ T4783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.171'. [ 82.695322][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 82.759269][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 82.859113][ T4792] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.937972][ T4274] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.946870][ T4796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 82.964195][ T4796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 82.983080][ T4796] device ip6gretap0 entered promiscuous mode [ 82.990857][ T4796] device syz_tun entered promiscuous mode [ 83.003161][ T4796] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 83.023610][ T4796] Cannot create hsr debugfs directory [ 83.068460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 83.192093][ T4807] device syzkaller0 entered promiscuous mode [ 83.208449][ T4807] tipc: Started in network mode [ 83.213798][ T4807] tipc: Node identity d680b3578cc9, cluster identity 4711 [ 83.228100][ T4807] tipc: Enabled bearer , priority 0 [ 83.248319][ T4806] tipc: Resetting bearer [ 83.304982][ T4274] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.323108][ T4806] tipc: Disabling bearer [ 83.335300][ T4274] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.375964][ T4274] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 83.414862][ T4274] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 83.454932][ T4274] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 83.465060][ T4274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.505087][ T4785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.512362][ T4785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.520641][ T4809] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 83.546272][ T4274] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 83.576401][ T4274] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 83.584144][ T4274] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 83.593340][ T4809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.601396][ T4274] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 83.610826][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 83.616033][ T4274] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 83.627476][ T4274] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 83.637419][ T4274] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 83.783250][ T4814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.184'. [ 83.860971][ T4818] netlink: 'syz.2.186': attribute type 11 has an invalid length. [ 84.115256][ T1111] usb 5-1: USB disconnect, device number 3 [ 84.127917][ T1111] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 84.161834][ T1111] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 84.178524][ T1111] keyspan 5-1:1.0: device disconnected [ 84.191627][ T4837] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.281387][ T4833] device syzkaller0 entered promiscuous mode [ 84.301829][ T4833] tipc: Started in network mode [ 84.316293][ T4833] tipc: Node identity 3a60b9f75dc3, cluster identity 4711 [ 84.329282][ T4833] tipc: Enabled bearer , priority 0 [ 84.363876][ T4832] tipc: Resetting bearer [ 84.415557][ T4832] tipc: Disabling bearer [ 84.434229][ T4847] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 84.458005][ T4847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.526310][ T4852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.197'. [ 84.689568][ T4867] ip_tables: iptables: counters copy to user failed while replacing table [ 84.793133][ T4873] device syzkaller0 entered promiscuous mode [ 84.804271][ T4873] tipc: Started in network mode [ 84.819119][ T4873] tipc: Node identity 863fa7563a7b, cluster identity 4711 [ 84.839339][ T4873] tipc: Enabled bearer , priority 0 [ 84.852925][ T4872] tipc: Resetting bearer [ 84.895807][ T4872] tipc: Disabling bearer [ 84.905809][ T4875] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 85.017022][ T4881] Cannot find del_set index 0 as target [ 85.051183][ T4882] TC_ACT_REPEAT abuse ? [ 85.207664][ T4891] device syzkaller0 entered promiscuous mode [ 85.529868][ T4910] device syzkaller0 entered promiscuous mode [ 85.615666][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.883961][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 85.883976][ T26] audit: type=1326 audit(1792259157.186:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 85.938913][ T26] audit: type=1326 audit(1792259157.226:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 85.963854][ T26] audit: type=1326 audit(1792259157.226:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 85.987796][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.997475][ T26] audit: type=1326 audit(1792259157.226:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.005502][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.021386][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.044916][ T1111] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.045426][ T26] audit: type=1326 audit(1792259157.236:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.065279][ T1111] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 86.096109][ T1111] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.103013][ T4939] device syzkaller0 entered promiscuous mode [ 86.118494][ T1111] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 86.119502][ T26] audit: type=1326 audit(1792259157.236:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.147766][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.151486][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.168076][ T26] audit: type=1326 audit(1792259157.236:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.194936][ T26] audit: type=1326 audit(1792259157.236:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.218852][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.225259][ T4896] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.230886][ T26] audit: type=1326 audit(1792259157.236:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.256261][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.264582][ T26] audit: type=1326 audit(1792259157.236:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.235" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 86.288874][ T4896] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.330140][ T1111] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 86.341212][ T1111] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 86.352441][ T1111] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 86.368448][ T1111] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 86.383944][ T1111] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 86.398886][ T1111] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 86.408097][ T1111] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 86.539780][ T4954] device bridge0 entered promiscuous mode [ 86.558755][ T13] cfg80211: failed to load regulatory.db [ 86.578159][ T4954] bridge0: port 3(macsec1) entered blocking state [ 86.605041][ T4954] bridge0: port 3(macsec1) entered disabled state [ 86.649975][ T4954] device bridge0 left promiscuous mode [ 86.670585][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.772153][ T4959] __nla_validate_parse: 8 callbacks suppressed [ 86.772168][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 86.858551][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 86.878319][ T1111] usb 4-1: USB disconnect, device number 2 [ 86.884505][ T7] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 86.897334][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.910497][ T1111] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 86.922913][ T7] usb 1-1: Product: syz [ 86.930843][ T7] usb 1-1: Manufacturer: syz [ 86.934995][ T4959] netlink: 'syz.1.243': attribute type 15 has an invalid length. [ 86.942295][ T7] usb 1-1: SerialNumber: syz [ 86.952152][ T1111] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 86.975421][ T1111] keyspan 4-1:1.0: device disconnected [ 86.993688][ T4959] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 87.002880][ T4959] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 87.011651][ T4959] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 87.020320][ T4959] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 87.060394][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 87.079563][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 87.103182][ T4959] netlink: 'syz.1.243': attribute type 15 has an invalid length. [ 87.195510][ T4967] sctp: [Deprecated]: syz.4.245 (pid 4967) Use of int in max_burst socket option. [ 87.195510][ T4967] Use struct sctp_assoc_value instead [ 87.241472][ T4935] FAULT_INJECTION: forcing a failure. [ 87.241472][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 87.283526][ T4935] CPU: 0 PID: 4935 Comm: syz.0.235 Not tainted syzkaller #0 [ 87.290869][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.300950][ T4935] Call Trace: [ 87.304259][ T4935] [ 87.307248][ T4935] dump_stack_lvl+0x188/0x250 [ 87.311965][ T4935] ? show_regs_print_info+0x20/0x20 [ 87.317196][ T4935] ? load_image+0x410/0x410 [ 87.321740][ T4935] ? snprintf+0xe5/0x140 [ 87.326024][ T4935] ? vscnprintf+0x80/0x80 [ 87.330418][ T4935] should_fail+0x383/0x4b0 [ 87.334873][ T4935] should_failslab+0x5/0x20 [ 87.339405][ T4935] slab_pre_alloc_hook+0x51/0xc0 [ 87.344380][ T4935] __kmalloc+0x6b/0x340 [ 87.348563][ T4935] ? aa_label_asxprint+0x6c/0x120 [ 87.353622][ T4935] aa_label_asxprint+0x6c/0x120 [ 87.358509][ T4935] apparmor_secid_to_secctx+0x8a/0x130 [ 87.364000][ T4935] security_secid_to_secctx+0x6c/0xa0 [ 87.369411][ T4935] audit_log_task_context+0xd8/0x210 [ 87.374722][ T4935] ? audit_log_key+0x140/0x140 [ 87.379522][ T4935] ? from_kgid+0x14f/0x6a0 [ 87.383972][ T4935] ? audit_log_start+0x6dd/0x870 [ 87.388968][ T4935] audit_log_task+0x199/0x2e0 [ 87.393681][ T4935] ? audit_core_dumps+0x100/0x100 [ 87.398733][ T4935] ? __cant_sleep+0x220/0x220 [ 87.403442][ T4935] ? futex_wait+0x680/0x680 [ 87.407981][ T4935] audit_seccomp+0x81/0x180 [ 87.412541][ T4935] __seccomp_filter+0xa66/0x1a00 [ 87.417518][ T4935] ? __secure_computing+0x2f0/0x2f0 [ 87.422762][ T4935] ? __context_tracking_exit+0x4c/0x80 [ 87.428245][ T4935] ? __lock_acquire+0x7d40/0x7d40 [ 87.433312][ T4935] ? lock_chain_count+0x20/0x20 [ 87.438202][ T4935] ? __secure_computing+0x10d/0x2f0 [ 87.443434][ T4935] syscall_trace_enter+0xd0/0x180 [ 87.448521][ T4935] do_syscall_64+0x24/0xa0 [ 87.452965][ T4935] ? clear_bhb_loop+0x30/0x80 [ 87.457670][ T4935] ? clear_bhb_loop+0x30/0x80 [ 87.462392][ T4935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.468323][ T4935] RIP: 0033:0x7f1beede0559 [ 87.472756][ T4935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.492386][ T4935] RSP: 002b:00007f1bed038028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 87.500829][ T4935] RAX: ffffffffffffffda RBX: 00007f1bef067fa0 RCX: 00007f1beede0559 [ 87.508830][ T4935] RDX: 0000000000001000 RSI: 0000200000000400 RDI: ffffffffffffffff [ 87.516824][ T4935] RBP: 00007f1beee77ab8 R08: 0000000000000000 R09: 0000000000000000 [ 87.524824][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.532820][ T4935] R13: 00007f1bef068038 R14: 00007f1bef067fa0 R15: 00007ffe90df0db8 [ 87.540837][ T4935] [ 87.543986][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.044913][ T7] usb 1-1: Can't get UAC3 power state for id 10 [ 88.104901][ T7] usb 1-1: BAAD HEADSET c_chmask mismatch [ 89.768443][ T4979] netlink: 6 bytes leftover after parsing attributes in process `syz.4.250'. [ 89.868368][ T4981] device syzkaller0 entered promiscuous mode [ 89.902623][ T7] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 89.925963][ T7] disable ehci-hcd to run US-144 [ 89.939635][ T7] disable ehci-hcd to run US-144 [ 89.980022][ T7] usb 1-1: USB disconnect, device number 2 [ 90.210176][ T4995] device syzkaller0 entered promiscuous mode [ 90.227638][ T4990] udevd[4990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.358774][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 90.564801][ T4274] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.663929][ T5010] netlink: 6 bytes leftover after parsing attributes in process `syz.1.263'. [ 90.829439][ T5016] device syzkaller0 entered promiscuous mode [ 90.908809][ T5018] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.932958][ T4274] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.953692][ T4274] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 90.977711][ T4274] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 91.003655][ T4274] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 91.035998][ T4274] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 91.063662][ T4274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.105151][ T4999] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.112775][ T4999] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.128971][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 91.166221][ T4274] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 91.179426][ T4274] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 91.187497][ T4274] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 91.205597][ T4274] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 91.233965][ T4274] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 91.252601][ T4274] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 91.275703][ T4274] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 91.292023][ T5032] netlink: 6 bytes leftover after parsing attributes in process `syz.1.274'. [ 91.480206][ T5040] device syzkaller0 entered promiscuous mode [ 91.509169][ T5043] netlink: 'syz.3.279': attribute type 27 has an invalid length. [ 91.549323][ T5043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.279'. [ 91.575477][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.604465][ T7] usb 1-1: USB disconnect, device number 3 [ 91.631074][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 91.659297][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 91.680453][ T7] keyspan 1-1:1.0: device disconnected [ 92.034544][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 92.147694][ T5059] netlink: 6 bytes leftover after parsing attributes in process `syz.3.287'. [ 92.233720][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 92.258983][ T5067] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 92.322237][ T5067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.338324][ T5070] device syzkaller0 entered promiscuous mode [ 92.378720][ T5073] netlink: 52 bytes leftover after parsing attributes in process `syz.2.290'. [ 92.458332][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 92.621023][ T5089] netlink: 6 bytes leftover after parsing attributes in process `syz.3.299'. [ 92.721997][ T5093] IPv4: Oversized IP packet from 127.202.26.0 [ 92.941317][ T5103] device syzkaller0 entered promiscuous mode [ 92.956710][ T5103] 0: reclassify loop, rule prio 0, protocol 800 [ 93.098221][ T5106] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 93.146950][ T5106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.154774][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.172546][ T5108] netlink: 52 bytes leftover after parsing attributes in process `syz.4.307'. [ 93.332189][ T5111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 93.375276][ T5112] device syzkaller0 entered promiscuous mode [ 93.560471][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.589984][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.603868][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 93.619692][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 93.648166][ T7] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 93.677135][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.705559][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 93.715172][ T5098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.722520][ T5098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.761648][ T7] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 93.773099][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 93.786555][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 93.812023][ T7] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 93.839581][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 93.853858][ T7] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 93.862006][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 93.865381][ T7] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 93.938524][ T5133] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 93.976330][ T5133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.996533][ T5138] device syzkaller0 entered promiscuous mode [ 94.147804][ T5145] device syzkaller0 entered promiscuous mode [ 94.150771][ T4250] usb 4-1: USB disconnect, device number 3 [ 94.180398][ T4250] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 94.240996][ T4250] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 94.264611][ T4250] keyspan 4-1:1.0: device disconnected [ 94.273764][ T5151] sctp: [Deprecated]: syz.2.326 (pid 5151) Use of int in max_burst socket option. [ 94.273764][ T5151] Use struct sctp_assoc_value instead [ 94.608813][ T5166] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 94.640005][ T5166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.833106][ T5177] device syzkaller0 entered promiscuous mode [ 94.951650][ T5184] device syzkaller0 entered promiscuous mode [ 95.249166][ T5196] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 95.320118][ T5196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.348427][ T5202] ip_tables: iptables: counters copy to user failed while replacing table [ 95.474797][ T4246] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.507412][ T5214] Illegal XDP return value 32768, expect packet loss! [ 95.535918][ T5210] device syzkaller0 entered promiscuous mode [ 95.608555][ T5218] device syzkaller0 entered promiscuous mode [ 95.718912][ T5226] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 95.742183][ T5226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.832401][ T5231] ip_tables: iptables: counters copy to user failed while replacing table [ 95.836213][ T4246] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.858803][ T4246] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.869750][ T4246] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 95.879954][ T4246] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 95.894493][ T4246] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 95.903735][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.945176][ T5193] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.955010][ T5193] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.967720][ T4246] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 95.987040][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 96.001270][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 96.029109][ T4246] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 96.041492][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 96.049615][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 96.065487][ T4246] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 96.175274][ T5246] device syzkaller0 entered promiscuous mode [ 96.354287][ T5252] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 96.365001][ T7] usb 3-1: USB disconnect, device number 3 [ 96.382682][ T5252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 96.387562][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 96.402733][ T5254] device syzkaller0 entered promiscuous mode [ 96.413674][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 96.435575][ T7] keyspan 3-1:1.0: device disconnected [ 96.511165][ T5258] device syz_tun entered promiscuous mode [ 96.521208][ T5258] device syz_tun left promiscuous mode [ 96.698447][ T5263] ip_tables: iptables: counters copy to user failed while replacing table [ 96.822535][ T5266] device syzkaller0 entered promiscuous mode [ 97.067734][ T5272] __nla_validate_parse: 18 callbacks suppressed [ 97.067750][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 97.315376][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 97.378349][ T5281] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 97.422353][ T5281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.434018][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.461124][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.476953][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.518553][ T5284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.385'. [ 97.551380][ T5288] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 97.610979][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.618478][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.671314][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.678783][ T5288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.686416][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.693523][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.722136][ T5288] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 97.748996][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 97.777163][ T5294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 97.813359][ T5294] device syz_tun entered promiscuous mode [ 97.824584][ T5294] device syz_tun left promiscuous mode [ 97.911267][ T5301] ip_tables: iptables: counters copy to user failed while replacing table [ 97.980766][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 97.980779][ T26] audit: type=1326 audit(1792259169.286:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.011023][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.036319][ T26] audit: type=1326 audit(1792259169.336:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.060345][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.067043][ T26] audit: type=1326 audit(1792259169.336:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.085855][ T5305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 98.101000][ T26] audit: type=1326 audit(1792259169.336:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.101040][ T26] audit: type=1326 audit(1792259169.336:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.101076][ T26] audit: type=1326 audit(1792259169.336:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.101112][ T26] audit: type=1326 audit(1792259169.336:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.101160][ T26] audit: type=1326 audit(1792259169.336:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.101212][ T26] audit: type=1326 audit(1792259169.336:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.101248][ T26] audit: type=1326 audit(1792259169.336:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.2.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd7b1fc6559 code=0x7ffc0000 [ 98.196353][ T5306] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 98.246542][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.275264][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.302731][ T5306] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 98.317889][ T5306] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 98.354882][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.512175][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 98.695633][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.710803][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 98.725085][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.735497][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.755766][ T1111] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.756725][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 98.793788][ T5315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 98.802702][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 98.802731][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.835176][ T5300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.845316][ T5300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.876358][ T7] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 98.896090][ T7] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 98.903827][ T7] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 98.939505][ T7] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 98.946225][ T1111] usb 3-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 98.974299][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.983608][ T7] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 99.004682][ T1111] usb 3-1: Product: syz [ 99.009036][ T1111] usb 3-1: Manufacturer: syz [ 99.013693][ T1111] usb 3-1: SerialNumber: syz [ 99.015315][ T7] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 99.027272][ T5320] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 99.047438][ T7] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 99.128995][ T5320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.158811][ T5322] netlink: 52 bytes leftover after parsing attributes in process `syz.3.398'. [ 99.269768][ T4250] usb 1-1: USB disconnect, device number 4 [ 99.290575][ T4250] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 99.309340][ T5303] FAULT_INJECTION: forcing a failure. [ 99.309340][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 99.336717][ T4250] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 99.356363][ T5303] CPU: 1 PID: 5303 Comm: syz.2.392 Not tainted syzkaller #0 [ 99.363694][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.373774][ T5303] Call Trace: [ 99.377078][ T5303] [ 99.380027][ T5303] dump_stack_lvl+0x188/0x250 [ 99.384742][ T5303] ? show_regs_print_info+0x20/0x20 [ 99.389968][ T5303] ? load_image+0x410/0x410 [ 99.394500][ T5303] ? snprintf+0xe5/0x140 [ 99.398781][ T5303] ? vscnprintf+0x80/0x80 [ 99.403156][ T5303] should_fail+0x383/0x4b0 [ 99.407629][ T5303] should_failslab+0x5/0x20 [ 99.412167][ T5303] slab_pre_alloc_hook+0x51/0xc0 [ 99.417132][ T5303] __kmalloc+0x6b/0x340 [ 99.421316][ T5303] ? aa_label_asxprint+0x6c/0x120 [ 99.426374][ T5303] aa_label_asxprint+0x6c/0x120 [ 99.431259][ T5303] apparmor_secid_to_secctx+0x8a/0x130 [ 99.436755][ T5303] security_secid_to_secctx+0x6c/0xa0 [ 99.442175][ T5303] audit_log_task_context+0xd8/0x210 [ 99.447526][ T5303] ? audit_log_key+0x140/0x140 [ 99.452316][ T5303] ? from_kgid+0x14f/0x6a0 [ 99.456761][ T5303] ? audit_log_start+0x6dd/0x870 [ 99.461763][ T5303] audit_log_task+0x199/0x2e0 [ 99.466490][ T5303] ? audit_core_dumps+0x100/0x100 [ 99.471546][ T5303] ? __cant_sleep+0x220/0x220 [ 99.476292][ T5303] ? futex_wait+0x680/0x680 [ 99.480830][ T5303] audit_seccomp+0x81/0x180 [ 99.485372][ T5303] __seccomp_filter+0xa66/0x1a00 [ 99.490372][ T5303] ? __secure_computing+0x2f0/0x2f0 [ 99.495609][ T5303] ? __context_tracking_exit+0x4c/0x80 [ 99.501108][ T5303] ? __lock_acquire+0x7d40/0x7d40 [ 99.506187][ T5303] ? lock_chain_count+0x20/0x20 [ 99.511083][ T5303] ? __secure_computing+0x10d/0x2f0 [ 99.516317][ T5303] syscall_trace_enter+0xd0/0x180 [ 99.521381][ T5303] do_syscall_64+0x24/0xa0 [ 99.525846][ T5303] ? clear_bhb_loop+0x30/0x80 [ 99.530562][ T5303] ? clear_bhb_loop+0x30/0x80 [ 99.535289][ T5303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.541217][ T5303] RIP: 0033:0x7fd7b1fc6559 [ 99.545675][ T5303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.565309][ T5303] RSP: 002b:00007fd7b021e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 99.573763][ T5303] RAX: ffffffffffffffda RBX: 00007fd7b224dfa0 RCX: 00007fd7b1fc6559 [ 99.581760][ T5303] RDX: 0000000000001000 RSI: 0000200000000400 RDI: ffffffffffffffff [ 99.589754][ T5303] RBP: 00007fd7b205dab8 R08: 0000000000000000 R09: 0000000000000000 [ 99.597749][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.605743][ T5303] R13: 00007fd7b224e038 R14: 00007fd7b224dfa0 R15: 00007ffd878a8bd8 [ 99.613751][ T5303] [ 99.616887][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.629819][ T4250] keyspan 1-1:1.0: device disconnected [ 99.771003][ T5334] device syzkaller0 entered promiscuous mode [ 99.962834][ T5340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 99.980959][ T5340] device syz_tun entered promiscuous mode [ 99.990363][ T5340] device syz_tun left promiscuous mode [ 99.997818][ T1111] usb 3-1: Can't get UAC3 power state for id 10 [ 100.065030][ T1111] usb 3-1: BAAD HEADSET c_chmask mismatch [ 100.133627][ T1111] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 100.145232][ T1111] disable ehci-hcd to run US-144 [ 100.155514][ T1111] usb 3-1: USB disconnect, device number 4 [ 100.224397][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.239995][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.283353][ T5353] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 100.310365][ T5353] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.318018][ T5353] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.375784][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.411435][ T5353] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.418677][ T5353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.426112][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.433224][ T5353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.448535][ T5353] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.482627][ T5362] device syzkaller0 entered promiscuous mode [ 100.974858][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.132069][ T5394] device syzkaller0 entered promiscuous mode [ 101.153506][ T5396] ip_tables: iptables: counters copy to user failed while replacing table [ 101.343882][ T5402] device syzkaller0 entered promiscuous mode [ 101.368421][ T5402] 0: reclassify loop, rule prio 0, protocol 700 [ 101.384908][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.404812][ T13] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 101.424851][ T13] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 101.444849][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 101.464840][ T13] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 101.473919][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.505875][ T5373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.523649][ T5373] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.572088][ T13] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 101.590468][ T13] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 101.598548][ T13] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 101.612727][ T13] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 101.622492][ T13] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 101.637123][ T13] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 101.648989][ T13] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 101.893359][ T5410] device syzkaller1 entered promiscuous mode [ 102.171512][ T13] usb 3-1: USB disconnect, device number 5 [ 102.211534][ T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 102.247363][ T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 102.283996][ T13] keyspan 3-1:1.0: device disconnected [ 102.642843][ T5421] ip_tables: iptables: counters copy to user failed while replacing table [ 102.763049][ T5424] device syzkaller0 entered promiscuous mode [ 102.895179][ T5426] __nla_validate_parse: 6 callbacks suppressed [ 102.895196][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 103.048415][ T5430] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 103.079719][ T5430] netlink: 248 bytes leftover after parsing attributes in process `syz.4.442'. [ 103.420314][ T5446] device syzkaller0 entered promiscuous mode [ 103.591581][ T5449] device syzkaller0 entered promiscuous mode [ 103.614229][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 104.106306][ T4247] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.238938][ T5472] device syzkaller0 entered promiscuous mode [ 104.353692][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 104.370697][ T5476] device veth1_macvtap left promiscuous mode [ 104.478431][ T5479] device syzkaller0 entered promiscuous mode [ 104.505014][ T4247] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.523564][ T4247] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 104.533961][ T4247] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 104.544259][ T4247] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 104.565393][ T4247] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 104.574607][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.625268][ T5456] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.635371][ T5456] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.653044][ T4247] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 104.675449][ T4247] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 104.693457][ T4247] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 104.710211][ T4247] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 104.728997][ T4247] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 104.746992][ T4247] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 104.756300][ T4247] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.999163][ T5493] netlink: 'syz.4.471': attribute type 16 has an invalid length. [ 105.012772][ T5493] netlink: 'syz.4.471': attribute type 17 has an invalid length. [ 105.083766][ T5493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.145987][ T4246] usb 2-1: USB disconnect, device number 2 [ 105.167235][ T4246] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 105.192345][ T4246] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 105.206328][ T4246] keyspan 2-1:1.0: device disconnected [ 105.297004][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.617304][ T5503] device syzkaller0 entered promiscuous mode [ 105.743654][ T5505] ip_tables: iptables: counters copy to user failed while replacing table [ 105.821352][ T5510] netlink: 'syz.3.478': attribute type 6 has an invalid length. [ 106.061465][ T5526] device syzkaller0 entered promiscuous mode [ 106.096945][ T5529] ip_tables: iptables: counters copy to user failed while replacing table [ 106.379041][ T5545] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 106.397075][ T4173] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.405301][ T5545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.438959][ T5545] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.453914][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 106.480791][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 106.562560][ T5545] device bridge1 entered promiscuous mode [ 106.579876][ T5545] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 106.696632][ T5557] ip_tables: iptables: counters copy to user failed while replacing table [ 106.789915][ T5562] device syzkaller0 entered promiscuous mode [ 106.809959][ T4173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.834999][ T4173] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 106.860963][ T4173] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 106.873066][ T5564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.502'. [ 106.892722][ T4173] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 106.924746][ T4173] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 106.944851][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.995149][ T5530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.002303][ T5530] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.046371][ T4173] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 107.059858][ T4173] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 107.078173][ T4173] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 107.094930][ T4173] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 107.112969][ T4173] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 107.134246][ T4173] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 107.157058][ T4173] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 107.466354][ T4173] usb 5-1: USB disconnect, device number 4 [ 107.648674][ T4173] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 107.884584][ T4173] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 108.039556][ T4173] keyspan 5-1:1.0: device disconnected [ 109.858575][ T5599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'. [ 109.950175][ T5599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.512'. [ 110.219058][ T5599] device ip6gretap0 entered promiscuous mode [ 110.336691][ T5599] device syz_tun entered promiscuous mode [ 110.356995][ T5599] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 110.368748][ T5599] Cannot create hsr debugfs directory [ 110.380789][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 110.828928][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'. [ 110.850284][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 110.881074][ T5632] netlink: 'syz.4.524': attribute type 11 has an invalid length. [ 110.906891][ T5632] netlink: 'syz.4.524': attribute type 13 has an invalid length. [ 111.045245][ T4246] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.415208][ T4246] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.476055][ T4246] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.614255][ T4246] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 111.733331][ T4246] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 111.877575][ T4246] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 111.985518][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.035853][ T5640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 112.116370][ T5633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.133366][ T5640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.527'. [ 112.149611][ T5633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.240325][ T4246] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 112.328467][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 112.401203][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 112.542201][ T4246] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 112.695964][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 112.771821][ T4246] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 112.869656][ T4246] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 113.113626][ T4246] usb 3-1: USB disconnect, device number 6 [ 113.128780][ T5640] device ip6gretap0 entered promiscuous mode [ 113.253097][ T5640] device syz_tun entered promiscuous mode [ 113.349430][ T4246] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 113.567408][ T4246] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 113.677990][ T4246] keyspan 3-1:1.0: device disconnected [ 113.849747][ T5640] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 113.917267][ T5640] Cannot create hsr debugfs directory [ 114.135824][ T5592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 114.232536][ T5646] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.293523][ T5647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.161804][ T5673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 115.322378][ T5673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 115.904878][ T4246] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.287268][ T4246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.348966][ T4246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 116.463956][ T4246] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 116.575241][ T4246] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 116.735172][ T4246] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 116.842428][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.027100][ T5678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.064031][ T5678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.192828][ T4246] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 117.291460][ T4246] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 117.388109][ T4246] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 117.578636][ T4246] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 117.639587][ T4246] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 117.672015][ T4246] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 117.709016][ T4246] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.761470][ T4246] usb 5-1: USB disconnect, device number 5 [ 117.808540][ T4246] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.827643][ T4246] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.846225][ T4246] keyspan 5-1:1.0: device disconnected [ 118.023100][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.042617][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.050808][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.333605][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 118.333620][ T26] audit: type=1326 audit(1792259189.636:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 118.363919][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.413111][ T26] audit: type=1326 audit(1792259189.636:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 118.444280][ T26] audit: type=1326 audit(1792259189.676:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 118.469887][ T26] audit: type=1326 audit(1792259189.676:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 118.493940][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.517814][ T26] audit: type=1326 audit(1792259189.676:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 118.541885][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.628448][ T26] audit: type=1326 audit(1792259189.676:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 118.664772][ T4173] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.897425][ T26] audit: type=1326 audit(1792259189.676:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 119.012548][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 119.075069][ T4173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.118489][ T4173] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.152756][ T26] audit: type=1326 audit(1792259189.676:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 119.333077][ T5735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'. [ 119.385449][ T4173] usb 2-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 119.426973][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.447033][ T26] audit: type=1326 audit(1792259189.676:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 119.526489][ T4173] usb 2-1: Product: syz [ 119.562649][ T4173] usb 2-1: Manufacturer: syz [ 119.606370][ T4173] usb 2-1: SerialNumber: syz [ 119.718646][ T26] audit: type=1326 audit(1792259189.676:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.1.553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c69e3e559 code=0x7ffc0000 [ 120.089754][ T5723] FAULT_INJECTION: forcing a failure. [ 120.089754][ T5723] name failslab, interval 1, probability 0, space 0, times 0 [ 120.263744][ T5723] CPU: 0 PID: 5723 Comm: syz.1.553 Not tainted syzkaller #0 [ 120.271166][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.281250][ T5723] Call Trace: [ 120.284554][ T5723] [ 120.287508][ T5723] dump_stack_lvl+0x188/0x250 [ 120.292245][ T5723] ? show_regs_print_info+0x20/0x20 [ 120.297503][ T5723] ? load_image+0x410/0x410 [ 120.302035][ T5723] ? __might_sleep+0xf0/0xf0 [ 120.306752][ T5723] ? __lock_acquire+0x7d40/0x7d40 [ 120.311810][ T5723] should_fail+0x383/0x4b0 [ 120.316253][ T5723] should_failslab+0x5/0x20 [ 120.320783][ T5723] slab_pre_alloc_hook+0x51/0xc0 [ 120.325776][ T5723] __kmalloc_node_track_caller+0x68/0x3a0 [ 120.331524][ T5723] ? audit_log_start+0x158/0x870 [ 120.336485][ T5723] ? __alloc_skb+0xf4/0x750 [ 120.341012][ T5723] ? audit_log_start+0x158/0x870 [ 120.346007][ T5723] __alloc_skb+0x22c/0x750 [ 120.350448][ T5723] audit_log_start+0x158/0x870 [ 120.355245][ T5723] ? audit_serial+0x30/0x30 [ 120.359788][ T5723] ? __cant_sleep+0x220/0x220 [ 120.364483][ T5723] ? futex_wait+0x680/0x680 [ 120.369036][ T5723] audit_seccomp+0x5f/0x180 [ 120.373575][ T5723] __seccomp_filter+0xa66/0x1a00 [ 120.378570][ T5723] ? __secure_computing+0x2f0/0x2f0 [ 120.383813][ T5723] ? __context_tracking_exit+0x4c/0x80 [ 120.389303][ T5723] ? __lock_acquire+0x7d40/0x7d40 [ 120.394373][ T5723] ? lock_chain_count+0x20/0x20 [ 120.399273][ T5723] ? __secure_computing+0x10d/0x2f0 [ 120.404520][ T5723] syscall_trace_enter+0xd0/0x180 [ 120.409580][ T5723] do_syscall_64+0x24/0xa0 [ 120.414028][ T5723] ? clear_bhb_loop+0x30/0x80 [ 120.418720][ T5723] ? clear_bhb_loop+0x30/0x80 [ 120.423423][ T5723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.429343][ T5723] RIP: 0033:0x7f4c69e3e559 [ 120.433773][ T5723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.453486][ T5723] RSP: 002b:00007f4c68096028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 120.461938][ T5723] RAX: ffffffffffffffda RBX: 00007f4c6a0c5fa0 RCX: 00007f4c69e3e559 [ 120.469961][ T5723] RDX: 0000000000001000 RSI: 0000200000000400 RDI: ffffffffffffffff [ 120.477993][ T5723] RBP: 00007f4c69ed5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 120.485991][ T5723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.493992][ T5723] R13: 00007f4c6a0c6038 R14: 00007f4c6a0c5fa0 R15: 00007fffe2fdef58 [ 120.502006][ T5723] [ 121.765211][ T4173] usb 2-1: Can't get UAC3 power state for id 10 [ 121.830894][ T4173] usb 2-1: BAAD HEADSET c_chmask mismatch [ 121.888049][ T4173] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 121.909290][ T4173] disable ehci-hcd to run US-144 [ 121.949385][ T4173] usb 2-1: USB disconnect, device number 3 [ 122.097567][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 122.178161][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.217392][ T5762] netlink: 48 bytes leftover after parsing attributes in process `syz.4.571'. [ 122.238375][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.565392][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.608601][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 122.697772][ T21] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 122.698072][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 122.780301][ T5776] device ip6gre1 entered promiscuous mode [ 122.863164][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 123.022980][ T21] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 123.133123][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.250818][ T5641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.267193][ T5754] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.307038][ T5754] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.340490][ T5641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.438605][ T21] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 123.524651][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 123.612418][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 123.756220][ T21] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 123.885457][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 123.969612][ T21] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 124.098054][ T21] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 124.275584][ T21] usb 1-1: USB disconnect, device number 5 [ 124.492787][ T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 124.700524][ T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 124.835728][ T21] keyspan 1-1:1.0: device disconnected [ 125.022548][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.087809][ T4250] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.673021][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 125.914972][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.952981][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 125.953003][ T26] audit: type=1326 audit(1792259197.256:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.024804][ T26] audit: type=1326 audit(1792259197.266:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.081897][ T26] audit: type=1326 audit(1792259197.266:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.150143][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 126.159592][ T26] audit: type=1326 audit(1792259197.266:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.184029][ T5819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.204786][ T26] audit: type=1326 audit(1792259197.266:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.205227][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.228714][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.258829][ T26] audit: type=1326 audit(1792259197.266:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.311154][ T26] audit: type=1326 audit(1792259197.286:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.323767][ T4250] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.371370][ T5819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.375411][ T26] audit: type=1326 audit(1792259197.286:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.424321][ T26] audit: type=1326 audit(1792259197.286:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.449455][ T26] audit: type=1326 audit(1792259197.286:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5812 comm="syz.0.592" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1beede0559 code=0x7ffc0000 [ 126.672094][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.598'. [ 126.756098][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.025145][ T4250] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.137450][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 127.164460][ T4250] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.319150][ T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 127.515876][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.544608][ T21] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 127.567946][ T21] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 127.580398][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.599073][ T4250] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 127.616152][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.624348][ T4250] usb 1-1: Product: syz [ 127.634197][ T4250] usb 1-1: Manufacturer: syz [ 127.639499][ T5809] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.652226][ T5809] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.659358][ T4250] usb 1-1: SerialNumber: syz [ 127.763479][ T21] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 127.776957][ T21] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 127.788011][ T21] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 127.800692][ T21] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 127.810379][ T21] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 127.821425][ T21] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 127.821592][ T5841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.831933][ T21] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 127.919858][ T5813] FAULT_INJECTION: forcing a failure. [ 127.919858][ T5813] name failslab, interval 1, probability 0, space 0, times 0 [ 127.942422][ T5813] CPU: 1 PID: 5813 Comm: syz.0.592 Not tainted syzkaller #0 [ 127.949762][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.959832][ T5813] Call Trace: [ 127.963123][ T5813] [ 127.966076][ T5813] dump_stack_lvl+0x188/0x250 [ 127.970779][ T5813] ? show_regs_print_info+0x20/0x20 [ 127.976007][ T5813] ? load_image+0x410/0x410 [ 127.980541][ T5813] ? snprintf+0xe5/0x140 [ 127.984841][ T5813] ? vscnprintf+0x80/0x80 [ 127.989215][ T5813] should_fail+0x383/0x4b0 [ 127.993671][ T5813] should_failslab+0x5/0x20 [ 127.998205][ T5813] slab_pre_alloc_hook+0x51/0xc0 [ 128.003168][ T5813] __kmalloc+0x6b/0x340 [ 128.007342][ T5813] ? aa_label_asxprint+0x6c/0x120 [ 128.012397][ T5813] aa_label_asxprint+0x6c/0x120 [ 128.017276][ T5813] apparmor_secid_to_secctx+0x8a/0x130 [ 128.022765][ T5813] security_secid_to_secctx+0x6c/0xa0 [ 128.028176][ T5813] audit_log_task_context+0xd8/0x210 [ 128.033508][ T5813] ? audit_log_key+0x140/0x140 [ 128.038299][ T5813] ? from_kgid+0x14f/0x6a0 [ 128.042740][ T5813] ? audit_log_start+0x6dd/0x870 [ 128.047736][ T5813] audit_log_task+0x199/0x2e0 [ 128.052447][ T5813] ? audit_core_dumps+0x100/0x100 [ 128.057501][ T5813] ? __cant_sleep+0x220/0x220 [ 128.062217][ T5813] ? futex_wait+0x680/0x680 [ 128.066854][ T5813] audit_seccomp+0x81/0x180 [ 128.071391][ T5813] __seccomp_filter+0xa66/0x1a00 [ 128.076369][ T5813] ? __secure_computing+0x2f0/0x2f0 [ 128.081611][ T5813] ? __context_tracking_exit+0x4c/0x80 [ 128.087120][ T5813] ? __lock_acquire+0x7d40/0x7d40 [ 128.092186][ T5813] ? lock_chain_count+0x20/0x20 [ 128.097073][ T5813] ? __secure_computing+0x10d/0x2f0 [ 128.102304][ T5813] syscall_trace_enter+0xd0/0x180 [ 128.107443][ T5813] do_syscall_64+0x24/0xa0 [ 128.111877][ T5813] ? clear_bhb_loop+0x30/0x80 [ 128.116572][ T5813] ? clear_bhb_loop+0x30/0x80 [ 128.121270][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.127188][ T5813] RIP: 0033:0x7f1beede0559 [ 128.131629][ T5813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.151263][ T5813] RSP: 002b:00007f1bed038028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 128.159720][ T5813] RAX: ffffffffffffffda RBX: 00007f1bef067fa0 RCX: 00007f1beede0559 [ 128.167715][ T5813] RDX: 0000000000001000 RSI: 0000200000000400 RDI: ffffffffffffffff [ 128.175734][ T5813] RBP: 00007f1beee77ab8 R08: 0000000000000000 R09: 0000000000000000 [ 128.183769][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.191762][ T5813] R13: 00007f1bef068038 R14: 00007f1bef067fa0 R15: 00007ffe90df0db8 [ 128.199766][ T5813] [ 128.372826][ T13] usb 2-1: USB disconnect, device number 4 [ 128.394455][ T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 128.419096][ T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 128.446021][ T13] keyspan 2-1:1.0: device disconnected [ 128.663596][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 128.946399][ T4250] usb 1-1: Can't get UAC3 power state for id 10 [ 129.015790][ T4250] usb 1-1: BAAD HEADSET c_chmask mismatch [ 129.474343][ T4250] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 129.481865][ T4250] disable ehci-hcd to run US-144 [ 129.514558][ T4250] usb 1-1: USB disconnect, device number 6 [ 129.531696][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.842895][ T5894] ip_tables: iptables: counters copy to user failed while replacing table [ 129.933090][ T5897] netlink: 404 bytes leftover after parsing attributes in process `syz.1.625'. [ 129.955558][ T5899] TCP: TCP_TX_DELAY enabled [ 130.007368][ T5902] device wlan0 entered promiscuous mode [ 130.055308][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.069049][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 130.100552][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.754975][ T4247] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.165729][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 131.165770][ T26] audit: type=1326 audit(1792259202.476:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7b1fc61eb code=0x7ffc0000 [ 132.760454][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781514][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.394922][ T26] audit: type=1326 audit(1792259204.136:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7b1fc61eb code=0x7ffc0000 [ 133.420320][ T4247] usb 3-1: unable to read config index 0 descriptor/all [ 133.437262][ T4247] usb 3-1: can't read configurations, error -71 [ 133.776814][ T26] audit: type=1326 audit(1792259204.376:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7b1fc61eb code=0x7ffc0000 [ 133.792867][ T5924] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 133.835055][ T26] audit: type=1326 audit(1792259204.386:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7b1fc61eb code=0x7ffc0000 [ 133.874305][ T5924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.881022][ T26] audit: type=1326 audit(1792259204.406:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.2.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7b1fc61eb code=0x7ffc0000 [ 134.001605][ T5935] ip_tables: iptables: counters copy to user failed while replacing table [ 134.082685][ T5928] device macvlan2 entered promiscuous mode [ 134.103367][ T5928] device bond3 entered promiscuous mode [ 134.124077][ T5928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.143013][ T5928] team0: Port device macvlan2 added [ 134.203570][ T5938] bond3: (slave ip6gretap1): making interface the new active one [ 134.231634][ T5938] device ip6gretap1 entered promiscuous mode [ 134.257073][ T5938] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.295943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 134.322899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 134.392801][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 134.451865][ T5946] device syzkaller0 entered promiscuous mode [ 134.588447][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.612914][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.690692][ T5954] netlink: 'syz.1.646': attribute type 16 has an invalid length. [ 134.709831][ T5954] netlink: 'syz.1.646': attribute type 17 has an invalid length. [ 134.811031][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.882782][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.920132][ T5954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.975821][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 135.012563][ T5956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.035187][ T5956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.173305][ T5968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.192129][ T5962] device syzkaller0 entered promiscuous mode [ 135.211459][ T5970] [ 135.213825][ T5970] ================================================ [ 135.220344][ T5970] WARNING: lock held when returning to user space! [ 135.226895][ T5970] syzkaller #0 Not tainted [ 135.231326][ T5970] ------------------------------------------------ [ 135.237860][ T5970] syz.0.650/5970 is leaving the kernel with locks still held! [ 135.245339][ T5970] 1 lock held by syz.0.650/5970: [ 135.250321][ T5970] #0: ffff8880240a4d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xd4/0x3f0 [ 135.313056][ T5973] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 135.397381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 136.474788][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!