last executing test programs: 5.514949621s ago: executing program 0 (id=3460): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6004, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0x7, 0x1, 0xfffffffffffffffe) 5.491435807s ago: executing program 3 (id=3461): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x12) 4.507284185s ago: executing program 3 (id=3466): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008411, &(0x7f0000000080)=ANY=[], 0x85, 0x696, &(0x7f0000000f40)="$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") syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x6004, 0x0) 4.328581706s ago: executing program 0 (id=3468): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) 4.222824901s ago: executing program 3 (id=3470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 4.085434933s ago: executing program 0 (id=3473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1}, 0x4080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000a80)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x2, 0x0, "03c2769bf71d7836323485466b1ab4062438333b036583040056324587db0009466206f9bd19e028710cd7a9a0520137e9cc8f9dc099fc3aecf50f4d209cb4733d2af1e022a74f0d66fba11caeef38f8"}, 0xd8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) 2.323660001s ago: executing program 0 (id=3476): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x1, 0x1}, 0x36, 0x4, 0x0, 0x0, 0x2, 0x3ff, 0x0, 0x2, 0x0, 0x0}) 2.151472471s ago: executing program 3 (id=3481): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 2.029247639s ago: executing program 0 (id=3482): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x8, @mcast2, 0x0, 0x4000000}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x2, 0x9090) 1.541031512s ago: executing program 2 (id=3483): r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000ac0)="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", 0x559, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x0}, r0) 1.101460495s ago: executing program 4 (id=3485): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.029223461s ago: executing program 0 (id=3486): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x19e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x270, 0x100000c, 0xf0, 0xf0, 0x1d8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @rand_addr, 0xffffff00, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00', {0xff}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1, 0x7}, {0x3, 0x6, 0x6}, {0xffffffffffffffff, 0x5, 0x2}, 0x7fff, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000070584024000000705"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) 949.8543ms ago: executing program 2 (id=3487): eventfd2(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x9, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 902.274601ms ago: executing program 1 (id=3488): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x10001}, {0x0, 0x6}]}, 0x18, 0x3) 761.097633ms ago: executing program 1 (id=3489): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74188a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) open$dir(0x0, 0x18980, 0x161) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)=ANY=[], 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) 760.855184ms ago: executing program 4 (id=3490): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="5200000023000101fa020600"/41, 0x29) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000900020000000047020000000800"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000203010200000000000000000a00000009000200000000ff00000000"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 741.557938ms ago: executing program 2 (id=3491): open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 686.225981ms ago: executing program 3 (id=3492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x603}]}) 651.916079ms ago: executing program 1 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) 593.811872ms ago: executing program 4 (id=3494): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19}, 0x94) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 593.136122ms ago: executing program 2 (id=3495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000040801010000000000000000010000040500030001000000060002"], 0x24}, 0x1, 0x0, 0x0, 0x1840}, 0x408c0) 460.426883ms ago: executing program 1 (id=3496): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)={[{@block={'block', 0x3d, 0x800}}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@check_relaxed}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2e8}}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@sbsector}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x64, 0x3) 381.341462ms ago: executing program 4 (id=3497): setresuid(0xee01, 0xee00, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) 381.189962ms ago: executing program 2 (id=3498): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) 288.164723ms ago: executing program 4 (id=3499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 243.345393ms ago: executing program 2 (id=3500): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) socket(0x27, 0x1, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d000005000100070000"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x23, 0x0, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) shutdown(r0, 0x1) 121.267861ms ago: executing program 1 (id=3501): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 121.076642ms ago: executing program 3 (id=3502): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xfffffff9) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) socket$inet6(0xa, 0x2, 0xfffffffd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) r3 = socket(0xa, 0x3, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x22}, 0x18, r5}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(0x0, 0x4) open(&(0x7f0000000000)='./file1\x00', 0x147142, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101000, 0x0) syz_clone3(&(0x7f0000000300)={0x24a40200, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/8, 0x8, 0x0, &(0x7f0000000200), 0x0, {r6}}, 0x58) 52.459338ms ago: executing program 4 (id=3503): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x89, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b", 0x0, 0xf0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 0s ago: executing program 1 (id=3504): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="5200000023000101fa020600"/41, 0x29) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000900020000000047020000000800"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000203010200000000000000000a00000009000200000000ff00000000"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): e_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 568.190039][ T4324] usb 4-1: Using ep0 maxpacket: 8 [ 569.027383][ T4324] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 569.035659][ T4324] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.532977][ T4324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.609275][ T4324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.686800][ T4324] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.740374][ T4324] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 570.762384][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.626153][ T4324] usb 4-1: can't set config #16, error -71 [ 571.701287][ T4324] usb 4-1: USB disconnect, device number 18 [ 574.587530][ T26] audit: type=1326 audit(1790328475.069:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10415 comm="syz.2.1797" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe013f9e159 code=0x0 [ 575.613463][T10425] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1807'. [ 575.664032][T10425] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1807'. [ 575.886098][ T1181] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 576.076407][ T1181] usb 3-1: Using ep0 maxpacket: 8 [ 576.083548][ T1181] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 576.116151][ T1181] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.144156][ T1181] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.184534][ T1181] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.206106][ T1181] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.316397][ T1181] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 576.325561][ T1181] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.713439][T10451] syz.0.1817 uses obsolete (PF_INET,SOCK_PACKET) [ 578.510789][T10451] netlink: 'syz.0.1817': attribute type 12 has an invalid length. [ 580.544352][ T9645] usb 3-1: USB disconnect, device number 26 [ 580.586074][ T26] audit: type=1800 audit(1790328481.049:50): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1822" name=976D9023D56482CD284A63DA539706D7 dev="sda1" ino=2047 res=0 errno=0 [ 582.886456][T10488] overlayfs: failed to clone upperpath [ 588.781478][T10525] nvmet: adding nsid 1 to subsystem testsubsys [ 590.433730][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 590.755690][T10548] fuse: Bad value for 'fd' [ 596.355203][T10605] device syzkaller0 entered promiscuous mode [ 596.389118][T10605] tipc: Enabled bearer , priority 0 [ 596.447644][T10605] tipc: Resetting bearer [ 596.496251][T10604] tipc: Resetting bearer [ 596.565839][T10604] tipc: Disabling bearer [ 598.096619][ T5740] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 598.306140][ T5740] usb 1-1: Using ep0 maxpacket: 8 [ 598.314260][ T5740] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 598.337911][ T5740] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.362963][ T5740] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.396593][ T5740] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.440267][ T5740] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.505592][ T5740] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 598.551087][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.032429][ T4280] Bluetooth: Wrong link type (-22) [ 599.068068][T10637] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 599.421033][T10645] device syzkaller0 entered promiscuous mode [ 599.439000][T10645] tipc: Enabled bearer , priority 0 [ 599.486823][T10645] tipc: Resetting bearer [ 599.498102][T10644] tipc: Resetting bearer [ 599.636755][T10644] tipc: Disabling bearer [ 599.734531][T10647] overlayfs: failed to clone upperpath [ 600.897303][ T5740] usb 1-1: USB disconnect, device number 17 [ 600.910197][T10660] binder: 10659:10660 ioctl 4018620d 0 returned -22 [ 601.409126][ T5740] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 601.713138][T10682] tipc: Enabling of bearer rejected, failed to enable media [ 601.731092][T10683] overlayfs: failed to clone upperpath [ 601.900605][ T5740] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 601.924057][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.932888][ T5740] usb 3-1: Product: syz [ 602.215045][ T5740] usb 3-1: Manufacturer: syz [ 602.240237][ T5740] usb 3-1: SerialNumber: syz [ 602.875935][ T5740] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 603.353183][T10698] netlink: 'syz.0.1894': attribute type 12 has an invalid length. [ 603.416092][ T5740] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 603.609178][ T5740] usb 4-1: Using ep0 maxpacket: 8 [ 603.618269][ T5740] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 603.657450][ T5740] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.690317][ T5740] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.716551][ T5740] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.759179][ T5740] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.800256][ T5740] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 603.847906][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.373814][ T26] audit: type=1326 audit(1790328504.849:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.1.1898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f185a39e159 code=0x0 [ 604.717367][ T5740] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 604.894206][ T9645] usb 3-1: USB disconnect, device number 27 [ 604.917787][ T5740] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 604.943112][ T9645] usblp0: removed [ 604.960810][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.004506][ T5740] usb 1-1: Product: syz [ 605.022767][ T5740] usb 1-1: Manufacturer: syz [ 605.042395][ T5740] usb 1-1: SerialNumber: syz [ 606.197620][ T5740] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 607.051133][T10737] overlayfs: failed to clone upperpath [ 607.484050][ T5740] usb 4-1: USB disconnect, device number 19 [ 607.687297][T10739] device syzkaller0 entered promiscuous mode [ 607.716923][T10739] tipc: Enabled bearer , priority 0 [ 607.738695][ T1181] usb 1-1: USB disconnect, device number 18 [ 607.840950][ T1181] usblp0: removed [ 610.706274][T10751] binder: 10750:10751 ioctl 4018620d 0 returned -22 [ 610.727005][T10745] tipc: Resetting bearer [ 610.821248][T10738] tipc: Resetting bearer [ 610.960514][T10738] tipc: Disabling bearer [ 611.099959][ T4324] tipc: Node number set to 2413267994 [ 611.144505][T10756] netlink: 'syz.4.1909': attribute type 12 has an invalid length. [ 612.700847][T10783] overlayfs: failed to clone upperpath [ 613.354034][ T4322] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 613.566177][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 613.574350][ T4322] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 613.613500][ T4322] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 613.616269][ T41] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 613.660765][ T4322] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 613.685218][ T4322] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.731164][ T4322] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.786480][ T4322] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 613.830696][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.872532][ T41] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 613.894996][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.934437][ T41] usb 3-1: Product: syz [ 613.954948][ T41] usb 3-1: Manufacturer: syz [ 613.974940][ T41] usb 3-1: SerialNumber: syz [ 614.431540][ T41] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 614.661425][T10800] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 614.703642][ T6047] usb 1-1: USB disconnect, device number 19 [ 615.105069][T10803] binder: BINDER_SET_CONTEXT_MGR already set [ 615.131718][T10803] binder: 10802:10803 ioctl 4018620d 2000000002c0 returned -16 [ 617.144057][T10817] device syzkaller0 entered promiscuous mode [ 617.167185][T10817] tipc: Started in network mode [ 617.174351][T10817] tipc: Node identity 5e4153a9fd3b, cluster identity 4711 [ 617.185761][T10817] tipc: Enabled bearer , priority 0 [ 617.350053][T10818] tipc: Resetting bearer [ 617.366734][ T6046] usb 3-1: USB disconnect, device number 28 [ 617.406217][ T6046] usblp1: removed [ 617.414597][T10816] tipc: Resetting bearer [ 617.656990][T10816] tipc: Disabling bearer [ 618.961920][T10831] device syzkaller0 entered promiscuous mode [ 618.997683][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.038469][T10831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.395773][T10837] netlink: 'syz.2.1931': attribute type 12 has an invalid length. [ 621.334086][T10854] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 621.369921][ T41] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 621.582740][ T41] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 621.597864][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.629048][ T41] usb 1-1: Product: syz [ 621.642741][ T41] usb 1-1: Manufacturer: syz [ 621.660995][ T41] usb 1-1: SerialNumber: syz [ 621.704166][T10863] tipc: Enabling of bearer rejected, failed to enable media [ 621.978562][ T4280] Bluetooth: hci1: command 0x0401 tx timeout [ 622.248687][ T41] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 624.419409][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.433510][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.194001][ T4321] usb 1-1: USB disconnect, device number 20 [ 625.208200][T10922] device syzkaller0 entered promiscuous mode [ 625.218053][T10922] tipc: Enabled bearer , priority 0 [ 625.232893][ T4321] usblp0: removed [ 625.324200][T10922] tipc: Resetting bearer [ 625.371567][T10920] tipc: Resetting bearer [ 626.437970][T10920] tipc: Disabling bearer [ 629.186124][T10813] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 630.066119][ T6046] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 630.219152][T10813] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 630.943612][T10813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.973895][T10813] usb 3-1: Product: syz [ 630.987991][T10813] usb 3-1: Manufacturer: syz [ 631.004553][T10813] usb 3-1: SerialNumber: syz [ 631.041620][ T6046] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 631.069266][ T6046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.133839][ T6046] usb 4-1: Product: syz [ 631.146881][ T6046] usb 4-1: Manufacturer: syz [ 631.151574][ T6046] usb 4-1: SerialNumber: syz [ 631.223530][ T4285] Bluetooth: Wrong link type (-22) [ 631.968330][T10813] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 632.866970][ T6046] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 634.192212][ T9645] usb 4-1: USB disconnect, device number 20 [ 634.228341][ T9645] usblp1: removed [ 634.315221][ T4324] usb 3-1: USB disconnect, device number 29 [ 634.352752][ T4324] usblp0: removed [ 635.714628][ T4285] Bluetooth: Wrong link type (-22) [ 635.916398][ T5740] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 636.225930][ T5740] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 636.235203][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.053841][ T5740] usb 3-1: Product: syz [ 637.058405][ T5740] usb 3-1: Manufacturer: syz [ 637.063048][ T5740] usb 3-1: SerialNumber: syz [ 637.505767][ T5740] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 640.424776][ T4285] Bluetooth: Wrong link type (-22) [ 640.781209][ T14] usb 3-1: USB disconnect, device number 30 [ 640.814173][ T14] usblp0: removed [ 643.068041][T11103] device syzkaller0 entered promiscuous mode [ 643.099785][T11103] tipc: Enabled bearer , priority 0 [ 643.147352][T11103] tipc: Resetting bearer [ 643.191259][T11102] tipc: Resetting bearer [ 643.288289][T11102] tipc: Disabling bearer [ 643.456256][ T5740] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 643.617908][T11066] syz.0.1991 (11066): drop_caches: 1 [ 643.899654][ T5740] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 643.916625][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.942750][ T5740] usb 4-1: Product: syz [ 644.057438][ T5740] usb 4-1: Manufacturer: syz [ 644.163229][ T5740] usb 4-1: SerialNumber: syz [ 644.857487][ T5740] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 646.727296][ T4285] Bluetooth: Wrong link type (-22) [ 647.643450][T11177] overlayfs: failed to clone upperpath [ 648.293488][ T5740] usb 4-1: USB disconnect, device number 21 [ 648.332680][ T5740] usblp0: removed [ 650.884850][T11162] tipc: Enabling of bearer rejected, failed to enable media [ 654.088388][T11241] overlayfs: failed to clone upperpath [ 655.089278][T11247] tipc: Enabling of bearer rejected, failed to enable media [ 657.792145][T11275] device syzkaller0 entered promiscuous mode [ 657.812827][T10813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.825518][T11275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.036171][ T9645] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 658.255579][ T9645] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 658.283030][ T9645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.316166][ T9645] usb 4-1: Product: syz [ 658.331616][ T9645] usb 4-1: Manufacturer: syz [ 658.356163][ T9645] usb 4-1: SerialNumber: syz [ 658.579119][T11296] tipc: Enabling of bearer rejected, failed to enable media [ 658.794199][ T9645] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 661.177029][ T14] usb 4-1: USB disconnect, device number 22 [ 661.226314][ T14] usblp0: removed [ 661.605478][T11340] netlink: 'syz.1.2060': attribute type 12 has an invalid length. [ 665.948230][T11401] netlink: 'syz.0.2077': attribute type 12 has an invalid length. [ 666.362173][T11413] device syzkaller0 entered promiscuous mode [ 666.434840][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 668.065859][T11440] overlayfs: failed to clone upperpath [ 672.249338][T11457] overlayfs: failed to clone upperpath [ 677.576612][T11490] /dev/nullb0: Can't open blockdev [ 682.365237][ T14] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 682.986092][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 684.300424][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 684.346062][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.355888][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.447293][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.492661][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.527003][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 685.575043][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.754054][ T14] usb 4-1: can't set config #16, error -71 [ 685.781393][ T14] usb 4-1: USB disconnect, device number 23 [ 685.857929][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.864336][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.826022][ T9645] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 691.037979][ T9645] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 691.066251][ T9645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.085070][ T9645] usb 3-1: Product: syz [ 691.089645][ T9645] usb 3-1: Manufacturer: syz [ 691.094360][ T9645] usb 3-1: SerialNumber: syz [ 691.743293][ T9645] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 695.494930][T11638] overlayfs: failed to clone upperpath [ 695.833215][ T14] usb 3-1: USB disconnect, device number 31 [ 695.844872][ T14] usblp0: removed [ 700.419180][T11684] device syzkaller0 entered promiscuous mode [ 701.719858][T11695] /dev/nullb0: Can't open blockdev [ 703.453280][T11724] overlayfs: failed to clone upperpath [ 704.818414][T11732] overlayfs: failed to clone upperpath [ 705.657379][T11750] /dev/nullb0: Can't open blockdev [ 709.673153][T11793] /dev/nullb0: Can't open blockdev [ 713.840240][T11846] overlayfs: failed to clone upperpath [ 716.246226][ T4353] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 716.507587][ T4353] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 716.517325][ T4353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.525684][ T4353] usb 3-1: Product: syz [ 716.538437][ T4353] usb 3-1: Manufacturer: syz [ 716.548774][ T4353] usb 3-1: SerialNumber: syz [ 717.062550][ T4353] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 718.199408][T11910] overlayfs: failed to clone upperpath [ 720.070868][T10813] usb 3-1: USB disconnect, device number 32 [ 720.104312][T10813] usblp0: removed [ 724.902993][ T4353] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 725.275521][ T4353] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 725.295066][ T4353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.317313][ T4353] usb 1-1: Product: syz [ 725.330088][ T4353] usb 1-1: Manufacturer: syz [ 725.344277][ T4353] usb 1-1: SerialNumber: syz [ 725.800250][ T4353] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 726.746917][T11981] netlink: 'syz.3.2235': attribute type 12 has an invalid length. [ 726.773368][T11984] /dev/nullb0: Can't open blockdev [ 728.556799][T12000] overlayfs: failed to clone upperpath [ 728.642875][ T9645] usb 1-1: USB disconnect, device number 21 [ 728.829818][ T9645] usblp0: removed [ 733.340841][T12033] /dev/nullb0: Can't open blockdev [ 742.904171][T12123] /dev/nullb0: Can't open blockdev [ 747.686551][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.693407][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.969896][T12255] /dev/nullb0: Can't open blockdev [ 761.545341][T12280] netlink: 620 bytes leftover after parsing attributes in process `syz.2.2309'. [ 768.751592][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'. [ 771.194549][T12356] /dev/nullb0: Can't open blockdev [ 772.792882][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2334'. [ 776.167143][T12409] /dev/nullb0: Can't open blockdev [ 776.476335][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 777.506055][ T6046] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 778.713325][ T6046] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 778.736128][ T6046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.744216][ T6046] usb 1-1: Product: syz [ 778.976009][ T6046] usb 1-1: Manufacturer: syz [ 778.980680][ T6046] usb 1-1: SerialNumber: syz [ 782.133914][ T6046] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 782.229873][ T6046] usb 1-1: USB disconnect, device number 22 [ 782.262984][ T6046] usblp0: removed [ 784.766059][ T1181] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 785.168548][T12503] Invalid ELF header type: 2 != 1 [ 785.199381][ T1181] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 785.218793][ T1181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.263260][ T1181] usb 4-1: Product: syz [ 785.269483][ T1181] usb 4-1: Manufacturer: syz [ 785.290659][ T1181] usb 4-1: SerialNumber: syz [ 785.728496][ T1181] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 786.716022][ T6046] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 786.909448][ T6046] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 786.924503][ T6046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.249789][ T6046] usb 3-1: Product: syz [ 787.261981][ T6046] usb 3-1: Manufacturer: syz [ 787.299349][ T6046] usb 3-1: SerialNumber: syz [ 788.714075][ C1] usblp0: nonzero write bulk status received: -71 [ 788.721522][ T1181] usb 4-1: USB disconnect, device number 24 [ 789.932280][T12508] usblp0: removed [ 789.972244][ T6046] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 790.039786][ T6046] usb 3-1: USB disconnect, device number 33 [ 790.066235][ T6046] usblp0: removed [ 793.399251][T12582] netlink: 'syz.0.2387': attribute type 12 has an invalid length. [ 801.809823][T12642] netlink: 'syz.0.2406': attribute type 12 has an invalid length. [ 806.266672][T12693] netlink: 'syz.4.2418': attribute type 12 has an invalid length. [ 808.766313][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.772679][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.238736][T12744] netlink: 'syz.4.2437': attribute type 12 has an invalid length. [ 816.505507][T12799] netlink: 'syz.4.2450': attribute type 12 has an invalid length. [ 819.339559][ T4321] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 819.393048][T12850] netlink: 620 bytes leftover after parsing attributes in process `syz.0.2468'. [ 819.427801][T12854] netlink: 'syz.3.2469': attribute type 12 has an invalid length. [ 819.529948][ T4321] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 819.556046][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.590148][ T4321] usb 3-1: Product: syz [ 819.594387][ T4321] usb 3-1: Manufacturer: syz [ 819.638038][ T4321] usb 3-1: SerialNumber: syz [ 820.192477][ T4321] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 822.153200][T12892] tipc: Enabling of bearer rejected, failed to enable media [ 823.045150][ T4321] usb 3-1: USB disconnect, device number 34 [ 823.068113][ T4321] usblp0: removed [ 825.679728][T12927] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 830.256071][ T41] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 830.460084][ T41] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 830.545450][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.745487][ T41] usb 3-1: Product: syz [ 830.766016][ T41] usb 3-1: Manufacturer: syz [ 830.785970][ T41] usb 3-1: SerialNumber: syz [ 831.355522][T12997] overlayfs: failed to clone upperpath [ 833.588509][ T41] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 833.650330][ T41] usb 3-1: USB disconnect, device number 35 [ 833.709525][ T41] usblp0: removed [ 834.639854][T13041] /dev/nullb0: Can't open blockdev [ 835.658105][T13067] tipc: Enabling of bearer rejected, failed to enable media [ 842.143596][T13176] /dev/nullb0: Can't open blockdev [ 842.219117][T13175] overlayfs: failed to clone upperpath [ 846.337640][T13209] af_packet: tpacket_rcv: packet too big, clamped from 4110 to 3966. macoff=82 [ 847.329550][T13211] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2569'. [ 847.948230][T13217] /dev/nullb0: Can't open blockdev [ 852.228791][T13284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 852.240120][T13284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 852.249413][T13284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 852.259590][T13284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 852.267296][T13284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 852.274687][T13284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 853.203371][T13280] chnl_net:caif_netlink_parms(): no params data found [ 853.336089][T13299] netlink: 'syz.0.2592': attribute type 3 has an invalid length. [ 853.434234][T13120] bond3: (slave syz_tun): Releasing active interface [ 853.772883][T13280] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.937338][T13280] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.996130][T13280] device bridge_slave_0 entered promiscuous mode [ 854.056287][T13280] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.092085][T13280] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.157170][T13280] device bridge_slave_1 entered promiscuous mode [ 854.269791][T13280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.319373][T13280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.336152][T13284] Bluetooth: hci5: command 0x0409 tx timeout [ 854.439892][T13280] team0: Port device team_slave_0 added [ 854.449768][T13280] team0: Port device team_slave_1 added [ 854.473873][T13280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.485469][T13280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.707427][T13280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.416188][T13284] Bluetooth: hci5: command 0x041b tx timeout [ 856.521444][T13280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.541653][T13280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.785937][T13280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.048333][T13280] device hsr_slave_0 entered promiscuous mode [ 858.081892][T13280] device hsr_slave_1 entered promiscuous mode [ 858.102422][T13280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.121760][T13280] Cannot create hsr debugfs directory [ 858.146098][ T41] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 858.787756][T13284] Bluetooth: hci5: command 0x040f tx timeout [ 859.187331][ T41] usb 3-1: not running at top speed; connect to a high speed hub [ 859.200612][ T41] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 859.249708][ T41] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 859.271804][ T41] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 859.295503][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.314143][ T41] usb 3-1: Product: syz [ 859.320448][ T41] usb 3-1: Manufacturer: syz [ 859.325061][ T41] usb 3-1: SerialNumber: syz [ 859.387301][ T41] oti6858 3-1:1.0: oti6858 converter detected [ 859.416117][ T41] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 859.542614][T13280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.646061][ T41] usb 3-1: USB disconnect, device number 36 [ 859.652320][T13335] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -19 [ 859.718234][ T41] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 859.759104][ T41] oti6858 3-1:1.0: device disconnected [ 859.968197][T13280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.273287][T13280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.826167][T13284] Bluetooth: hci5: command 0x0419 tx timeout [ 861.405473][T13280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.845123][T13280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 862.054443][T13280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 862.674632][T13280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 862.739633][T13280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 865.035248][T13280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.121872][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 865.143954][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 865.189710][T13280] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.237358][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 865.262332][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 865.286921][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.294089][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.434868][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 865.447483][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 865.491295][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 865.566708][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.573870][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.613814][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 865.623458][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 865.703194][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 865.739526][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 865.759793][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.801661][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.885595][T13280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 865.927450][T13280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.966982][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.984345][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 866.050851][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 866.107819][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 866.127985][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 866.175035][T13400] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2622'. [ 866.204520][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 867.629056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 867.637256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 867.657651][T13280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.844164][T13441] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2634'. [ 869.971885][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2635'. [ 870.095560][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 870.123487][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 870.179344][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.185831][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.195771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 870.237005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 870.294114][T13280] device veth0_vlan entered promiscuous mode [ 870.318612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 870.347004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 870.378541][T13280] device veth1_vlan entered promiscuous mode [ 870.495123][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 870.519605][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 870.565251][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 870.599581][T12153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 870.653678][T13280] device veth0_macvtap entered promiscuous mode [ 870.741179][T13280] device veth1_macvtap entered promiscuous mode [ 870.742818][T13493] xt_cgroup: path and classid specified [ 870.858057][T13280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.915985][T13280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.954900][T13280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.965498][T13280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.984143][T13280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.012205][T13280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.067495][T13280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.106888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 871.115716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 871.144289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 871.186511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 871.232291][T13280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.264805][T13280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.306479][T13280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.329560][T13280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.366236][T13280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.383511][T13280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.414827][T13280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.445069][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 871.464429][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 871.496674][T13280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.505457][T13280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.544413][T13280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.576373][T13280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.850519][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.882868][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.913306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 872.032622][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.045474][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.075144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 877.810384][T13641] netlink: 568 bytes leftover after parsing attributes in process `syz.1.2703'. [ 879.131739][T13679] netlink: 568 bytes leftover after parsing attributes in process `syz.2.2720'. [ 880.196878][ T26] audit: type=1326 audit(1790328780.679:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.2.2728" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe013f9e159 code=0x0 [ 880.509614][T13718] netlink: 568 bytes leftover after parsing attributes in process `syz.1.2733'. [ 885.589576][T13803] 9pnet_fd: Insufficient options for proto=fd [ 888.791166][T13836] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2776'. [ 888.823296][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2776'. [ 888.855779][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2776'. [ 892.938723][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'. [ 893.533974][T13895] overlayfs: failed to clone upperpath [ 900.630256][T13949] 9pnet_fd: p9_fd_create_unix (13949): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 906.184182][T14007] overlayfs: failed to clone upperpath [ 907.639028][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 907.689423][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 909.947228][T14047] 9pnet_fd: Insufficient options for proto=fd [ 910.754696][T14060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.361303][T14074] overlayfs: failed to clone upperpath [ 911.669059][T14077] tipc: Enabling of bearer rejected, failed to enable media [ 912.582224][T14097] device veth0 entered promiscuous mode [ 912.606904][T14096] device veth0 left promiscuous mode [ 913.011450][T14106] overlayfs: failed to clone upperpath [ 913.824164][T14122] overlayfs: failed to clone upperpath [ 914.749696][T14137] tipc: Enabling of bearer rejected, failed to enable media [ 915.284993][T14153] overlayfs: failed to clone upperpath [ 915.669323][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2882'. [ 917.509913][T14199] tipc: Enabling of bearer rejected, failed to enable media [ 918.700277][T14242] overlayfs: failed to clone upperpath [ 921.689079][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 921.699911][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 921.708541][T10715] bond3: (slave syz_tun): Releasing active interface [ 921.715820][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.726963][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.734706][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 921.744178][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 921.796133][T14273] tipc: Enabling of bearer rejected, failed to enable media [ 922.073712][ T4973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.100112][ T4973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.291240][T14293] overlayfs: failed to clone upperpath [ 923.376860][ T4973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.641702][ T4973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.772126][T14306] fuse: Bad value for 'fd' [ 923.777138][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 924.803875][T14266] chnl_net:caif_netlink_parms(): no params data found [ 924.852428][ T4973] tipc: Left network mode [ 925.892120][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 926.244502][T14327] tipc: Enabling of bearer rejected, failed to enable media [ 926.421616][T14266] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.394138][T14266] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.395253][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 928.593782][T14266] device bridge_slave_0 entered promiscuous mode [ 928.657344][T14266] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.700141][T14266] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.797135][T14266] device bridge_slave_1 entered promiscuous mode [ 928.922156][T14266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.048126][T14266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.067187][T14266] team0: Port device team_slave_0 added [ 930.185681][T14266] team0: Port device team_slave_1 added [ 930.292512][T14405] tipc: Enabling of bearer rejected, failed to enable media [ 930.328849][T14266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.354452][T14266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.474727][T14266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.656442][T13284] Bluetooth: hci0: command 0x0419 tx timeout [ 930.723324][T14419] ip_tables: iptables: counters copy to user failed while replacing table [ 930.759067][T14266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.763516][T14419] raw_sendmsg: syz.2.2951 forgot to set AF_INET. Fix it! [ 930.811689][T14266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.336110][T14266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.618359][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.624780][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.084721][T14443] overlayfs: failed to clone upperpath [ 932.251830][T14266] device hsr_slave_0 entered promiscuous mode [ 932.410834][T14266] device hsr_slave_1 entered promiscuous mode [ 932.424216][T14266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.435937][T14266] Cannot create hsr debugfs directory [ 933.254693][ T4973] device hsr_slave_0 left promiscuous mode [ 933.305653][ T4973] device hsr_slave_1 left promiscuous mode [ 933.316838][ T4973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.334592][ T4973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.363102][ T4973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.384586][ T4973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.425729][ T4973] device bridge_slave_1 left promiscuous mode [ 933.438334][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.490257][ T4973] device bridge_slave_0 left promiscuous mode [ 933.512185][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.655120][ T4973] device veth1_macvtap left promiscuous mode [ 933.686537][ T4973] device veth0_macvtap left promiscuous mode [ 933.705224][ T4973] device veth1_vlan left promiscuous mode [ 933.736855][ T4973] device veth0_vlan left promiscuous mode [ 935.638184][ T4973] bond3 (unregistering): Released all slaves [ 935.823487][ T4973] bond2 (unregistering): Released all slaves [ 935.968283][ T4973] bond1 (unregistering): Released all slaves [ 936.554274][ T4973] team0 (unregistering): Port device team_slave_1 removed [ 936.620968][ T4973] team0 (unregistering): Port device team_slave_0 removed [ 936.699700][ T4973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.779138][ T4973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.764462][ T4973] bond0 (unregistering): Released all slaves [ 939.006364][T14466] tipc: Enabling of bearer rejected, failed to enable media [ 939.599529][T14539] overlayfs: failed to clone upperpath [ 940.373739][T14266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 941.259113][T14266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 941.305593][T14266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 941.390774][T14266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 941.490472][T14568] tipc: Enabling of bearer rejected, failed to enable media [ 941.709947][T14266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.814411][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 941.856793][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 941.900616][T14266] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.948776][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 941.974031][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 942.018885][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.026106][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.076448][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 942.172123][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 942.190980][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 942.218765][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.225993][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.326385][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 942.396036][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 942.417760][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 942.458151][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 942.492580][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 942.512327][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 942.569329][T14266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.611655][T14266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.701518][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 942.734503][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 942.765338][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 942.795147][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 942.819752][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 942.853460][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 945.531016][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 945.540344][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 945.581795][T14266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.656703][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 945.676526][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 945.739748][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 945.749621][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 945.784339][T14266] device veth0_vlan entered promiscuous mode [ 945.796121][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 945.816366][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 946.703166][T14266] device veth1_vlan entered promiscuous mode [ 947.623863][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 948.439492][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 948.498115][T14266] device veth0_macvtap entered promiscuous mode [ 948.540127][T14266] device veth1_macvtap entered promiscuous mode [ 948.656223][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.702605][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.756101][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.798020][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.833791][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.864512][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.900341][T14266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.940530][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 949.002501][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 949.024426][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.057200][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.083672][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.131639][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.170609][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.208886][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.240992][T14266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.274265][T14266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.336396][T14266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.395119][T14266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.444915][T14266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.469342][T14658] overlayfs: failed to clone upperpath [ 949.838721][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 949.939892][ T7974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 950.683674][ T6847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.734334][ T6847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.778668][T14675] netlink: 'syz.4.3012': attribute type 12 has an invalid length. [ 950.824543][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 950.904874][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.918095][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.960004][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 955.350336][T14723] overlayfs: failed to clone upperpath [ 957.768464][T14742] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3025'. [ 960.799934][T14775] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 961.386179][T14786] overlayfs: failed to clone upperpath [ 965.109005][T14809] input: syz1 as /devices/virtual/input/input8 [ 966.956016][ T4321] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 967.148806][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 967.177038][ T4321] usb 2-1: not running at top speed; connect to a high speed hub [ 967.188763][ T4321] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 967.230364][ T4321] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 967.285946][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.294034][ T4321] usb 2-1: Product: syz [ 967.315926][ T4321] usb 2-1: Manufacturer: syz [ 967.320596][ T4321] usb 2-1: SerialNumber: syz [ 967.713592][ T4321] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 968.521765][ T4321] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 968.932680][ T4321] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 968.971908][ T4321] usb 2-1: USB disconnect, device number 20 [ 969.303078][T14868] udevd[14868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.795915][T14669] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 972.077686][T14669] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 972.096084][T14669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.109572][T14669] usb 2-1: config 0 descriptor?? [ 974.391370][T14669] [drm:udl_init] *ERROR* Selecting channel failed [ 974.544390][T14669] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 974.613684][T14669] [drm] Initialized udl on minor 2 [ 974.656774][T13284] Bluetooth: hci5: command 0x0406 tx timeout [ 974.683773][T14669] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 974.742553][T14669] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 974.814798][T14669] usb 2-1: USB disconnect, device number 21 [ 974.857078][ T6047] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 974.975109][ T6047] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 975.004590][ T6047] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 976.215923][T14669] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 976.428169][T14669] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.463535][T14669] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 976.515006][T14669] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 976.555973][T14669] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 976.595908][T14669] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 976.605027][T14669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.671754][T14919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 976.686212][T14919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 976.717760][T14669] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 976.760915][T14669] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 976.779937][T14669] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 976.814307][T14669] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 976.867996][T14669] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 976.917654][T14669] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 976.977494][T14669] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 977.641062][ T4353] usb 2-1: USB disconnect, device number 22 [ 977.667248][ T4353] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 977.737910][ T4353] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 977.797775][ T4353] keyspan 2-1:1.0: device disconnected [ 978.107447][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 978.119048][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 978.127286][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 978.137997][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 978.147155][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 978.154462][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 979.031106][T14948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'. [ 979.092596][T14948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'. [ 979.707111][T14954] syz.1.3090 (14954): drop_caches: 1 [ 979.856947][T14954] syz.1.3090 (14954): drop_caches: 1 [ 980.092210][T14447] bond4: (slave syz_tun): Releasing active interface [ 980.256933][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 980.300585][T14941] chnl_net:caif_netlink_parms(): no params data found [ 980.349780][T14963] device syzkaller0 entered promiscuous mode [ 980.399071][T14965] tipc: Started in network mode [ 980.404047][T14965] tipc: Node identity 924e3cabeb97, cluster identity 4711 [ 980.442940][T14965] tipc: Enabled bearer , priority 0 [ 980.534495][T14963] tipc: Resetting bearer [ 980.706918][ T4768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.907231][T14962] tipc: Resetting bearer [ 981.187291][T14962] tipc: Disabling bearer [ 981.635186][ T4768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.728771][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 982.823626][ T4768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.248479][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.255661][T14941] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.301308][T14941] device bridge_slave_0 entered promiscuous mode [ 983.417274][ T4768] team0: Port device netdevsim0 removed [ 983.425179][ T4768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.506642][ T4973] tipc: Resetting bearer [ 983.514070][T14941] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.305539][T14941] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.369038][T14941] device bridge_slave_1 entered promiscuous mode [ 984.479660][T14941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.547811][T14941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.667984][T14941] team0: Port device team_slave_0 added [ 984.727266][T14941] team0: Port device team_slave_1 added [ 984.840092][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 984.944411][ T4768] tipc: Disabling bearer [ 984.954708][ T4768] tipc: Left network mode [ 984.960411][T14941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.109874][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.136683][T14941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.158052][T14941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.165061][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.353884][T15003] syz.1.3103 (15003): drop_caches: 1 [ 985.363020][T14941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.896164][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 986.971718][T14941] device hsr_slave_0 entered promiscuous mode [ 987.017410][T14941] device hsr_slave_1 entered promiscuous mode [ 987.036270][T14941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.054254][T14941] Cannot create hsr debugfs directory [ 988.656545][T15054] overlayfs: failed to clone upperpath [ 991.036070][ T4353] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 991.258071][ T4353] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 991.276113][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.304588][ T4353] usb 2-1: Product: syz [ 991.317229][ T4353] usb 2-1: Manufacturer: syz [ 991.321890][ T4353] usb 2-1: SerialNumber: syz [ 991.831076][ T4768] device hsr_slave_0 left promiscuous mode [ 991.862525][ T4768] device hsr_slave_1 left promiscuous mode [ 991.966555][ T4768] device veth1_macvtap left promiscuous mode [ 991.982895][ T4768] device veth0_macvtap left promiscuous mode [ 991.994561][ T4768] device veth1_vlan left promiscuous mode [ 992.013339][ T4768] device veth0_vlan left promiscuous mode [ 992.647952][ T4353] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 992.685030][ T4353] usb 2-1: USB disconnect, device number 23 [ 992.696240][ T4768] bond6 (unregistering): (slave veth5): Releasing active interface [ 992.716815][ T4353] usblp0: removed [ 993.591381][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.598092][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.912490][ T4768] bond6 (unregistering): Released all slaves [ 995.006557][ T4768] bond5 (unregistering): (slave veth3): Releasing active interface [ 995.571398][T15122] syz.1.3134 (15122): drop_caches: 1 [ 995.616461][T15122] syz.1.3134 (15122): drop_caches: 1 [ 995.847116][ T4768] bond5 (unregistering): Released all slaves [ 996.051067][ T4768] bond4 (unregistering): Released all slaves [ 996.296777][ T4768] bond3 (unregistering): Released all slaves [ 996.392041][T15134] FAULT_INJECTION: forcing a failure. [ 996.392041][T15134] name failslab, interval 1, probability 0, space 0, times 1 [ 996.405048][T15134] CPU: 1 PID: 15134 Comm: syz.1.3136 Not tainted syzkaller #0 [ 996.412553][T15134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 996.422621][T15134] Call Trace: [ 996.425973][T15134] [ 996.428973][T15134] dump_stack_lvl+0x188/0x24e [ 996.433738][T15134] ? show_regs_print_info+0x12/0x12 [ 996.438980][T15134] ? load_image+0x410/0x410 [ 996.443510][T15134] ? __might_sleep+0xd0/0xd0 [ 996.448142][T15134] ? __lock_acquire+0x7c40/0x7c40 [ 996.453219][T15134] should_fail_ex+0x390/0x4c0 [ 996.457968][T15134] should_failslab+0x5/0x20 [ 996.462507][T15134] slab_pre_alloc_hook+0x59/0x300 [ 996.467586][T15134] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 996.473736][T15134] __kmem_cache_alloc_node+0x4f/0x270 [ 996.479143][T15134] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 996.485254][T15134] kmalloc_trace+0x26/0xe0 [ 996.489686][T15134] fanotify_alloc_overflow_event+0x4a/0x140 [ 996.495599][T15134] __se_sys_fanotify_init+0x417/0x7b0 [ 996.500989][T15134] do_syscall_64+0x4c/0xa0 [ 996.505415][T15134] ? clear_bhb_loop+0x60/0xb0 [ 996.510159][T15134] ? clear_bhb_loop+0x60/0xb0 [ 996.514877][T15134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.520841][T15134] RIP: 0033:0x7f239bd9e159 [ 996.525293][T15134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.544945][T15134] RSP: 002b:00007f239cbe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 996.553373][T15134] RAX: ffffffffffffffda RBX: 00007f239c025fa0 RCX: 00007f239bd9e159 [ 996.561359][T15134] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010 [ 996.569448][T15134] RBP: 00007f239be3506b R08: 0000000000000000 R09: 0000000000000000 [ 996.577432][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.585420][T15134] R13: 00007f239c026038 R14: 00007f239c025fa0 R15: 00007ffc4e8d6b98 [ 996.593417][T15134] [ 996.876796][ T4768] bond2 (unregistering): Released all slaves [ 996.953454][T15138] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[15139] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15138] [ 997.144731][ T4768] bond1 (unregistering): Released all slaves [ 998.506304][ T4321] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 998.731118][ T4321] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 998.745975][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.784364][ T4321] usb 2-1: Product: syz [ 998.789884][ T4321] usb 2-1: Manufacturer: syz [ 998.794526][ T4321] usb 2-1: SerialNumber: syz [ 998.939912][ T4768] bond0 (unregistering): Released all slaves [ 1000.294867][T14941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1000.341509][T14941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1000.403099][T14941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1000.477005][T14941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1000.856061][T14941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.946018][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1000.999993][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1001.030832][T14941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.187918][T14941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1001.231310][T14941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.353396][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1001.436287][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1001.523450][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.530698][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.618370][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1001.663863][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1001.711305][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.718542][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.781411][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1001.836147][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1001.875753][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1001.880137][ T4321] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1001.913068][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1001.939940][ T4321] usb 2-1: USB disconnect, device number 24 [ 1001.954851][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.984273][ T4321] usblp0: removed [ 1001.998438][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1002.040286][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1002.079277][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1002.193768][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1002.243273][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.284939][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1002.293325][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1002.301591][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1003.317693][T15196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1004.617019][T15211] device batadv_slave_1 entered promiscuous mode [ 1004.666039][T15210] device batadv_slave_1 left promiscuous mode [ 1004.742888][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1004.762264][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1004.794166][T14941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.060118][T15220] syz.1.3161 (15220): drop_caches: 1 [ 1005.105244][T15220] syz.1.3161 (15220): drop_caches: 1 [ 1005.143002][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1005.178406][T15223] fuse: Bad value for 'fd' [ 1005.184522][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1005.232811][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1005.264395][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1005.290196][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1005.308549][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1005.329968][T14941] device veth0_vlan entered promiscuous mode [ 1005.371850][T14941] device veth1_vlan entered promiscuous mode [ 1005.434997][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1005.463002][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1005.486956][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1005.509371][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1005.553518][T14941] device veth0_macvtap entered promiscuous mode [ 1005.589863][T14941] device veth1_macvtap entered promiscuous mode [ 1005.645460][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.657112][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.668195][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.679255][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.689726][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.709560][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.775116][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.821210][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.833263][T14941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.853636][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1005.872055][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1005.955291][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1005.985643][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1006.287785][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.298661][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.410722][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.422861][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.439975][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.450534][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.471403][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.492139][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.514064][T14941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.558095][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1006.585419][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1006.629583][T14941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.688190][T15255] syz.1.3172 (15255): drop_caches: 1 [ 1006.732403][T15255] syz.1.3172 (15255): drop_caches: 1 [ 1006.760655][T14941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.813621][T14941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.875961][T14941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.103387][T11693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.122520][T11693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.154156][ T9679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1007.178898][ T9679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.188288][ T9679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.197146][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1007.276050][ T4321] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1007.479453][ T4321] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1007.492673][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.503109][ T4321] usb 2-1: Product: syz [ 1007.518073][ T4321] usb 2-1: Manufacturer: syz [ 1007.523649][ T4321] usb 2-1: SerialNumber: syz [ 1008.046492][T14738] bond1: (slave syz_tun): Releasing active interface [ 1008.228328][ T4768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.384573][ T4768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.610369][ T4768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.844157][ T4768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.865100][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.877520][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.893882][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.902301][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.914374][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1008.921855][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.519735][ T4768] tipc: Left network mode [ 1010.236469][ T4321] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1010.291389][ T4321] usb 2-1: USB disconnect, device number 25 [ 1010.333668][ T4321] usblp0: removed [ 1011.008466][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 1011.347869][T15350] FAULT_INJECTION: forcing a failure. [ 1011.347869][T15350] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.370882][T15350] CPU: 0 PID: 15350 Comm: syz.1.3203 Not tainted syzkaller #0 [ 1011.378430][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1011.388529][T15350] Call Trace: [ 1011.391842][T15350] [ 1011.394805][T15350] dump_stack_lvl+0x188/0x24e [ 1011.399527][T15350] ? show_regs_print_info+0x12/0x12 [ 1011.404773][T15350] ? load_image+0x410/0x410 [ 1011.409321][T15350] ? __might_sleep+0xd0/0xd0 [ 1011.413950][T15350] ? __lock_acquire+0x7c40/0x7c40 [ 1011.418998][T15350] should_fail_ex+0x390/0x4c0 [ 1011.423698][T15350] should_failslab+0x5/0x20 [ 1011.428211][T15350] slab_pre_alloc_hook+0x59/0x300 [ 1011.433252][T15350] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1011.439249][T15350] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1011.444993][T15350] __kmem_cache_alloc_node+0x4f/0x270 [ 1011.450433][T15350] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1011.456114][T15350] __kmalloc_node+0xa2/0x240 [ 1011.460802][T15350] memcg_alloc_slab_cgroups+0x81/0x120 [ 1011.466289][T15350] slab_post_alloc_hook+0xba/0x490 [ 1011.471416][T15350] ? __se_sys_fanotify_init+0x3cc/0x7b0 [ 1011.476984][T15350] __kmem_cache_alloc_node+0x19d/0x270 [ 1011.482498][T15350] ? __se_sys_fanotify_init+0x3cc/0x7b0 [ 1011.488056][T15350] kmalloc_trace+0x26/0xe0 [ 1011.492480][T15350] __se_sys_fanotify_init+0x3cc/0x7b0 [ 1011.497871][T15350] do_syscall_64+0x4c/0xa0 [ 1011.502299][T15350] ? clear_bhb_loop+0x60/0xb0 [ 1011.506984][T15350] ? clear_bhb_loop+0x60/0xb0 [ 1011.511676][T15350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1011.517584][T15350] RIP: 0033:0x7f239bd9e159 [ 1011.522009][T15350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.541626][T15350] RSP: 002b:00007f239cbe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1011.550054][T15350] RAX: ffffffffffffffda RBX: 00007f239c025fa0 RCX: 00007f239bd9e159 [ 1011.558038][T15350] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010 [ 1011.566044][T15350] RBP: 00007f239be3506b R08: 0000000000000000 R09: 0000000000000000 [ 1011.574026][T15350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.582004][T15350] R13: 00007f239c026038 R14: 00007f239c025fa0 R15: 00007ffc4e8d6b98 [ 1011.589998][T15350] [ 1011.691480][T15310] chnl_net:caif_netlink_parms(): no params data found [ 1012.137331][T15310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.144497][T15310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.164780][T15310] device bridge_slave_0 entered promiscuous mode [ 1012.183487][T15310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.215512][T15310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.235143][T15310] device bridge_slave_1 entered promiscuous mode [ 1012.303307][T15310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.316441][T15310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.403046][T15310] team0: Port device team_slave_0 added [ 1012.425366][T15310] team0: Port device team_slave_1 added [ 1012.472665][T15378] fuse: Bad value for 'fd' [ 1012.625275][T15310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.656975][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.688012][T15310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.769012][T15310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.782120][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.810730][T15310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.056025][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 1013.068546][ T4768] device hsr_slave_0 left promiscuous mode [ 1013.109474][ T4768] device hsr_slave_1 left promiscuous mode [ 1013.126444][ T4768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.164465][ T4768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.190804][ T4768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.205754][ T4768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.216025][ T4321] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1013.297854][ T4768] device veth1_macvtap left promiscuous mode [ 1013.303998][ T4768] device veth0_macvtap left promiscuous mode [ 1013.325990][ T4768] device veth1_vlan left promiscuous mode [ 1013.332083][ T4768] device veth0_vlan left promiscuous mode [ 1013.636529][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.652685][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1013.663332][ T4321] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1013.672723][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1013.680960][ T4321] usb 2-1: SerialNumber: syz [ 1013.915334][ T4321] usb 2-1: 0:2 : does not exist [ 1013.926069][ T4321] usb 2-1: unit 5: unexpected type 0x03 [ 1013.966140][ T4321] usb 2-1: USB disconnect, device number 26 [ 1014.207340][T15266] udevd[15266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.384523][ T4768] bond2 (unregistering): Released all slaves [ 1014.765072][T15432] FAULT_INJECTION: forcing a failure. [ 1014.765072][T15432] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.790178][T15432] CPU: 0 PID: 15432 Comm: syz.1.3227 Not tainted syzkaller #0 [ 1014.797732][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1014.807836][T15432] Call Trace: [ 1014.811150][T15432] [ 1014.814112][T15432] dump_stack_lvl+0x188/0x24e [ 1014.818836][T15432] ? show_regs_print_info+0x12/0x12 [ 1014.824077][T15432] ? load_image+0x410/0x410 [ 1014.828626][T15432] ? __might_sleep+0xd0/0xd0 [ 1014.833247][T15432] ? __lock_acquire+0x7c40/0x7c40 [ 1014.838315][T15432] should_fail_ex+0x390/0x4c0 [ 1014.843034][T15432] should_failslab+0x5/0x20 [ 1014.847547][T15432] slab_pre_alloc_hook+0x59/0x300 [ 1014.852586][T15432] ? __se_sys_fanotify_init+0x3cc/0x7b0 [ 1014.858151][T15432] __kmem_cache_alloc_node+0x4f/0x270 [ 1014.863543][T15432] ? __se_sys_fanotify_init+0x3cc/0x7b0 [ 1014.869102][T15432] kmalloc_trace+0x26/0xe0 [ 1014.873533][T15432] __se_sys_fanotify_init+0x3cc/0x7b0 [ 1014.878925][T15432] do_syscall_64+0x4c/0xa0 [ 1014.883361][T15432] ? clear_bhb_loop+0x60/0xb0 [ 1014.888049][T15432] ? clear_bhb_loop+0x60/0xb0 [ 1014.892742][T15432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.898661][T15432] RIP: 0033:0x7f239bd9e159 [ 1014.903088][T15432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.922707][T15432] RSP: 002b:00007f239cbe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1014.931140][T15432] RAX: ffffffffffffffda RBX: 00007f239c025fa0 RCX: 00007f239bd9e159 [ 1014.939124][T15432] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000010 [ 1014.947114][T15432] RBP: 00007f239be3506b R08: 0000000000000000 R09: 0000000000000000 [ 1014.955112][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.963094][T15432] R13: 00007f239c026038 R14: 00007f239c025fa0 R15: 00007ffc4e8d6b98 [ 1014.971088][T15432] [ 1015.136266][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 1015.319215][ T4768] bond1 (unregistering): Released all slaves [ 1015.651158][ T4321] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1015.842273][ T4321] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1015.870742][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.897384][ T4321] usb 3-1: Product: syz [ 1015.901618][ T4321] usb 3-1: Manufacturer: syz [ 1015.916227][ T4321] usb 3-1: SerialNumber: syz [ 1015.930001][ T4324] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1016.139988][ T4324] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1016.159355][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.186954][ T4324] usb 2-1: Product: syz [ 1016.205433][ T4324] usb 2-1: Manufacturer: syz [ 1016.223044][ T4324] usb 2-1: SerialNumber: syz [ 1016.472984][ T4321] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1016.496229][ T4768] team0 (unregistering): Port device team_slave_1 removed [ 1017.434198][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 1017.447104][ T4324] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1017.595907][ T4768] team0 (unregistering): Port device team_slave_0 removed [ 1017.813541][ T4768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.877455][ T4768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.514022][ T4768] bond0 (unregistering): Released all slaves [ 1018.641277][T15310] device hsr_slave_0 entered promiscuous mode [ 1018.687272][T15310] device hsr_slave_1 entered promiscuous mode [ 1018.994132][ T4324] usb 3-1: USB disconnect, device number 37 [ 1019.072362][ T4324] usblp0: removed [ 1019.093755][T15149] usb 2-1: USB disconnect, device number 27 [ 1019.116033][T15149] usblp1: removed [ 1019.244746][T15491] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff01777777777777777777777 [ 1019.563816][T15505] fuse: Bad value for 'fd' [ 1019.718405][ T6046] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1019.927815][ T6046] usb 3-1: Using ep0 maxpacket: 8 [ 1019.934777][ T6046] usb 3-1: config 3 has an invalid interface number: 236 but max is 0 [ 1019.967357][ T6046] usb 3-1: config 3 has no interface number 0 [ 1019.975203][T15310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1019.994099][T15310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1019.999349][ T6046] usb 3-1: config 3 interface 236 has no altsetting 0 [ 1020.023930][ T6046] usb 3-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=35.57 [ 1020.025040][T15310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1020.050308][ T6046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.062493][T15310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1020.085178][ T6046] usb 3-1: Product: syz [ 1020.103102][ T6046] usb 3-1: Manufacturer: syz [ 1020.111505][ T6046] usb 3-1: SerialNumber: syz [ 1020.204532][T15310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.236891][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.249653][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.275160][T15310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.297733][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.307556][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.316799][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.323972][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.361100][ T6046] rndis_wlan 3-1:3.236: skipping garbage [ 1020.369192][ T6046] usb 3-1: bad CDC descriptors [ 1020.370018][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.378936][ T6046] rndis_host 3-1:3.236: skipping garbage [ 1020.389857][ T6046] usb 3-1: bad CDC descriptors [ 1020.395275][ T6046] cdc_acm 3-1:3.236: skipping garbage [ 1020.415235][ T6046] usb 3-1: USB disconnect, device number 38 [ 1020.419135][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.463722][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.488912][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.496130][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.536557][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.580226][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.636216][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.670487][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.698535][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.724756][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.769315][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.788230][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.818376][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.860546][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.900262][T11693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.949704][T15310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1023.364937][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1023.408619][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1023.425633][T15310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.507806][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1023.529849][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1023.600169][T15310] device veth0_vlan entered promiscuous mode [ 1023.617190][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1023.641866][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1023.664125][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1023.695226][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1023.723775][T15310] device veth1_vlan entered promiscuous mode [ 1023.791671][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1023.807881][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1023.825150][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1023.837761][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1023.856381][T15310] device veth0_macvtap entered promiscuous mode [ 1023.882590][T15310] device veth1_macvtap entered promiscuous mode [ 1023.918387][ T4321] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1023.919990][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.947259][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.957835][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1023.975749][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.015111][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.046821][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.065666][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.083172][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.169983][T15310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.212031][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1024.237625][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1024.252844][ T4321] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1024.267166][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.270828][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1024.277903][ T4321] usb 2-1: Product: syz [ 1024.289305][ T26] audit: type=1326 audit(1790328929.768:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.3275" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e20b9e159 code=0x7ffc0000 [ 1024.326972][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1024.338413][ T4321] usb 2-1: Manufacturer: syz [ 1024.343121][ T4321] usb 2-1: SerialNumber: syz [ 1024.369422][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.404475][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.418523][ T26] audit: type=1326 audit(1790328929.768:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.3275" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e20b9e159 code=0x7ffc0000 [ 1024.436165][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.485973][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.495590][ T26] audit: type=1326 audit(1790328929.798:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.3275" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9e20b9e159 code=0x7ffc0000 [ 1024.522260][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.536876][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.541064][ T26] audit: type=1326 audit(1790328929.798:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.3275" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e20b9e159 code=0x7ffc0000 [ 1024.553172][T15310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1024.593410][T15310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.607079][ T26] audit: type=1326 audit(1790328929.798:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.2.3275" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e20b9e159 code=0x7ffc0000 [ 1024.617080][T15310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.661223][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1024.682189][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1024.705129][T15310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.729745][T15310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.757867][T15310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.787106][T15310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.793644][ T4321] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1024.976604][ T4768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.997193][ T4768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.014920][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1025.109519][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.117415][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.170457][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1025.450578][T15614] syz.0.3186 (15614): drop_caches: 1 [ 1025.501870][T15614] syz.0.3186 (15614): drop_caches: 1 [ 1025.742267][T15624] Bluetooth: MGMT ver 1.22 [ 1026.701948][ T4324] usb 2-1: USB disconnect, device number 28 [ 1026.725304][ T4324] usblp0: removed [ 1026.902761][T15649] syz.1.3294 (15649): drop_caches: 1 [ 1026.947715][T15649] syz.1.3294 (15649): drop_caches: 1 [ 1027.120624][T15656] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3297'. [ 1027.305015][ T8974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.521598][ T8974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.585944][T13284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1027.596703][T13284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1027.619313][T13284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1027.645709][ T8974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.660184][T13284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1027.670353][T13284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1027.677699][T13284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1027.879460][ T8974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.383300][T15688] overlayfs: failed to resolve './file2': -2 [ 1029.319345][ T8974] tipc: Left network mode [ 1029.479913][ T4324] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1029.574766][T15666] chnl_net:caif_netlink_parms(): no params data found [ 1029.705748][ T4324] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1029.709920][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 1029.745633][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.796307][ T4324] usb 3-1: Product: syz [ 1029.806459][ T4324] usb 3-1: Manufacturer: syz [ 1029.836883][ T4324] usb 3-1: SerialNumber: syz [ 1030.173246][T15718] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1030.216691][T15666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.255377][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.265706][T15666] device bridge_slave_0 entered promiscuous mode [ 1030.306384][T15718] kvm: pic: level sensitive irq not supported [ 1030.306725][T15718] kvm: pic: non byte read [ 1030.319136][ T4324] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1030.370868][T15718] kvm: pic: level sensitive irq not supported [ 1030.371571][T15718] kvm: pic: non byte read [ 1030.388016][T15666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.400394][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.413578][T15718] kvm: pic: level sensitive irq not supported [ 1030.413702][T15718] kvm: pic: non byte read [ 1030.428862][T15666] device bridge_slave_1 entered promiscuous mode [ 1030.439416][T15718] kvm: pic: level sensitive irq not supported [ 1030.439551][T15718] kvm: pic: non byte read [ 1030.600401][T15666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.484193][T15666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.654346][T15666] team0: Port device team_slave_0 added [ 1031.711089][T15666] team0: Port device team_slave_1 added [ 1031.790157][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 1031.879218][T15666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.888728][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.970387][T15666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.090428][T15603] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1032.158102][T15666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.170718][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.251407][T15666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.322091][T15603] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1032.342688][T15603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.382000][T15603] usb 1-1: config 0 descriptor?? [ 1032.569741][T15666] device hsr_slave_0 entered promiscuous mode [ 1032.589711][T15666] device hsr_slave_1 entered promiscuous mode [ 1032.620624][T15666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.628272][T15666] Cannot create hsr debugfs directory [ 1032.698083][ T8974] device hsr_slave_0 left promiscuous mode [ 1032.715281][ T8974] device hsr_slave_1 left promiscuous mode [ 1032.808325][ T8974] device veth1_macvtap left promiscuous mode [ 1032.827904][ T8974] device veth0_macvtap left promiscuous mode [ 1032.850572][ T8974] device veth1_vlan left promiscuous mode [ 1032.856479][ T8974] device veth0_vlan left promiscuous mode [ 1033.019902][T10813] usb 3-1: USB disconnect, device number 39 [ 1033.037934][T10813] usblp0: removed [ 1033.212759][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1033.244412][T15603] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1033.267267][T15603] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1033.277883][T15603] [drm:udl_init] *ERROR* Selecting channel failed [ 1033.325637][T15603] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1033.352945][T15603] [drm] Initialized udl on minor 2 [ 1033.373119][T15603] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.391038][T15603] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.430686][T15603] usb 1-1: USB disconnect, device number 23 [ 1033.473231][T10813] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1033.494265][T10813] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1033.550212][T10813] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.860711][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 1034.034702][ T8974] bond7 (unregistering): Released all slaves [ 1034.567760][ T8974] bond6 (unregistering): Released all slaves [ 1034.596122][ T8974] bond5 (unregistering): Released all slaves [ 1035.080269][ T8974] bond4 (unregistering): Released all slaves [ 1035.477686][ T8974] bond3 (unregistering): Released all slaves [ 1035.858357][T15798] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 1035.952583][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 1035.963109][ T8974] bond2 (unregistering): Released all slaves [ 1037.087398][ T8974] bond1 (unregistering): Released all slaves [ 1038.245902][ T8974] bond0 (unregistering): Released all slaves [ 1038.740660][T15815] syz.2.3337 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1038.768572][T15815] CPU: 1 PID: 15815 Comm: syz.2.3337 Not tainted syzkaller #0 [ 1038.776136][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1038.786241][T15815] Call Trace: [ 1038.789561][T15815] [ 1038.792531][T15815] dump_stack_lvl+0x188/0x24e [ 1038.797262][T15815] ? ___ratelimit+0x14e/0x610 [ 1038.802030][T15815] ? show_regs_print_info+0x12/0x12 [ 1038.807278][T15815] ? load_image+0x410/0x410 [ 1038.811825][T15815] ? ___ratelimit+0x474/0x610 [ 1038.816539][T15815] ? radix_tree_cpu_dead+0x160/0x160 [ 1038.821878][T15815] dump_header+0xd8/0x820 [ 1038.826231][T15815] oom_kill_process+0x361/0x550 [ 1038.831181][T15815] out_of_memory+0xe25/0x1220 [ 1038.835883][T15815] ? mutex_lock_nested+0x10/0x10 [ 1038.840841][T15815] ? unregister_oom_notifier+0x20/0x20 [ 1038.846321][T15815] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1038.851885][T15815] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1038.857454][T15815] ? do_raw_spin_unlock+0x11d/0x230 [ 1038.862677][T15815] try_charge_memcg+0xc9d/0x17c0 [ 1038.867657][T15815] ? percpu_ref_put+0x180/0x180 [ 1038.872548][T15815] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1038.878293][T15815] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1038.884292][T15815] ? percpu_ref_tryget+0x15/0x180 [ 1038.889329][T15815] ? percpu_ref_tryget+0x15/0x180 [ 1038.894426][T15815] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1038.900161][T15815] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1038.905899][T15815] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1038.911725][T15815] obj_cgroup_charge+0x36a/0x620 [ 1038.916691][T15815] ? obj_cgroup_charge+0xe9/0x620 [ 1038.921734][T15815] ? mod_objcg_mlstate+0x320/0x320 [ 1038.926870][T15815] ? percpu_ref_put+0x12/0x100 [ 1038.931654][T15815] slab_pre_alloc_hook+0x2e2/0x300 [ 1038.936777][T15815] ? slab_pre_alloc_hook+0xb1/0x300 [ 1038.941991][T15815] kmem_cache_alloc_lru+0x49/0x2e0 [ 1038.947116][T15815] ? sock_alloc_inode+0x24/0xc0 [ 1038.952047][T15815] sock_alloc_inode+0x24/0xc0 [ 1038.956737][T15815] ? sockfs_init_fs_context+0xa0/0xa0 [ 1038.962123][T15815] new_inode_pseudo+0x5f/0x1c0 [ 1038.966932][T15815] __sock_create+0x129/0x940 [ 1038.971913][T15815] ? inet_gro_complete+0x570/0x570 [ 1038.977055][T15815] inet_ctl_sock_create+0x9f/0x1f0 [ 1038.982179][T15815] ? fib_default_rule_add+0x4b/0x390 [ 1038.987550][T15815] ? inet_gro_complete+0x570/0x570 [ 1038.992673][T15815] ? ndisc_net_init+0x12c/0x250 [ 1038.997579][T15815] ? fib6_info_release+0xa0/0xa0 [ 1039.002533][T15815] ? fib_default_rule_add+0x1fa/0x390 [ 1039.007925][T15815] igmp6_net_init+0x33/0x3f0 [ 1039.012567][T15815] ops_init+0x360/0x5e0 [ 1039.016786][T15815] setup_net+0x4f2/0xbd0 [ 1039.021047][T15815] ? copy_net_ns+0x5b0/0x5b0 [ 1039.025659][T15815] ? copy_net_ns+0x324/0x5b0 [ 1039.030264][T15815] ? down_read_killable+0x1cc/0x340 [ 1039.035490][T15815] copy_net_ns+0x33e/0x5b0 [ 1039.039932][T15815] create_new_namespaces+0x3ce/0x700 [ 1039.045293][T15815] unshare_nsproxy_namespaces+0x116/0x160 [ 1039.051033][T15815] ksys_unshare+0x4f6/0x8e0 [ 1039.055576][T15815] ? sighand_ctor+0x40/0x40 [ 1039.060096][T15815] ? lock_chain_count+0x20/0x20 [ 1039.064970][T15815] ? syscall_enter_from_user_mode+0x21/0x80 [ 1039.070902][T15815] __x64_sys_unshare+0x34/0x40 [ 1039.075678][T15815] do_syscall_64+0x4c/0xa0 [ 1039.080105][T15815] ? clear_bhb_loop+0x60/0xb0 [ 1039.084792][T15815] ? clear_bhb_loop+0x60/0xb0 [ 1039.089490][T15815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.095401][T15815] RIP: 0033:0x7f9e20b9e159 [ 1039.099834][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.119452][T15815] RSP: 002b:00007f9e21aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1039.127888][T15815] RAX: ffffffffffffffda RBX: 00007f9e20e25fa0 RCX: 00007f9e20b9e159 [ 1039.135872][T15815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 1039.143853][T15815] RBP: 00007f9e20c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1039.151835][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.159818][T15815] R13: 00007f9e20e26038 R14: 00007f9e20e25fa0 R15: 00007fffee22b228 [ 1039.167817][T15815] [ 1039.300662][T15815] memory: usage 96kB, limit 96kB, failcnt 37 [ 1039.313129][T15815] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 1039.321005][T15815] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1039.338203][T15815] Memory cgroup stats for /syz2/test: [ 1039.339779][T15815] anon 0 [ 1039.339779][T15815] file 0 [ 1039.339779][T15815] kernel 98304 [ 1039.339779][T15815] kernel_stack 0 [ 1039.339779][T15815] pagetables 0 [ 1039.339779][T15815] sec_pagetables 0 [ 1039.339779][T15815] percpu 0 [ 1039.339779][T15815] sock 0 [ 1039.339779][T15815] vmalloc 0 [ 1039.339779][T15815] shmem 0 [ 1039.339779][T15815] zswap 0 [ 1039.339779][T15815] zswapped 0 [ 1039.339779][T15815] file_mapped 0 [ 1039.339779][T15815] file_dirty 0 [ 1039.339779][T15815] file_writeback 0 [ 1039.339779][T15815] swapcached 4096 [ 1039.339779][T15815] anon_thp 0 [ 1039.339779][T15815] file_thp 0 [ 1039.339779][T15815] shmem_thp 0 [ 1039.339779][T15815] inactive_anon 0 [ 1039.339779][T15815] active_anon 0 [ 1039.339779][T15815] inactive_file 0 [ 1039.339779][T15815] active_file 0 [ 1039.339779][T15815] unevictable 0 [ 1039.339779][T15815] slab_reclaimable 22768 [ 1039.339779][T15815] slab_unreclaimable 74648 [ 1039.339779][T15815] slab 97416 [ 1039.339779][T15815] workingset_refault_anon 0 [ 1040.342261][T15815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.3337,pid=15814,uid=0 [ 1040.501280][T15815] Memory cgroup out of memory: Killed process 15815 (syz.2.3337) total-vm:104424kB, anon-rss:1420kB, file-rss:22792kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1040.800967][T15847] UDC core: g1: couldn't find an available UDC or it's busy [ 1040.900861][T15666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1040.918447][T15666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1040.935255][T15666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1040.993670][T15666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1041.022694][T15857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1041.210006][T15666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.258829][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1041.280955][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.311955][T15666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.334220][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.356279][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.371631][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.378912][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.428754][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.479460][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.509448][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.537729][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.545021][ T8802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.562663][T15603] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1041.593127][ T8802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1041.638378][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1041.673503][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1041.694224][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1041.806344][T15666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1041.862649][T15666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1041.888019][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1041.888016][T15603] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1041.888047][T15603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.926807][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1042.848624][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1042.871576][T15603] usb 3-1: config 0 descriptor?? [ 1042.931143][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1042.971865][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1042.991765][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1043.009405][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1043.059507][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1044.280128][T15603] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1044.293171][T15603] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1044.302111][T15603] [drm:udl_init] *ERROR* Selecting channel failed [ 1044.315818][T15603] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1044.336414][T15603] [drm] Initialized udl on minor 2 [ 1044.343617][T15603] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1044.351722][T15603] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1044.381664][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'. [ 1044.418282][T15603] usb 3-1: USB disconnect, device number 40 [ 1044.444922][ T4321] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1044.474026][ T4321] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1044.500190][ T4321] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1044.696300][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1044.715744][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1044.769188][T15666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.885190][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1044.899227][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1044.975821][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1045.016807][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1045.039892][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1045.081334][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1046.340761][T15666] device veth0_vlan entered promiscuous mode [ 1046.477758][T13284] Bluetooth: hci0: command 0x0406 tx timeout [ 1046.970826][T15666] device veth1_vlan entered promiscuous mode [ 1047.088351][ T9679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1047.114712][ T9679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1047.166967][T15666] device veth0_macvtap entered promiscuous mode [ 1047.200081][T15666] device veth1_macvtap entered promiscuous mode [ 1047.281023][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.322819][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.350669][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.361917][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.372419][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.388986][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.401640][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.422713][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.473118][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1047.482421][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.503851][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.526712][T15666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.551157][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1047.567765][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1047.615085][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1047.638638][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1047.676947][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 1047.704490][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.724317][T10813] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1047.742297][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.752696][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.773708][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.784287][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.795182][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.808828][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.826787][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.846626][T15666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.874269][T15666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.889987][T15666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.909899][ T9679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1047.931065][ T9679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1047.941769][T10813] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1047.966332][T10813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.991081][T15666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.019994][T10813] usb 1-1: config 0 descriptor?? [ 1048.020362][T15666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.063376][T15666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.084360][T15666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.292648][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.323487][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.372437][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1048.459513][ T4725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.481384][ T4725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.534998][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1048.652417][T15969] fuse: Bad value for 'fd' [ 1048.922834][T10813] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1048.929549][T15979] 9pnet_fd: Insufficient options for proto=fd [ 1048.944332][ T4321] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1048.963837][T10813] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1048.973065][T10813] [drm:udl_init] *ERROR* Selecting channel failed [ 1049.012702][T10813] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1049.029359][T10813] [drm] Initialized udl on minor 2 [ 1049.047514][T10813] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1049.073668][T10813] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1049.085320][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 1049.111683][T15603] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1049.125768][T10813] usb 1-1: USB disconnect, device number 24 [ 1049.141239][ T4321] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1049.154914][T15603] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1049.168578][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.186719][T15603] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1049.214064][ T4321] usb 3-1: Product: syz [ 1049.221484][ T4321] usb 3-1: Manufacturer: syz [ 1049.239068][ T4321] usb 3-1: SerialNumber: syz [ 1049.801957][ T4321] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1051.585060][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1051.759728][ T41] usb 3-1: USB disconnect, device number 41 [ 1051.789728][ T41] usblp0: removed [ 1052.274698][T10813] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1052.506655][T10813] usb 1-1: Using ep0 maxpacket: 32 [ 1052.536004][T10813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.676559][T10813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1052.821517][T10813] usb 1-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 1052.865737][T10813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.916416][T10813] usb 1-1: Product: syz [ 1052.920783][T10813] usb 1-1: Manufacturer: syz [ 1052.947374][T10813] usb 1-1: SerialNumber: syz [ 1053.030833][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1053.115365][ T41] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1053.199326][T10813] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1053.239409][T10813] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1053.249397][T10813] usb 1-1: can't set first interface for hiFace device. [ 1053.257477][T10813] snd-usb-hiface: probe of 1-1:1.0 failed with error -5 [ 1053.267391][T10813] usb 1-1: USB disconnect, device number 25 [ 1053.297814][T15831] udevd[15831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.307016][ T41] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1053.351951][ T41] usb 3-1: config 0 has no interface number 0 [ 1053.368546][ T41] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1053.390483][ T41] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1053.423476][T16056] bridge0: port 3(wlan1) entered blocking state [ 1053.435003][ T41] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1053.447963][T16056] bridge0: port 3(wlan1) entered disabled state [ 1053.454506][ T41] usb 3-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 1053.462145][T16056] device wlan1 entered promiscuous mode [ 1053.474617][T16056] bridge0: port 3(wlan1) entered blocking state [ 1053.481518][T16056] bridge0: port 3(wlan1) entered forwarding state [ 1053.495588][ T4973] bridge0: port 3(wlan1) entered disabled state [ 1053.641808][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.650542][ T41] usb 3-1: Product: syz [ 1053.654773][ T41] usb 3-1: Manufacturer: syz [ 1053.659487][ T41] usb 3-1: SerialNumber: syz [ 1053.697203][ T41] usb 3-1: config 0 descriptor?? [ 1054.169745][ T41] usb 3-1: USB disconnect, device number 42 [ 1054.531291][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.537711][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.721348][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1057.495862][T10813] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1057.594772][T16135] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1057.709049][T10813] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1057.727291][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1057.728516][T10813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.767236][T10813] usb 3-1: config 0 descriptor?? [ 1058.558522][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3462'. [ 1058.844849][T10813] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1058.955337][T10813] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1059.110646][T10813] [drm:udl_init] *ERROR* Selecting channel failed [ 1059.182980][T16165] block device autoloading is deprecated and will be removed. [ 1059.420853][T10813] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1059.445733][T10813] [drm] Initialized udl on minor 2 [ 1059.504648][T16175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1059.514789][T10813] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1059.548894][T10813] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1059.629648][T10813] usb 3-1: USB disconnect, device number 43 [ 1059.664326][T15603] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1059.693793][T15603] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1059.732744][T15603] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1059.885657][T16189] device syzkaller0 entered promiscuous mode [ 1060.083980][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1061.788770][T16205] usb usb8: usbfs: process 16205 (syz.0.3476) did not claim interface 0 before use [ 1062.994790][T16230] netlink: 'syz.4.3485': attribute type 4 has an invalid length. [ 1063.053398][T16231] netlink: 'syz.4.3485': attribute type 4 has an invalid length. [ 1063.240584][ T9645] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1063.288972][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 1063.437229][ T9645] usb 1-1: not running at top speed; connect to a high speed hub [ 1063.452928][ T9645] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1063.480656][ T9645] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1063.501858][ T9645] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1063.535407][ T9645] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1063.575220][ T9645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.608735][T16228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1063.628432][ T9645] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1063.643667][ T9645] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1063.663040][ T9645] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1063.676689][ T9645] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 1063.684687][ T9645] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1063.707868][ T9645] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1063.959802][T16265] [ 1063.962209][T16265] ====================================================== [ 1063.969253][T16265] WARNING: possible circular locking dependency detected [ 1063.976300][T16265] syzkaller #0 Not tainted [ 1063.980744][T16265] ------------------------------------------------------ [ 1063.981674][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 1063.987766][T16265] syz.2.3500/16265 is trying to acquire lock: [ 1063.987781][T16265] ffff888066b34428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 1063.987930][T16265] [ 1063.987930][T16265] but task is already holding lock: [ 1063.987937][T16265] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 1063.988005][T16265] [ 1063.988005][T16265] which lock already depends on the new lock. [ 1063.988005][T16265] [ 1063.988012][T16265] [ 1063.988012][T16265] the existing dependency chain (in reverse order) is: [ 1063.988017][T16265] [ 1063.988017][T16265] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1064.055153][T16265] __mutex_lock+0x12d/0xae0 [ 1064.060194][T16265] rfcomm_security_cfm+0x95/0x780 [ 1064.065811][T16265] hci_encrypt_cfm+0x363/0x4d0 [ 1064.071131][T16265] hci_cc_read_enc_key_size+0x218/0x380 [ 1064.077205][T16265] hci_cmd_complete_evt+0x4e3/0xa40 [ 1064.082935][T16265] hci_event_packet+0x7b3/0x1290 [ 1064.088400][T16265] hci_rx_work+0x3eb/0xd40 [ 1064.093389][T16265] process_one_work+0x8ab/0x1160 [ 1064.098883][T16265] worker_thread+0xaf5/0x12a0 [ 1064.104090][T16265] kthread+0x29d/0x330 [ 1064.108680][T16265] ret_from_fork+0x1f/0x30 [ 1064.113666][T16265] [ 1064.113666][T16265] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1064.121404][T16265] __mutex_lock+0x12d/0xae0 [ 1064.126436][T16265] hci_remote_features_evt+0x464/0xa10 [ 1064.132431][T16265] hci_event_packet+0x806/0x1290 [ 1064.137893][T16265] hci_rx_work+0x3eb/0xd40 [ 1064.142842][T16265] process_one_work+0x8ab/0x1160 [ 1064.148306][T16265] worker_thread+0xaf5/0x12a0 [ 1064.153511][T16265] kthread+0x29d/0x330 [ 1064.158102][T16265] ret_from_fork+0x1f/0x30 [ 1064.163049][T16265] [ 1064.163049][T16265] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1064.170354][T16265] __lock_acquire+0x2d18/0x7c40 [ 1064.175759][T16265] lock_acquire+0x1bb/0x4a0 [ 1064.180792][T16265] __mutex_lock+0x12d/0xae0 [ 1064.185826][T16265] l2cap_chan_connect+0xfb/0xe20 [ 1064.191289][T16265] l2cap_sock_connect+0x576/0x750 [ 1064.196842][T16265] kernel_connect+0x13e/0x1c0 [ 1064.202048][T16265] rfcomm_dlc_open+0x600/0x10c0 [ 1064.207426][T16265] rfcomm_sock_connect+0x2e9/0x600 [ 1064.213063][T16265] __sys_connect+0x3cb/0x450 [ 1064.218178][T16265] __x64_sys_connect+0x76/0x80 [ 1064.223463][T16265] do_syscall_64+0x4c/0xa0 [ 1064.228405][T16265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.234833][T16265] [ 1064.234833][T16265] other info that might help us debug this: [ 1064.234833][T16265] [ 1064.245080][T16265] Chain exists of: [ 1064.245080][T16265] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1064.245080][T16265] [ 1064.257624][T16265] Possible unsafe locking scenario: [ 1064.257624][T16265] [ 1064.265086][T16265] CPU0 CPU1 [ 1064.270456][T16265] ---- ---- [ 1064.275822][T16265] lock(rfcomm_mutex); [ 1064.279987][T16265] lock(hci_cb_list_lock); [ 1064.287021][T16265] lock(rfcomm_mutex); [ 1064.293699][T16265] lock(&hdev->lock); [ 1064.297771][T16265] [ 1064.297771][T16265] *** DEADLOCK *** [ 1064.297771][T16265] [ 1064.305916][T16265] 1 lock held by syz.2.3500/16265: [ 1064.311030][T16265] #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 1064.320440][T16265] [ 1064.320440][T16265] stack backtrace: [ 1064.326327][T16265] CPU: 1 PID: 16265 Comm: syz.2.3500 Not tainted syzkaller #0 [ 1064.333789][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1064.343853][T16265] Call Trace: [ 1064.347141][T16265] [ 1064.350083][T16265] dump_stack_lvl+0x188/0x24e [ 1064.354773][T16265] ? load_image+0x410/0x410 [ 1064.359289][T16265] ? show_regs_print_info+0x12/0x12 [ 1064.364498][T16265] ? print_circular_bug+0x12b/0x1a0 [ 1064.369713][T16265] check_noncircular+0x296/0x330 [ 1064.374670][T16265] ? add_chain_block+0x9b0/0x9b0 [ 1064.379634][T16265] ? lockdep_lock+0xf1/0x1f0 [ 1064.384264][T16265] ? _find_first_zero_bit+0xd2/0x100 [ 1064.389665][T16265] __lock_acquire+0x2d18/0x7c40 [ 1064.394540][T16265] ? verify_lock_unused+0x140/0x140 [ 1064.399756][T16265] ? verify_lock_unused+0x140/0x140 [ 1064.404969][T16265] lock_acquire+0x1bb/0x4a0 [ 1064.409482][T16265] ? l2cap_chan_connect+0xfb/0xe20 [ 1064.414623][T16265] ? __might_sleep+0xd0/0xd0 [ 1064.419217][T16265] ? read_lock_is_recursive+0x10/0x10 [ 1064.424599][T16265] ? __lock_acquire+0x7c40/0x7c40 [ 1064.429645][T16265] ? __lock_acquire+0x1465/0x7c40 [ 1064.434678][T16265] __mutex_lock+0x12d/0xae0 [ 1064.439191][T16265] ? l2cap_chan_connect+0xfb/0xe20 [ 1064.444328][T16265] ? do_raw_read_unlock+0x39/0x70 [ 1064.449416][T16265] ? _raw_read_unlock+0x24/0x40 [ 1064.454293][T16265] ? hci_get_route+0x3a1/0x4d0 [ 1064.459068][T16265] ? l2cap_chan_connect+0xfb/0xe20 [ 1064.464196][T16265] ? mutex_lock_nested+0x10/0x10 [ 1064.469145][T16265] ? print_unlock_imbalance_bug+0x160/0x160 [ 1064.475061][T16265] ? mark_lock+0x94/0x320 [ 1064.479405][T16265] l2cap_chan_connect+0xfb/0xe20 [ 1064.484349][T16265] ? lock_chain_count+0x20/0x20 [ 1064.489211][T16265] ? l2cap_sock_connect+0x13e/0x750 [ 1064.494422][T16265] ? l2cap_chan_le_send_credits+0x590/0x590 [ 1064.500320][T16265] ? __local_bh_enable_ip+0x136/0x1c0 [ 1064.505723][T16265] ? _local_bh_enable+0xa0/0xa0 [ 1064.510580][T16265] l2cap_sock_connect+0x576/0x750 [ 1064.515619][T16265] ? l2cap_sock_bind+0x870/0x870 [ 1064.520566][T16265] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1064.526559][T16265] ? memset+0x1e/0x40 [ 1064.530549][T16265] ? kernel_connect+0xee/0x1c0 [ 1064.535322][T16265] kernel_connect+0x13e/0x1c0 [ 1064.540013][T16265] ? kernel_accept+0x420/0x420 [ 1064.544785][T16265] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 1064.549821][T16265] rfcomm_dlc_open+0x600/0x10c0 [ 1064.554685][T16265] ? lock_chain_count+0x20/0x20 [ 1064.559546][T16265] ? rfcomm_sock_connect+0x2c2/0x600 [ 1064.564838][T16265] ? rfcomm_dlc_free+0x40/0x40 [ 1064.569606][T16265] ? __local_bh_enable_ip+0x136/0x1c0 [ 1064.575002][T16265] ? lockdep_hardirqs_on+0x94/0x140 [ 1064.580214][T16265] ? __local_bh_enable_ip+0x136/0x1c0 [ 1064.585591][T16265] ? _local_bh_enable+0xa0/0xa0 [ 1064.590447][T16265] ? do_raw_spin_unlock+0x11d/0x230 [ 1064.595653][T16265] rfcomm_sock_connect+0x2e9/0x600 [ 1064.600783][T16265] ? rfcomm_sock_bind+0x550/0x550 [ 1064.605814][T16265] __sys_connect+0x3cb/0x450 [ 1064.610414][T16265] ? __sys_connect_file+0x170/0x170 [ 1064.615626][T16265] __x64_sys_connect+0x76/0x80 [ 1064.620402][T16265] do_syscall_64+0x4c/0xa0 [ 1064.624829][T16265] ? clear_bhb_loop+0x60/0xb0 [ 1064.629514][T16265] ? clear_bhb_loop+0x60/0xb0 [ 1064.634197][T16265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.640103][T16265] RIP: 0033:0x7f9e20b9e159 [ 1064.644524][T16265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.664141][T16265] RSP: 002b:00007f9e21a83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1064.672569][T16265] RAX: ffffffffffffffda RBX: 00007f9e20e26090 RCX: 00007f9e20b9e159 [ 1064.680549][T16265] RDX: 000000000000000a RSI: 0000200000005dc0 RDI: 0000000000000007 [ 1064.688526][T16265] RBP: 00007f9e20c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1064.696526][T16265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.704522][T16265] R13: 00007f9e20e26128 R14: 00007f9e20e26090 R15: 00007fffee22b228 [ 1064.712506][T16265] [ 1064.991731][T16275] overlayfs: unrecognized mount option "/file0" or missing value [ 1065.494414][ T4353] usb 1-1: USB disconnect, device number 26 [ 1065.503731][ T4353] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1065.516564][ T4353] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1065.529398][ T4353] keyspan 1-1:1.0: device disconnected