last executing test programs: 2m55.076739667s ago: executing program 1 (id=158): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x12301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0xfffffffe, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x1, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x3}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x2, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x1ff, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0x5, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x100, 0x2, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x205, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x1, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x201, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x6, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x6, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x8, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x40004, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x88, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0x5, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1b, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x787, 0x2, 0x9, 0x3fe, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x0, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4012}], 0x2}, 0x5) 2m54.629946319s ago: executing program 1 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63c2406d0787cf6be3e98285812e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m54.441964524s ago: executing program 1 (id=164): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$key(0xf, 0x3, 0x2) r5 = timerfd_create(0x9, 0x80000) timerfd_settime(r5, 0x2, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2m52.689029982s ago: executing program 1 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 2m52.486920508s ago: executing program 1 (id=174): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63c2406d0787cf6be3e98285812e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m51.995400021s ago: executing program 1 (id=180): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', 'afs\x00'}) 2m51.537772813s ago: executing program 32 (id=180): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', 'afs\x00'}) 6.714051265s ago: executing program 4 (id=1049): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.52577863s ago: executing program 4 (id=1052): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) 6.233809728s ago: executing program 4 (id=1057): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = userfaultfd(0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xfbb) r2 = inotify_init() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r3, &(0x7f00000001c0), &(0x7f0000001200)=@tcp, 0x1}, 0x20) r4 = inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200, 0x751) openat$cgroup_ro(r5, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) inotify_rm_watch(r5, r4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x406200, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xb) ppoll(&(0x7f00000000c0)=[{r6, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0xb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x0, 0x4, 0xe044, 0x0, 'syz0\x00'}, 0x2, 0x400, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x14f) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) 6.227741748s ago: executing program 5 (id=1058): unshare(0x22020400) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x6020400) pidfd_send_signal(r0, 0x21, 0x0, 0x0) 6.189829539s ago: executing program 2 (id=1059): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) 6.038479223s ago: executing program 5 (id=1060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x20000010) 6.037873113s ago: executing program 3 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 6.002720764s ago: executing program 2 (id=1062): syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) 5.683749712s ago: executing program 5 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(r0, 0x0, 0xfea000, 0x2000402) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) 5.479935697s ago: executing program 0 (id=1066): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c000500000000020000000005003700c200000008000200", @ANYRES32=r2], 0x40}, 0x4, 0x700000000000000}, 0x0) 5.239956364s ago: executing program 3 (id=1067): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x80000, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.649863645s ago: executing program 4 (id=1068): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 1.810525353s ago: executing program 3 (id=1071): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.745783595s ago: executing program 5 (id=1072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0xfffffff9, 0x0, 0x0, 0x8}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000002001000000000000000000000000000200080000000000008d010000000008000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.605909418s ago: executing program 0 (id=1073): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x1, 0x0, [{0x0, 0xc2, &(0x7f0000001740)=""/194}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 806.27692ms ago: executing program 3 (id=1074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x20000010) 565.217945ms ago: executing program 0 (id=1075): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) 555.193236ms ago: executing program 2 (id=1076): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2b4}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251100"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) 492.671728ms ago: executing program 4 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 347.256322ms ago: executing program 0 (id=1078): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x8000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x9, 0x4, 0x8, 0x756e, 0x6, r0}) 281.188213ms ago: executing program 2 (id=1079): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 257.208304ms ago: executing program 5 (id=1080): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x2, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff", 0x9d, 0x0, 0x0, 0x0) 213.812295ms ago: executing program 3 (id=1081): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) set_robust_list(&(0x7f0000000180)={0x0, 0x9}, 0x18) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x402000, 0x60) ioctl$TIOCCBRK(r1, 0x5428) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20e8086) socket$inet6_sctp(0xa, 0x5, 0x84) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0xa00, 0x800, 0x300, 0x3f, 0x32, 0x2, 0x0, 0x0, {}, {0x2}, {0x0, 0x3, 0xfffffffc}, {}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xe07, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}) 123.728557ms ago: executing program 2 (id=1082): syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(r0, 0x0, 0xfea000, 0x2000402) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) 99.424358ms ago: executing program 0 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 70.034989ms ago: executing program 4 (id=1084): setreuid(0x0, 0x0) 4.98153ms ago: executing program 5 (id=1085): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x1, 0x0, [{0x0, 0xc2, &(0x7f0000001740)=""/194}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 0s ago: executing program 3 (id=1086): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) kernel console output (not intermixed with test programs): 84.411113][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.434972][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.445556][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.454620][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.462658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.474811][ T4286] device veth0_vlan entered promiscuous mode [ 84.524275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.542357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.566241][ T4273] device veth0_vlan entered promiscuous mode [ 84.574409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.596625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.622783][ T4273] device veth1_vlan entered promiscuous mode [ 84.647544][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.660083][ T4286] device veth1_vlan entered promiscuous mode [ 84.672145][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.680087][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.696211][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.725056][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.740366][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.750197][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.792242][ T4274] device veth0_vlan entered promiscuous mode [ 84.818143][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.830898][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.842495][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.917031][ T4274] device veth1_vlan entered promiscuous mode [ 84.925639][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.937875][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.946486][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.956857][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.989898][ T4273] device veth0_macvtap entered promiscuous mode [ 84.997609][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.006505][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.020535][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.021330][ T4360] ======================================================= [ 85.021330][ T4360] WARNING: The mand mount option has been deprecated and [ 85.021330][ T4360] and is ignored by this kernel. Remove the mand [ 85.021330][ T4360] option from the mount to silence this warning. [ 85.021330][ T4360] ======================================================= [ 85.061164][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.077434][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.087888][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.096398][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.110993][ T4273] device veth1_macvtap entered promiscuous mode [ 85.140098][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.170193][ T4286] device veth0_macvtap entered promiscuous mode [ 85.210435][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.225348][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.255248][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.274300][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.295137][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.327852][ T4274] device veth0_macvtap entered promiscuous mode [ 85.350295][ T4274] device veth1_macvtap entered promiscuous mode [ 85.378530][ T4286] device veth1_macvtap entered promiscuous mode [ 85.405375][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.431338][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.453341][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.473668][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.506368][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.537362][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.555442][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.585312][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.620480][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.659254][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.683224][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.720529][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.745872][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.765086][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.780653][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.792550][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.812335][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.832050][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.844243][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 85.859661][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.870034][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.886665][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.901650][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.914210][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 85.920280][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 85.926849][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 85.955365][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.975425][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.986276][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.994903][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 86.001637][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.035453][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.078003][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.094749][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.105404][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.115373][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.198486][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.231278][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.458132][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.647611][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.691570][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.712567][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.748998][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.772247][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.792776][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.804504][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.816252][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.826457][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.836145][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845023][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.853879][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.864584][ T4288] block nbd2: Receive control failed (result -32) [ 87.864742][ T4386] block nbd2: shutting down sockets [ 87.882107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.893797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.903939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.912959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.926896][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.936221][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.945337][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.954487][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.071337][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 88.082484][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 88.856755][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.864888][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.452152][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.504623][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.979539][ T4383] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.988600][ T4383] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.998185][ T4383] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.007152][ T4383] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.140059][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.152307][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.168182][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.179239][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.197447][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.213094][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.231357][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.240016][ T4383] syz.3.12 (4383) used greatest stack depth: 20240 bytes left [ 90.326643][ T4397] device syzkaller0 entered promiscuous mode [ 90.335856][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.345862][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.477663][ T4404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.493649][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.501515][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.520749][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.546357][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.559596][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570761][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.585288][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.738386][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.755403][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.807700][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.813125][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.830991][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 91.833956][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.848387][ T14] cfg80211: failed to load regulatory.db [ 91.855263][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 91.872869][ T4408] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.882436][ T4408] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.891260][ T4408] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.900057][ T4408] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.923953][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.933041][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.948976][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.958507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.972380][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 91.984123][ T4408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 92.003285][ T4408] Zero length message leads to an empty skb [ 92.048066][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.094093][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.121780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.130662][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.157758][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.206565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.660753][ T4453] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 96.981680][ T4453] netlink: 'syz.3.27': attribute type 2 has an invalid length. [ 97.333702][ T4316] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.388667][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.450600][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x48, skipping [ 98.527563][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.659880][ T4316] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 98.700262][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 98.733531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 98.950690][ T4316] usb 1-1: Product: syz [ 99.264125][ T4316] usb 1-1: Manufacturer: syz [ 99.268818][ T4316] usb 1-1: SerialNumber: syz [ 99.323754][ T4488] netlink: 'syz.2.35': attribute type 6 has an invalid length. [ 99.329145][ T4316] usb 1-1: config 0 descriptor?? [ 99.380272][ T4316] usb 1-1: can't set config #0, error -71 [ 99.440525][ T4316] usb 1-1: USB disconnect, device number 2 [ 99.448214][ T4476] random: crng reseeded on system resumption [ 99.553520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.563516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.573516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.583516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.593519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.603518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.873529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 101.893542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 101.903532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 103.285653][ T4513] device syzkaller0 entered promiscuous mode [ 105.190664][ T4550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 105.703134][ T4557] device syzkaller0 entered promiscuous mode [ 108.569602][ T4599] device syzkaller0 entered promiscuous mode [ 109.153631][ T4324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.394137][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 109.406394][ T4324] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.565837][ T4324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.725839][ T4324] usb 3-1: config 0 has no interface number 0 [ 109.896266][ T4324] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.918760][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.961038][ T4324] usb 3-1: Product: syz [ 109.991402][ T4324] usb 3-1: Manufacturer: syz [ 110.011642][ T4324] usb 3-1: SerialNumber: syz [ 110.039270][ T4324] usb 3-1: config 0 descriptor?? [ 110.077742][ T4628] process 'syz.4.90' launched './file1' with NULL argv: empty string added [ 110.087986][ T4324] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.803797][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 110.819957][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 111.421172][ T4634] sched: RT throttling activated [ 111.460465][ T4324] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 111.506147][ T4324] quatech2: probe of 3-1:0.51 failed with error -8 [ 111.730183][ T4324] usb 3-1: USB disconnect, device number 2 [ 113.545953][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.553346][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.063850][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.120176][ T4637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.617763][ T4637] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.626787][ T4637] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.636214][ T4637] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.645179][ T4637] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.079780][ T4684] netlink: 64 bytes leftover after parsing attributes in process `syz.0.107'. [ 115.303946][ T4438] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.563073][ T4438] usb 4-1: config 0 has no interfaces? [ 115.586878][ T4438] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 115.712130][ T4438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.994235][ T4438] usb 4-1: config 0 descriptor?? [ 116.905835][ T4438] usb 4-1: USB disconnect, device number 2 [ 118.992016][ T4716] device syzkaller0 entered promiscuous mode [ 119.194585][ T4438] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.420092][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 119.442888][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 119.457324][ T4438] usb 4-1: Using ep0 maxpacket: 16 [ 119.472902][ T4438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.502306][ T4438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.755683][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 119.776120][ T4438] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.942918][ T4438] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.063399][ T4438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.231749][ T4438] usb 4-1: config 0 descriptor?? [ 120.658842][ T4438] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 120.661319][ T4438] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 120.854191][ T4438] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 120.858647][ T4438] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 120.858682][ T4438] microsoft 0003:045E:07DA.0001: no inputs found [ 120.858697][ T4438] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 121.122298][ T4748] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.183901][ T4438] usb 4-1: USB disconnect, device number 3 [ 121.238801][ T4746] fido_id[4746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 121.327330][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.327771][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.637225][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.693066][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.172367][ T4727] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.181387][ T4727] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.190665][ T4727] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.200400][ T4727] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.324152][ T4438] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.561781][ T4438] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.795461][ T4438] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.233706][ T4438] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.243884][ T4438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.256544][ T4438] usb 5-1: config 0 descriptor?? [ 125.274787][ T4438] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 125.562922][ T4822] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.604211][ T4822] overlayfs: failed to look up (tracing) for ino (-66) [ 125.740911][ T4824] device syzkaller0 entered promiscuous mode [ 126.094934][ T4834] device syzkaller0 entered promiscuous mode [ 126.742562][ T4851] syz.1.149: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 126.758276][ T4851] CPU: 1 PID: 4851 Comm: syz.1.149 Not tainted syzkaller #0 [ 126.765641][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.775858][ T4851] Call Trace: [ 126.779206][ T4851] [ 126.782181][ T4851] dump_stack_lvl+0x188/0x24e [ 126.786941][ T4851] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 126.793432][ T4851] ? show_regs_print_info+0x12/0x12 [ 126.798694][ T4851] ? load_image+0x400/0x400 [ 126.803265][ T4851] ? __rcu_read_unlock+0x78/0xd0 [ 126.808245][ T4851] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 126.814728][ T4851] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 126.821365][ T4851] warn_alloc+0x242/0x330 [ 126.825761][ T4851] ? zone_watermark_ok_safe+0x270/0x270 [ 126.831372][ T4851] ? lockdep_hardirqs_on+0x94/0x140 [ 126.836629][ T4851] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.842320][ T4851] ? __vmalloc_node_range+0x106/0x13b0 [ 126.847933][ T4851] __vmalloc_node_range+0x11e/0x13b0 [ 126.853674][ T4851] ? schedule_preempt_disabled+0x20/0x20 [ 126.859462][ T4851] ? __mutex_trylock_common+0x155/0x260 [ 126.865157][ T4851] ? trace_raw_output_contention_end+0xd0/0xd0 [ 126.871384][ T4851] ? preempt_schedule_thunk+0x16/0x18 [ 126.876823][ T4851] ? __mutex_lock+0x1bf/0xaf0 [ 126.881656][ T4851] ? free_vm_area+0x50/0x50 [ 126.886212][ T4851] ? dvb_demux_do_ioctl+0x313/0x530 [ 126.891476][ T4851] ? mutex_lock_nested+0x10/0x10 [ 126.896474][ T4851] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.902159][ T4851] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.908034][ T4851] vmalloc+0x75/0x80 [ 126.911987][ T4851] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.917851][ T4851] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 126.923547][ T4851] dvb_demux_do_ioctl+0x450/0x530 [ 126.928720][ T4851] dvb_usercopy+0x191/0x2b0 [ 126.933284][ T4851] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 126.938883][ T4851] ? dvb_generic_ioctl+0xb0/0xb0 [ 126.943913][ T4851] ? dvb_demux_poll+0x210/0x210 [ 126.948825][ T4851] dvb_demux_ioctl+0x25/0x30 [ 126.953481][ T4851] __se_sys_ioctl+0xfa/0x170 [ 126.958133][ T4851] do_syscall_64+0x4c/0xa0 [ 126.962652][ T4851] ? clear_bhb_loop+0x60/0xb0 [ 126.967381][ T4851] ? clear_bhb_loop+0x60/0xb0 [ 126.972125][ T4851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.978156][ T4851] RIP: 0033:0x7ff117f9cdd9 [ 126.982634][ T4851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.002298][ T4851] RSP: 002b:00007ff118e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.010947][ T4851] RAX: ffffffffffffffda RBX: 00007ff118216180 RCX: 00007ff117f9cdd9 [ 127.018965][ T4851] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 127.026981][ T4851] RBP: 00007ff118032d69 R08: 0000000000000000 R09: 0000000000000000 [ 127.035095][ T4851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.043122][ T4851] R13: 00007ff118216218 R14: 00007ff118216180 R15: 00007fff0397e7f8 [ 127.051182][ T4851] [ 127.054279][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.060978][ T4851] Mem-Info: [ 127.065023][ T4851] active_anon:8655 inactive_anon:0 isolated_anon:0 [ 127.065023][ T4851] active_file:4246 inactive_file:39970 isolated_file:0 [ 127.065023][ T4851] unevictable:766 dirty:195 writeback:0 [ 127.065023][ T4851] slab_reclaimable:20687 slab_unreclaimable:93168 [ 127.065023][ T4851] mapped:32646 shmem:4234 pagetables:642 [ 127.065023][ T4851] sec_pagetables:0 bounce:0 [ 127.065023][ T4851] kernel_misc_reclaimable:0 [ 127.065023][ T4851] free:1336827 free_pcp:11786 free_cma:0 [ 127.110304][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.116613][ T4851] Node 0 active_anon:34620kB inactive_anon:0kB active_file:16984kB inactive_file:159676kB unevictable:1528kB isolated(anon):0kB isolated(file):0kB mapped:130584kB dirty:780kB writeback:0kB shmem:15400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10728kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no [ 127.149288][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.155425][ T4851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.185990][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.192129][ T4851] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.219332][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.262873][ T4851] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 127.269049][ T4851] Node 0 DMA32 free:1442216kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:34620kB inactive_anon:0kB active_file:16984kB inactive_file:159676kB unevictable:1528kB writepending:780kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:24748kB local_pcp:11652kB free_cma:0kB [ 127.299678][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.305825][ T4851] lowmem_reserve[]: 0 0 1 1 1 [ 127.310797][ T4851] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.337684][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.343864][ T4851] lowmem_reserve[]: 0 0 0 0 0 [ 127.348881][ T4851] Node 1 Normal free:3889732kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22596kB local_pcp:11936kB free_cma:0kB [ 127.378485][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.384784][ T4851] lowmem_reserve[]: 0 0 0 0 0 [ 127.389763][ T4851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.403348][ T4851] Node 0 DMA32: 342*4kB (U) 30*8kB (UME) 872*16kB (UM) 373*32kB (UM) 91*64kB (UM) 45*128kB (UME) 1*256kB (M) 2*512kB (ME) 1*1024kB (M) 2*2048kB (ME) 341*4096kB (UM) = 1442216kB [ 127.424324][ T4851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.436606][ T4851] Node 1 Normal: 243*4kB (UME) 39*8kB (UME) 42*16kB (UE) 31*32kB (UME) 15*64kB (UME) 6*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889732kB [ 127.455462][ T4851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.465205][ T4851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.474663][ T4851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.484398][ T4851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.493837][ T4851] 48450 total pagecache pages [ 127.498648][ T4851] 0 pages in swap cache [ 127.502918][ T4851] Free swap = 124996kB [ 127.507223][ T4851] Total swap = 124996kB [ 127.511471][ T4851] 2097051 pages RAM [ 127.515552][ T4851] 0 pages HighMem/MovableOnly [ 127.520298][ T4851] 415209 pages reserved [ 127.524589][ T4851] 0 pages cma reserved [ 127.743626][ T4319] usb 5-1: USB disconnect, device number 2 [ 127.962630][ T4865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.157'. [ 128.019499][ T4865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.157'. [ 128.113863][ T4316] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.313793][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 128.321446][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.413900][ T4873] device syzkaller0 entered promiscuous mode [ 128.528238][ T4316] usb 4-1: config 4 interface 0 has no altsetting 0 [ 128.538232][ T4316] usb 4-1: string descriptor 0 read error: -22 [ 128.544560][ T4316] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 128.553860][ T4316] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 128.606063][ T4316] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 128.785336][ T4316] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.080130][ T4288] Bluetooth: Wrong link type (-22) [ 130.086782][ T4316] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 130.095016][ T4316] usb 4-1: media controller created [ 130.115060][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.137842][ T4316] zl10353_read_register: readreg error (reg=127, ret==0) [ 130.197597][ T4316] usb 4-1: USB disconnect, device number 4 [ 130.903599][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.024220][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.113654][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 131.120760][ T4316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.161397][ T4316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.198925][ T4316] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.215890][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.230835][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.248036][ T4316] usb 1-1: Product: syz [ 131.252438][ T4316] usb 1-1: Manufacturer: syz [ 131.258676][ T4316] usb 1-1: SerialNumber: syz [ 131.305555][ T4931] device syzkaller0 entered promiscuous mode [ 131.382626][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.462097][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.503335][ T4316] usb 1-1: 0:2 : does not exist [ 131.561267][ T4316] usb 1-1: USB disconnect, device number 3 [ 131.606048][ T4263] udevd[4263]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.078772][ T4944] misc userio: Invalid payload size [ 132.085755][ T4944] misc userio: No port type given on /dev/userio [ 132.796972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803713][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.053745][ T4319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.106056][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.122184][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.130220][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.139000][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.146888][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.154566][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.253703][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 133.262136][ T4319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.295029][ T4319] usb 4-1: config 4 interface 0 has no altsetting 0 [ 133.307576][ T4319] usb 4-1: string descriptor 0 read error: -22 [ 133.323647][ T4319] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 133.332748][ T4319] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 133.385961][ T4319] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 133.412115][ T4319] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.438600][ T4319] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 133.446848][ T4319] usb 4-1: media controller created [ 133.477714][ T4319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.777969][ T4962] chnl_net:caif_netlink_parms(): no params data found [ 133.965212][ T4287] Bluetooth: Wrong link type (-22) [ 134.803019][ T4319] usb 4-1: USB disconnect, device number 5 [ 134.825889][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.843876][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.869461][ T4962] device bridge_slave_0 entered promiscuous mode [ 134.899121][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.906913][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.916337][ T4962] device bridge_slave_1 entered promiscuous mode [ 135.115656][ T4962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.195877][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 135.266265][ T4962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.431004][ T4962] team0: Port device team_slave_0 added [ 135.462226][ T4962] team0: Port device team_slave_1 added [ 135.832976][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.851528][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.977998][ T4962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.060132][ T5031] binder: BINDER_SET_CONTEXT_MGR already set [ 136.130145][ T5031] binder: 5030:5031 ioctl 4018620d 200000004a80 returned -16 [ 136.178297][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.191722][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.316132][ T4962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.385704][ T9] device hsr_slave_0 left promiscuous mode [ 136.412455][ T9] device hsr_slave_1 left promiscuous mode [ 136.437347][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.469669][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.505163][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.561985][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.604507][ T9] device bridge_slave_1 left promiscuous mode [ 136.635277][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.666080][ T9] device bridge_slave_0 left promiscuous mode [ 136.684920][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.985675][ T9] device veth1_macvtap left promiscuous mode [ 137.052627][ T9] device veth0_macvtap left promiscuous mode [ 137.123048][ T9] device veth1_vlan left promiscuous mode [ 137.203021][ T9] device veth0_vlan left promiscuous mode [ 137.313990][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 138.103872][ T4438] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 138.295197][ T4438] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.323930][ T4438] usb 1-1: config 0 has no interfaces? [ 138.342759][ T4438] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 138.390970][ T4438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.419706][ T4438] usb 1-1: Product: syz [ 138.439866][ T4438] usb 1-1: Manufacturer: syz [ 138.453861][ T4438] usb 1-1: SerialNumber: syz [ 138.503761][ T4438] usb 1-1: config 0 descriptor?? [ 138.724276][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.750408][ T4316] usb 1-1: USB disconnect, device number 4 [ 138.933660][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 138.943137][ T4321] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 138.958371][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.968195][ T4321] usb 5-1: Product: syz [ 138.973113][ T4321] usb 5-1: Manufacturer: syz [ 138.985313][ T4321] usb 5-1: SerialNumber: syz [ 138.991080][ T9] team0 (unregistering): Port device team_slave_1 removed [ 139.003583][ T4321] usb 5-1: config 0 descriptor?? [ 139.043083][ T9] team0 (unregistering): Port device team_slave_0 removed [ 139.086450][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.133817][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.355388][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 139.416593][ T4321] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 139.429873][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.440547][ T4321] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 139.449045][ T4321] usb 5-1: media controller created [ 139.486827][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.498921][ T9] bond0 (unregistering): Released all slaves [ 139.602073][ T5062] netlink: 'syz.3.210': attribute type 13 has an invalid length. [ 139.611351][ T5062] netlink: 164 bytes leftover after parsing attributes in process `syz.3.210'. [ 139.621650][ T5062] syz_tun: refused to change device tx_queue_len [ 139.640815][ T5076] device syzkaller0 entered promiscuous mode [ 139.757985][ T4962] device hsr_slave_0 entered promiscuous mode [ 139.802689][ T4962] device hsr_slave_1 entered promiscuous mode [ 139.817447][ T4962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.861975][ T4962] Cannot create hsr debugfs directory [ 140.074045][ T4321] zl10353_read_register: readreg error (reg=127, ret==0) [ 140.088597][ T4321] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 140.097837][ T4321] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 140.151210][ T4321] usb 5-1: USB disconnect, device number 3 [ 140.233847][ T4321] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 140.683771][ T5109] device syzkaller0 entered promiscuous mode [ 141.323651][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.433575][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 141.513709][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 141.522015][ T26] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 141.530576][ T26] usb 3-1: config 0 has no interface number 0 [ 141.536928][ T26] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 141.549489][ T26] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 141.558924][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.567247][ T26] usb 3-1: Product: syz [ 141.571525][ T26] usb 3-1: Manufacturer: syz [ 141.576407][ T26] usb 3-1: SerialNumber: syz [ 141.590644][ T26] usb 3-1: config 0 descriptor?? [ 141.597582][ T5115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.814847][ T5115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.802682][ T4288] block nbd4: Receive control failed (result -32) [ 142.807265][ T5124] block nbd4: shutting down sockets [ 142.837811][ T5096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.895485][ T4962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.964523][ T4962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.025576][ T4962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.111275][ T4962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.182588][ T5129] device syzkaller0 entered promiscuous mode [ 143.342582][ T26] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 143.370757][ T26] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 143.434416][ T26] asix: probe of 3-1:0.188 failed with error -71 [ 143.448660][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.462906][ T26] usb 3-1: USB disconnect, device number 3 [ 143.495852][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.511849][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.540620][ T4962] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.572086][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.599475][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.629787][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.637066][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.660945][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.692213][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.705062][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.725359][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.732557][ T4441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.756384][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.789862][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.909697][ T5142] device syzkaller0 entered promiscuous mode [ 143.962708][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.007870][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.035555][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.059702][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.088070][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.112981][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.139148][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.169418][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.187762][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.714255][ T4320] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.094515][ T4320] usb 4-1: Using ep0 maxpacket: 32 [ 145.160190][ T4320] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 145.275184][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.338682][ T4320] usb 4-1: config 0 descriptor?? [ 145.552394][ T4320] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 145.578167][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.609563][ T4320] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 145.628135][ T4320] usb 4-1: media controller created [ 145.661460][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.178434][ T4320] az6027: usb out operation failed. (-71) [ 146.198487][ T4320] stb0899_attach: Driver disabled by Kconfig [ 146.211954][ T4320] az6027: no front-end attached [ 146.211954][ T4320] [ 146.231416][ T4320] az6027: usb out operation failed. (-71) [ 146.260190][ T4320] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 146.303086][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 146.351016][ T4320] dvb-usb: schedule remote query interval to 400 msecs. [ 146.359825][ T4320] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 146.393306][ T4320] usb 4-1: USB disconnect, device number 6 [ 146.462728][ T4320] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 147.428975][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.628412][ T4472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.691054][ T5166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.777375][ T4472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.889262][ T4472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.996294][ T4472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.464680][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.472350][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.519332][ T4962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.739922][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.944807][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 148.952425][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.954333][ T4316] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.987623][ T22] usb 3-1: config 4 interface 0 has no altsetting 0 [ 149.028325][ T22] usb 3-1: string descriptor 0 read error: -22 [ 149.052358][ T22] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 149.067164][ T22] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 149.102263][ T22] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 149.121829][ T22] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.132887][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.143413][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.151606][ T22] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 149.151633][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.167004][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.174890][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.174898][ T22] usb 3-1: media controller created [ 149.187988][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.195506][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 149.215756][ T4316] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 149.225039][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.242103][ T4316] usb 1-1: config 0 descriptor?? [ 149.278236][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.454273][ T4316] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 149.485836][ T4316] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.527303][ T4316] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 149.548614][ T22] zl10353_read_register: readreg error (reg=127, ret==0) [ 149.575052][ T4316] usb 1-1: media controller created [ 149.639429][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.736292][ T22] usb 3-1: USB disconnect, device number 4 [ 149.927419][ T4316] az6027: usb out operation failed. (-71) [ 149.939686][ T4316] stb0899_attach: Driver disabled by Kconfig [ 149.946343][ T4316] az6027: no front-end attached [ 149.946343][ T4316] [ 149.979564][ T4316] az6027: usb out operation failed. (-71) [ 150.005820][ T4316] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 150.054997][ T4316] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 150.086499][ T4316] dvb-usb: schedule remote query interval to 400 msecs. [ 150.103828][ T4316] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 150.154103][ T4316] usb 1-1: USB disconnect, device number 5 [ 150.246719][ T4316] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 150.384077][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 150.399866][ T5259] device syzkaller0 entered promiscuous mode [ 150.711645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.731013][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.806449][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.827560][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.849802][ T5234] device bridge_slave_0 entered promiscuous mode [ 150.868966][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.885401][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.910936][ T5234] device bridge_slave_1 entered promiscuous mode [ 151.054799][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.064556][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.077554][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.099532][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.120906][ T4962] device veth0_vlan entered promiscuous mode [ 151.274684][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 151.315603][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.414156][ T5285] device syzkaller0 entered promiscuous mode [ 152.318746][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.408416][ T4962] device veth1_vlan entered promiscuous mode [ 152.463887][ T4472] device hsr_slave_0 left promiscuous mode [ 152.478065][ T4472] device hsr_slave_1 left promiscuous mode [ 152.495296][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.511673][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.534601][ T4472] device bridge_slave_1 left promiscuous mode [ 152.540945][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.604203][ T4472] device bridge_slave_0 left promiscuous mode [ 152.620745][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.750091][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.954335][ T4320] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.963833][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 152.974363][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.991898][ T26] usb 1-1: config 4 interface 0 has no altsetting 0 [ 153.002632][ T26] usb 1-1: string descriptor 0 read error: -22 [ 153.017831][ T26] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 153.036404][ T26] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 153.071949][ T26] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 153.102818][ T26] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 153.140619][ T26] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 153.153597][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 153.163791][ T26] usb 1-1: media controller created [ 153.168721][ T4320] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 153.196356][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.207539][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.231577][ T4320] usb 5-1: config 0 descriptor?? [ 153.354101][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 153.476850][ T4320] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 153.492591][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.502923][ T4320] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 153.511014][ T4320] usb 5-1: media controller created [ 153.545144][ T26] zl10353_read_register: readreg error (reg=127, ret==0) [ 153.562841][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.642095][ T26] usb 1-1: USB disconnect, device number 6 [ 153.820326][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 153.867616][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 153.886943][ T4320] az6027: usb out operation failed. (-71) [ 153.897425][ T4320] stb0899_attach: Driver disabled by Kconfig [ 153.911032][ T4320] az6027: no front-end attached [ 153.911032][ T4320] [ 153.919682][ T4320] az6027: usb out operation failed. (-71) [ 153.932868][ T4320] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 153.941118][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.955595][ T4320] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 153.980230][ T4320] dvb-usb: schedule remote query interval to 400 msecs. [ 153.991783][ T4320] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 154.010687][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.037066][ T4320] usb 5-1: USB disconnect, device number 4 [ 154.146434][ T4320] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 154.173758][ T5326] syz.0.271 sent an empty control message without MSG_MORE. [ 154.416064][ T4472] bond0 (unregistering): Released all slaves [ 154.700387][ T5234] team0: Port device team_slave_0 added [ 154.723809][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.737260][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.747824][ T5234] team0: Port device team_slave_1 added [ 154.757387][ T4962] device veth0_macvtap entered promiscuous mode [ 154.806035][ T4962] device veth1_macvtap entered promiscuous mode [ 154.880126][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.900664][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.969964][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.025842][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.032896][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.123226][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.150165][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.180630][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.241593][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.276539][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.294177][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.315356][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.342478][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.381297][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.416885][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.434117][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 155.469112][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.531919][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.552173][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.583061][ T4962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.602577][ T4962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.617346][ T4962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.637189][ T4962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.699941][ T5234] device hsr_slave_0 entered promiscuous mode [ 155.715159][ T5234] device hsr_slave_1 entered promiscuous mode [ 155.731043][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.743647][ T5234] Cannot create hsr debugfs directory [ 155.781945][ T5346] device syzkaller0 entered promiscuous mode [ 156.356208][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.392732][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.451376][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.462579][ T5361] capability: warning: `syz.0.280' uses 32-bit capabilities (legacy support in use) [ 156.490768][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.520355][ T5361] program syz.0.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.523450][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.546637][ T4287] Bluetooth: Wrong link type (-22) [ 156.557834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.832227][ T5369] device syzkaller0 entered promiscuous mode [ 157.208528][ T5380] device syzkaller0 entered promiscuous mode [ 157.513637][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 160.028576][ T5234] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.301972][ T5234] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.569660][ T5234] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.716368][ T5234] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.935939][ T5400] syz.0.293 uses obsolete (PF_INET,SOCK_PACKET) [ 161.283581][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.297285][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.334568][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.392097][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.523862][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 161.531113][ T26] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 161.551892][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.560682][ T26] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.653581][ T26] usb 6-1: config 0 interface 0 has no altsetting 0 [ 161.663393][ T26] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 161.694130][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.713048][ T26] usb 6-1: Product: syz [ 161.723190][ T26] usb 6-1: Manufacturer: syz [ 161.733356][ T26] usb 6-1: SerialNumber: syz [ 161.740989][ T26] usb 6-1: config 0 descriptor?? [ 161.826298][ T26] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 161.857811][ T5414] bridge0: port 3(macvlan2) entered blocking state [ 161.866545][ T5414] bridge0: port 3(macvlan2) entered disabled state [ 161.888406][ T5414] device macvlan2 entered promiscuous mode [ 162.027659][ T26] snd_usb_toneport 6-1:0.0: set_interface failed [ 162.068173][ T26] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 162.078300][ T26] snd_usb_toneport: probe of 6-1:0.0 failed with error -71 [ 162.096495][ T26] usb 6-1: USB disconnect, device number 2 [ 162.106403][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.136997][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.162944][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.170189][ T4472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.217961][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.254840][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.265482][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.279499][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.286710][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.296444][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.315744][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.338102][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.396241][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.451569][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.489562][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.567148][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.619434][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.653195][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.697733][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.765430][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.800438][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.088442][ T5423] device syzkaller0 entered promiscuous mode [ 163.102179][ T5442] QAT: Device 198 not found [ 163.431661][ T5445] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.460266][ T5445] overlayfs: failed to look up (tracing) for ino (-66) [ 164.103657][ T4262] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.914137][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.921697][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.167763][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.818553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.880517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.170701][ T4262] usb 5-1: Using ep0 maxpacket: 16 [ 166.262307][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.314024][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.469783][ T5234] device veth0_vlan entered promiscuous mode [ 166.554206][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.601468][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.835256][ T5234] device veth1_vlan entered promiscuous mode [ 166.959872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.478248][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.487365][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.496018][ T4262] usb 5-1: device descriptor read/all, error -71 [ 167.535088][ T5234] device veth0_macvtap entered promiscuous mode [ 167.556492][ T5234] device veth1_macvtap entered promiscuous mode [ 167.574557][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.586209][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.597713][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.608415][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.620194][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.628202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.664395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.685401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.710650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.776555][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.813732][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.844411][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.873207][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.900630][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.951790][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.984581][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.024950][ T5234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.043524][ T5234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.073263][ T5234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.101365][ T5234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.183516][ T4262] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.383623][ T4262] usb 5-1: Using ep0 maxpacket: 8 [ 168.402503][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.414700][ T4262] usb 5-1: config 4 interface 0 has no altsetting 0 [ 168.448388][ T4262] usb 5-1: string descriptor 0 read error: -22 [ 168.477691][ T4262] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 168.503677][ T4262] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 168.546288][ T4262] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 168.553754][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.589814][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.599639][ T4262] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.625394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.643123][ T4262] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 168.672123][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.680186][ T4262] usb 5-1: media controller created [ 168.734465][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.751051][ T4287] Bluetooth: Wrong link type (-22) [ 168.767047][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.777647][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.816955][ T4262] zl10353_read_register: readreg error (reg=127, ret==0) [ 168.826904][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.921322][ T4262] usb 5-1: USB disconnect, device number 6 [ 171.051303][ T5527] program syz.5.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.063583][ T4324] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.253852][ T4324] usb 1-1: Using ep0 maxpacket: 16 [ 171.262207][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.283942][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.313541][ T4324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.338924][ T4324] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.348614][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.359959][ T4324] usb 1-1: config 0 descriptor?? [ 171.443775][ T4262] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.638168][ T4262] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.659996][ T4262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.700649][ T4262] usb 3-1: New USB device found, idVendor=0525, idProduct=9da1, bcdDevice= 0.40 [ 171.711425][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.726238][ T4262] usb 3-1: Product: syz [ 171.730554][ T4262] usb 3-1: Manufacturer: syz [ 171.739653][ T4262] usb 3-1: SerialNumber: syz [ 171.776475][ T4324] usbhid 1-1:0.0: can't add hid device: -71 [ 171.782545][ T4324] usbhid: probe of 1-1:0.0 failed with error -71 [ 171.823651][ T4324] usb 1-1: USB disconnect, device number 7 [ 172.433570][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.633557][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 172.640991][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.740960][ T26] usb 6-1: config 4 interface 0 has no altsetting 0 [ 174.652117][ T26] usb 6-1: string descriptor 0 read error: -22 [ 174.684269][ T26] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 174.717425][ T26] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 174.809127][ T4262] cdc_ncm 3-1:1.0: bind() failure [ 174.872536][ T5569] misc userio: Invalid payload size [ 174.878434][ T5569] misc userio: No port type given on /dev/userio [ 175.083183][ T4262] usbtest: probe of 3-1:1.1 failed with error -71 [ 175.092656][ T4262] usb 3-1: USB disconnect, device number 5 [ 175.108398][ T26] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 175.192024][ T26] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.206284][ T26] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 175.215042][ T26] usb 6-1: media controller created [ 175.258892][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.319593][ T26] zl10353_read_register: readreg error (reg=127, ret==0) [ 175.369146][ T26] usb 6-1: USB disconnect, device number 3 [ 175.659609][ T5588] binder: 5587:5588 unknown command 0 [ 175.659633][ T5588] binder: 5587:5588 ioctl c0306201 200000000640 returned -22 [ 176.053585][ T4324] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 176.108676][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 176.122707][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 176.303776][ T4324] usb 6-1: Using ep0 maxpacket: 16 [ 176.309986][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.310128][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.310173][ T4324] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.310294][ T4324] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.310361][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.343843][ T4324] usb 6-1: config 0 descriptor?? [ 176.790059][ T4324] usbhid 6-1:0.0: can't add hid device: -71 [ 176.790163][ T4324] usbhid: probe of 6-1:0.0 failed with error -71 [ 176.792204][ T4324] usb 6-1: USB disconnect, device number 4 [ 178.833588][ T4262] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.925316][ T5629] program syz.0.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.493747][ T4262] usb 6-1: Using ep0 maxpacket: 8 [ 179.505864][ T4262] usb 6-1: unable to get BOS descriptor or descriptor too short [ 179.542235][ T4262] usb 6-1: config 4 interface 0 has no altsetting 0 [ 179.564576][ T4262] usb 6-1: string descriptor 0 read error: -22 [ 179.582463][ T4262] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 179.602225][ T4262] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 179.618618][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 179.653073][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 179.678163][ T4262] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 179.714052][ T4262] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 179.739225][ T4262] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 179.764530][ T4262] usb 6-1: media controller created [ 179.821879][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.884274][ T4287] Bluetooth: Wrong link type (-22) [ 179.924683][ T4262] zl10353_read_register: readreg error (reg=127, ret==0) [ 179.992126][ T4262] usb 6-1: USB disconnect, device number 5 [ 180.709211][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 180.764540][ T5682] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.773392][ T5682] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.782223][ T5682] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.791042][ T5682] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.083969][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 181.123677][ T4262] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.159245][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.306905][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 181.323781][ T4262] usb 5-1: Using ep0 maxpacket: 16 [ 181.331457][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.343144][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.358866][ T4262] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.372515][ T4318] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 181.375481][ T4262] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.396654][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.410136][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.413751][ T4318] usb 4-1: Product: syz [ 181.431431][ T4318] usb 4-1: Manufacturer: syz [ 181.436880][ T4318] usb 4-1: SerialNumber: syz [ 181.450861][ T4262] usb 5-1: config 0 descriptor?? [ 181.467627][ T4318] usb 4-1: config 0 descriptor?? [ 181.690198][ T4318] usb 4-1: ignoring: probably an ADSL modem [ 181.872101][ T4262] usbhid 5-1:0.0: can't add hid device: -71 [ 181.880419][ T4262] usbhid: probe of 5-1:0.0 failed with error -71 [ 181.914960][ T4262] usb 5-1: USB disconnect, device number 7 [ 182.098051][ T4318] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 182.301659][ T4317] usb 4-1: USB disconnect, device number 7 [ 182.533609][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.560063][ T5727] 9pnet_fd: Insufficient options for proto=fd [ 182.724159][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 182.731940][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.776442][ T4318] usb 3-1: config 4 interface 0 has no altsetting 0 [ 182.974289][ T4318] usb 3-1: string descriptor 0 read error: -22 [ 182.980619][ T4318] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 183.003498][ T4318] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 183.788116][ T4318] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 183.840194][ T4318] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.926905][ T4318] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 183.936688][ T4318] usb 3-1: media controller created [ 183.956204][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.990260][ T4287] Bluetooth: Wrong link type (-22) [ 184.009731][ T4318] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.059813][ T5756] vivid-007: ================= START STATUS ================= [ 184.073015][ T5756] vivid-007: Enable Output Cropping: true [ 184.083074][ T5756] vivid-007: Enable Output Composing: true [ 184.105838][ T5756] vivid-007: Enable Output Scaler: true [ 184.121891][ T5756] vivid-007: Tx RGB Quantization Range: Automatic [ 184.140571][ T5756] vivid-007: Transmit Mode: HDMI [ 184.150713][ T5756] vivid-007: Display Present: true inactive [ 184.171045][ T5756] vivid-007: Hotplug Present: 0x00000001 [ 184.177176][ T5756] vivid-007: RxSense Present: 0x00000001 [ 184.190122][ T5756] vivid-007: EDID Present: 0x00000001 [ 184.203665][ T5756] vivid-007: ================== END STATUS ================== [ 184.204605][ T4318] usb 3-1: USB disconnect, device number 6 [ 184.538282][ T5769] 9pnet_fd: Insufficient options for proto=fd [ 185.376167][ T5778] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 185.501104][ T5778] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 186.031418][ T5792] device syzkaller0 entered promiscuous mode [ 187.613618][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.813673][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 187.821807][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 187.901330][ T7] usb 6-1: config 4 interface 0 has no altsetting 0 [ 187.943930][ T7] usb 6-1: string descriptor 0 read error: -22 [ 187.981832][ T7] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 188.028714][ T7] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 188.062876][ T7] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 188.115481][ T7] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.167160][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 188.197306][ T7] usb 6-1: media controller created [ 188.256547][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.268689][ T4287] Bluetooth: Wrong link type (-22) [ 188.313088][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 188.408224][ T7] usb 6-1: USB disconnect, device number 6 [ 188.685583][ T5853] device syzkaller0 entered promiscuous mode [ 189.346221][ T5874] syz.5.424 (5874) used obsolete PPPIOCDETACH ioctl [ 190.713051][ T5883] kvm [5882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100004f93 [ 190.779397][ T5883] kvm [5882]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x2176 [ 191.106919][ T5910] 9pnet_fd: Insufficient options for proto=fd [ 191.142673][ T5911] device syzkaller0 entered promiscuous mode [ 191.309665][ T27] audit: type=1326 audit(1777634885.532:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.394178][ T27] audit: type=1326 audit(1777634885.562:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.497199][ T27] audit: type=1326 audit(1777634885.562:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.610585][ T27] audit: type=1326 audit(1777634885.562:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.733527][ T27] audit: type=1326 audit(1777634885.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.789558][ T27] audit: type=1326 audit(1777634885.582:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.869041][ T27] audit: type=1326 audit(1777634885.582:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 191.895621][ T27] audit: type=1326 audit(1777634885.582:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.440" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fca19cdd9 code=0x7ffc0000 [ 192.763595][ T4318] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.963666][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 192.974926][ T4318] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 193.033765][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.052295][ T4318] usb 4-1: Product: syz [ 193.069218][ T4318] usb 4-1: Manufacturer: syz [ 193.079345][ T4318] usb 4-1: SerialNumber: syz [ 193.096027][ T4318] usb 4-1: config 0 descriptor?? [ 193.330639][ T4318] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 008 [ 193.892425][ T6011] misc userio: Invalid payload size [ 193.953292][ T6012] i2c i2c-1: failure reading data [ 194.239414][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246065][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.214365][ T6045] netlink: 72 bytes leftover after parsing attributes in process `syz.4.483'. [ 195.339897][ T6048] device syzkaller0 entered promiscuous mode [ 195.790326][ T7] usb 4-1: USB disconnect, device number 8 [ 196.058365][ T6069] misc userio: No port type given on /dev/userio [ 197.069239][ T6082] netlink: 72 bytes leftover after parsing attributes in process `syz.5.495'. [ 197.109734][ T6085] device syzkaller0 entered promiscuous mode [ 197.153581][ T4324] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.347852][ T4324] usb 4-1: Using ep0 maxpacket: 32 [ 197.356450][ T4324] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 197.387353][ T4324] usb 4-1: config 2 has no interface number 0 [ 197.403600][ T4324] usb 4-1: config 2 interface 88 has no altsetting 0 [ 197.427083][ T4324] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 197.447665][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.469215][ T4324] usb 4-1: Product: syz [ 197.489397][ T4324] usb 4-1: Manufacturer: syz [ 197.499542][ T4324] usb 4-1: SerialNumber: syz [ 198.059147][ T4324] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 198.070057][ T4324] asix: probe of 4-1:2.88 failed with error -71 [ 198.080173][ T4324] usb 4-1: USB disconnect, device number 9 [ 199.295204][ T6122] device syzkaller0 entered promiscuous mode [ 199.325492][ T6124] netlink: 72 bytes leftover after parsing attributes in process `syz.5.508'. [ 200.613610][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.938516][ T4317] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 201.263566][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.302925][ T4317] usb 5-1: Product: syz [ 201.318348][ T4317] usb 5-1: Manufacturer: syz [ 201.332048][ T4317] usb 5-1: SerialNumber: syz [ 201.376401][ T4317] usb 5-1: config 0 descriptor?? [ 201.463827][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 201.470042][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.608492][ T4317] usb 5-1: ignoring: probably an ADSL modem [ 201.663753][ T4318] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.874175][ T4318] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 201.900762][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.958283][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 202.007775][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.024984][ T4317] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 202.071766][ T4317] usb 5-1: USB disconnect, device number 8 [ 202.103403][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 202.287073][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.472821][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 202.649293][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.733940][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 202.782929][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.868984][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 202.944631][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.983511][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 203.003320][ T6171] netlink: 72 bytes leftover after parsing attributes in process `syz.2.524'. [ 203.030512][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.073573][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 203.104265][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.154944][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 203.193723][ T4318] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 203.202852][ T4318] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 203.253537][ T4318] usb 1-1: Product: syz [ 203.282260][ T4318] usb 1-1: Manufacturer: syz [ 203.300114][ T4318] usb 1-1: SerialNumber: syz [ 203.317929][ T4318] usb 1-1: config 0 descriptor?? [ 203.347133][ T6179] device syzkaller0 entered promiscuous mode [ 203.532952][ T4324] usb 1-1: USB disconnect, device number 8 [ 203.996351][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.533'. [ 204.086943][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.533'. [ 205.883185][ T6212] netlink: 72 bytes leftover after parsing attributes in process `syz.2.537'. [ 206.476731][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.484206][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.000542][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.055422][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.527817][ T6200] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.536839][ T6200] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.546150][ T6200] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.555154][ T6200] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.742933][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'. [ 207.833304][ T6230] batman_adv: batadv0: Adding interface: gretap1 [ 207.848244][ T6230] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.876294][ T6230] batman_adv: batadv0: Interface activated: gretap1 [ 208.122909][ T6234] device syzkaller0 entered promiscuous mode [ 208.412233][ T6253] netlink: 72 bytes leftover after parsing attributes in process `syz.0.548'. [ 212.574600][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'. [ 213.659372][ T6309] netlink: 'syz.3.564': attribute type 7 has an invalid length. [ 213.669139][ T6309] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.564'. [ 214.637643][ T6323] netlink: 72 bytes leftover after parsing attributes in process `syz.4.571'. [ 214.842123][ T6333] device syzkaller0 entered promiscuous mode [ 215.050233][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 217.278127][ T6381] device syzkaller0 entered promiscuous mode [ 220.021051][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'. [ 220.296272][ T6408] misc userio: Invalid payload size [ 220.302254][ T6408] misc userio: No port type given on /dev/userio [ 222.768808][ T6432] device syzkaller0 entered promiscuous mode [ 222.920289][ T6438] 9pnet_fd: Insufficient options for proto=fd [ 223.414514][ T6457] misc userio: Invalid payload size [ 223.420522][ T6457] misc userio: No port type given on /dev/userio [ 223.442302][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'. [ 226.127951][ T6476] 9pnet_fd: Insufficient options for proto=fd [ 226.164646][ T6478] program syz.4.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.279913][ T6484] device syzkaller0 entered promiscuous mode [ 226.721037][ T27] audit: type=1326 audit(1777634920.942:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 227.530540][ T27] audit: type=1326 audit(1777634920.942:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 227.718688][ T27] audit: type=1326 audit(1777634920.942:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 227.817937][ T6504] misc userio: Invalid payload size [ 227.824135][ T6504] misc userio: No port type given on /dev/userio [ 228.493666][ T27] audit: type=1326 audit(1777634920.942:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 228.517983][ T27] audit: type=1326 audit(1777634920.942:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 228.542504][ T27] audit: type=1326 audit(1777634920.942:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 228.583892][ T27] audit: type=1326 audit(1777634920.942:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 228.703162][ T27] audit: type=1326 audit(1777634920.942:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 228.872439][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.633'. [ 228.915263][ T27] audit: type=1326 audit(1777634920.942:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.4.627" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7dab19cdd9 code=0x7ffc0000 [ 230.055300][ T6524] 9pnet_fd: Insufficient options for proto=fd [ 230.224021][ T6529] syz.4.635: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 230.238636][ T6529] CPU: 0 PID: 6529 Comm: syz.4.635 Not tainted syzkaller #0 [ 230.245981][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.256089][ T6529] Call Trace: [ 230.259412][ T6529] [ 230.262383][ T6529] dump_stack_lvl+0x188/0x24e [ 230.267123][ T6529] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 230.273588][ T6529] ? show_regs_print_info+0x12/0x12 [ 230.278852][ T6529] ? load_image+0x400/0x400 [ 230.283509][ T6529] ? __rcu_read_unlock+0x78/0xd0 [ 230.288489][ T6529] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 230.294958][ T6529] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 230.301525][ T6529] warn_alloc+0x242/0x330 [ 230.305914][ T6529] ? finish_task_switch+0x265/0x8f0 [ 230.311172][ T6529] ? zone_watermark_ok_safe+0x270/0x270 [ 230.316804][ T6529] __vmalloc_node_range+0x11e/0x13b0 [ 230.322141][ T6529] ? __mutex_trylock_common+0x155/0x260 [ 230.327824][ T6529] ? trace_raw_output_contention_end+0xd0/0xd0 [ 230.334031][ T6529] ? rcu_is_watching+0x11/0xa0 [ 230.338853][ T6529] ? __mutex_lock+0x1ab/0xaf0 [ 230.343587][ T6529] ? lock_chain_count+0x20/0x20 [ 230.348511][ T6529] ? free_vm_area+0x50/0x50 [ 230.353069][ T6529] ? dvb_demux_do_ioctl+0x313/0x530 [ 230.358320][ T6529] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 230.364014][ T6529] ? mutex_lock_nested+0x10/0x10 [ 230.369013][ T6529] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 230.374914][ T6529] vmalloc+0x75/0x80 [ 230.378869][ T6529] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 230.384742][ T6529] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 230.390613][ T6529] dvb_demux_do_ioctl+0x450/0x530 [ 230.395705][ T6529] dvb_usercopy+0x191/0x2b0 [ 230.400265][ T6529] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 230.405866][ T6529] ? dvb_generic_ioctl+0xb0/0xb0 [ 230.410875][ T6529] ? dvb_demux_poll+0x210/0x210 [ 230.415792][ T6529] dvb_demux_ioctl+0x25/0x30 [ 230.420437][ T6529] __se_sys_ioctl+0xfa/0x170 [ 230.425144][ T6529] do_syscall_64+0x4c/0xa0 [ 230.429647][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 230.434367][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 230.439093][ T6529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.445034][ T6529] RIP: 0033:0x7f7dab19cdd9 [ 230.449499][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.469156][ T6529] RSP: 002b:00007f7dac0c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.477624][ T6529] RAX: ffffffffffffffda RBX: 00007f7dab416180 RCX: 00007f7dab19cdd9 [ 230.485643][ T6529] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 230.493694][ T6529] RBP: 00007f7dab232d69 R08: 0000000000000000 R09: 0000000000000000 [ 230.501709][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.509720][ T6529] R13: 00007f7dab416218 R14: 00007f7dab416180 R15: 00007fff17288fd8 [ 230.517761][ T6529] [ 230.521445][ T6529] Mem-Info: [ 230.524805][ T6529] active_anon:12617 inactive_anon:147 isolated_anon:0 [ 230.524805][ T6529] active_file:4314 inactive_file:40020 isolated_file:0 [ 230.524805][ T6529] unevictable:768 dirty:120 writeback:0 [ 230.524805][ T6529] slab_reclaimable:21053 slab_unreclaimable:93534 [ 230.524805][ T6529] mapped:33967 shmem:7093 pagetables:825 [ 230.524805][ T6529] sec_pagetables:0 bounce:0 [ 230.524805][ T6529] kernel_misc_reclaimable:0 [ 230.524805][ T6529] free:1328954 free_pcp:13074 free_cma:0 [ 230.570339][ T6529] Node 0 active_anon:50468kB inactive_anon:588kB active_file:17256kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135868kB dirty:480kB writeback:0kB shmem:26836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11160kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no [ 230.603501][ T6529] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 230.634172][ T6529] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.661504][ T6529] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 230.667653][ T6529] Node 0 DMA32 free:1410724kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:50468kB inactive_anon:588kB active_file:17256kB inactive_file:159876kB unevictable:1536kB writepending:480kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:29604kB local_pcp:9120kB free_cma:0kB [ 230.698472][ T6529] lowmem_reserve[]: 0 0 1 1 1 [ 230.703508][ T6529] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.730461][ T6529] lowmem_reserve[]: 0 0 0 0 0 [ 230.735531][ T6529] Node 1 Normal free:3889732kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22692kB local_pcp:10660kB free_cma:0kB [ 230.765224][ T6529] lowmem_reserve[]: 0 0 0 0 0 [ 230.770209][ T6529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.783725][ T6529] Node 0 DMA32: 9*4kB (ME) 798*8kB (UME) 221*16kB (UME) 2*32kB (UM) 1*64kB (M) 78*128kB (UME) 26*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 2*2048kB (M) 335*4096kB (UM) = 1410660kB [ 230.802414][ T6529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.814632][ T6529] Node 1 Normal: 243*4kB (UME) 39*8kB (UME) 42*16kB (UE) 31*32kB (UME) 15*64kB (UME) 6*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889732kB [ 230.833514][ T6529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.843152][ T6529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.852564][ T6529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.862274][ T6529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.871690][ T6529] 51574 total pagecache pages [ 230.876476][ T6529] 147 pages in swap cache [ 230.880895][ T6529] Free swap = 123952kB [ 230.885191][ T6529] Total swap = 124996kB [ 230.889436][ T6529] 2097051 pages RAM [ 230.893325][ T6529] 0 pages HighMem/MovableOnly [ 230.898119][ T6529] 415209 pages reserved [ 230.902347][ T6529] 0 pages cma reserved [ 231.131519][ T6528] device syzkaller0 entered promiscuous mode [ 231.718069][ T6545] misc userio: Invalid payload size [ 231.724102][ T6545] misc userio: No port type given on /dev/userio [ 233.007106][ T6562] 9pnet_fd: Insufficient options for proto=fd [ 233.280996][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 233.360531][ T6577] device syzkaller0 entered promiscuous mode [ 233.438799][ T6580] Bluetooth: MGMT ver 1.22 [ 233.460557][ T6580] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 233.945373][ T6588] misc userio: Invalid payload size [ 233.951284][ T6588] misc userio: No port type given on /dev/userio [ 235.436446][ T6608] device syzkaller0 entered promiscuous mode [ 235.802368][ T6617] misc userio: Invalid payload size [ 235.808781][ T6617] misc userio: No port type given on /dev/userio [ 236.900325][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 237.650276][ T6649] misc userio: Invalid payload size [ 237.656343][ T6649] misc userio: No port type given on /dev/userio [ 239.362974][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 240.130161][ T6658] device syzkaller0 entered promiscuous mode [ 240.539049][ T6683] misc userio: Invalid payload size [ 240.545119][ T6683] misc userio: No port type given on /dev/userio [ 242.873972][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 243.213631][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 243.240601][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.436303][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 243.584626][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.605585][ T22] usb 4-1: config 0 descriptor?? [ 243.634728][ T22] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 244.838821][ T22] gspca_vc032x: reg_w err -71 [ 244.856431][ T22] vc032x: probe of 4-1:0.0 failed with error -71 [ 244.867654][ T22] usb 4-1: USB disconnect, device number 10 [ 245.450041][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 245.471783][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 245.491907][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 246.020429][ T6738] misc userio: Invalid payload size [ 246.026729][ T6738] misc userio: No port type given on /dev/userio [ 248.681540][ T6769] netlink: 'syz.4.717': attribute type 13 has an invalid length. [ 248.714588][ T6768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 248.721507][ T6768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 248.748856][ T6769] netlink: 152 bytes leftover after parsing attributes in process `syz.4.717'. [ 248.799393][ T6769] syz_tun: refused to change device tx_queue_len [ 248.839492][ T6768] vhci_hcd vhci_hcd.0: Device attached [ 248.842010][ T6769] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 248.887652][ T6770] vhci_hcd: connection closed [ 248.890197][ T4480] vhci_hcd: stop threads [ 248.900482][ T4480] vhci_hcd: release socket [ 248.912622][ T4480] vhci_hcd: disconnect device [ 249.491371][ T6788] misc userio: Invalid payload size [ 249.497344][ T6788] misc userio: No port type given on /dev/userio [ 251.813041][ T6813] device syzkaller0 entered promiscuous mode [ 254.083550][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.364988][ T6845] misc userio: Invalid payload size [ 254.370967][ T6845] misc userio: No port type given on /dev/userio [ 254.663976][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 254.688768][ T22] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 254.720555][ T22] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 255.133069][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 255.162923][ T22] usb 1-1: config 1 has no interface number 0 [ 255.194181][ T22] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.407105][ T22] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 255.421372][ T22] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 255.430792][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.443143][ T22] usb 1-1: can't set config #1, error -71 [ 255.484688][ T22] usb 1-1: USB disconnect, device number 9 [ 256.349054][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.355497][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.732946][ T6870] device syzkaller0 entered promiscuous mode [ 257.153011][ T6881] misc userio: Invalid payload size [ 257.158942][ T6881] misc userio: No port type given on /dev/userio [ 257.962604][ T6888] netlink: 72 bytes leftover after parsing attributes in process `syz.4.755'. [ 257.978135][ T6888] netlink: 72 bytes leftover after parsing attributes in process `syz.4.755'. [ 258.393523][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 258.430540][ T6909] netlink: 104 bytes leftover after parsing attributes in process `syz.0.759'. [ 258.853316][ T6924] device syzkaller0 entered promiscuous mode [ 258.983664][ T4318] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 259.147657][ T6927] misc userio: Invalid payload size [ 259.153666][ T6927] misc userio: No port type given on /dev/userio [ 259.189940][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 259.238547][ T4318] usb 5-1: not running at top speed; connect to a high speed hub [ 259.290609][ T4318] usb 5-1: config 5 has an invalid interface number: 246 but max is 0 [ 259.315913][ T4318] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 259.348242][ T4318] usb 5-1: config 5 has no interface number 0 [ 259.368037][ T4318] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 259.401219][ T4318] usb 5-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 259.633156][ T4318] usb 5-1: config 5 interface 246 has no altsetting 0 [ 259.707068][ T4318] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 259.747055][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.770271][ T4318] usb 5-1: Product: syz [ 259.793171][ T4318] usb 5-1: Manufacturer: syz [ 259.850664][ T4318] usb 5-1: SerialNumber: syz [ 260.069721][ T6936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.770'. [ 260.134743][ T4318] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 260.153272][ T9] usb 5-1: Failed to submit usb control message: -71 [ 260.193549][ T4262] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 260.207295][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 260.215757][ T4318] usb 5-1: USB disconnect, device number 9 [ 260.243959][ T9] usb 5-1: unable to get target info from device [ 260.250394][ T9] usb 5-1: could not get target info (-71) [ 260.267205][ T9] usb 5-1: could not probe fw (-71) [ 260.383712][ T4262] usb 3-1: Using ep0 maxpacket: 8 [ 260.390797][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 260.432881][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.464405][ T4262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.493552][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 260.528266][ T4262] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 260.549809][ T4262] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 260.701185][ T6955] device syzkaller0 entered promiscuous mode [ 260.983179][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.190558][ T4262] usb 3-1: config 0 descriptor?? [ 261.240159][ T6932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.671542][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.729675][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.833859][ T6979] misc userio: Invalid payload size [ 261.839691][ T6979] misc userio: No port type given on /dev/userio [ 262.481735][ T6985] Malformed UNC in devname [ 262.481735][ T6985] [ 262.488960][ T6985] CIFS: VFS: Malformed UNC in devname [ 263.480879][ T4287] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 263.496129][ T4262] usb 3-1: USB disconnect, device number 7 [ 267.233484][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 267.403519][ T22] usb 4-1: device descriptor read/64, error -71 [ 267.674282][ T22] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 267.809629][ T7107] vivid-004: disconnect [ 267.828677][ T7106] vivid-004: reconnect [ 267.856111][ T22] usb 4-1: device descriptor read/64, error -71 [ 267.984743][ T22] usb usb4-port1: attempt power cycle [ 268.189296][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 268.433606][ T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 268.475263][ T22] usb 4-1: device descriptor read/8, error -71 [ 268.763655][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 268.814285][ T22] usb 4-1: device descriptor read/8, error -71 [ 268.933961][ T22] usb usb4-port1: unable to enumerate USB device [ 269.570098][ T7169] capability: warning: `syz.5.848' uses deprecated v2 capabilities in a way that may be insecure [ 269.618507][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 269.634415][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 270.433665][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 270.589372][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.864'. [ 270.623625][ T22] usb 4-1: device descriptor read/64, error -71 [ 270.903807][ T22] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 271.083491][ T22] usb 4-1: device descriptor read/64, error -71 [ 271.203652][ T22] usb usb4-port1: attempt power cycle [ 271.239696][ T7238] netlink: 'syz.4.873': attribute type 39 has an invalid length. [ 271.613527][ T22] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.674507][ T22] usb 4-1: device descriptor read/8, error -71 [ 271.895622][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'. [ 271.949002][ T7250] user requested TSC rate below hardware speed [ 271.958719][ T22] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 272.015172][ T22] usb 4-1: device descriptor read/8, error -71 [ 272.033577][ T4438] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 272.153753][ T22] usb usb4-port1: unable to enumerate USB device [ 272.233529][ T4438] usb 6-1: Using ep0 maxpacket: 8 [ 272.240797][ T4438] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.281639][ T4438] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 272.322333][ T4438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.351648][ T4438] usb 6-1: config 0 descriptor?? [ 272.386959][ T4438] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 273.113864][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 273.828650][ T4438] usb 6-1: USB disconnect, device number 7 [ 275.001168][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.892'. [ 275.169684][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 275.206535][ T7315] device syzkaller0 entered promiscuous mode [ 275.583490][ T7] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.743733][ T7] usb 4-1: device descriptor read/64, error -71 [ 275.836793][ T7335] device syzkaller0 entered promiscuous mode [ 276.013637][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 276.134959][ T7347] binder: 7346:7347 ioctl c0306201 0 returned -14 [ 276.173557][ T7] usb 4-1: device descriptor read/64, error -71 [ 276.293818][ T7] usb usb4-port1: attempt power cycle [ 276.303252][ T7355] device syzkaller0 entered promiscuous mode [ 276.703526][ T7] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 276.745562][ T7] usb 4-1: device descriptor read/8, error -71 [ 277.043781][ T7] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 277.096270][ T7] usb 4-1: device descriptor read/8, error -71 [ 277.264709][ T7] usb usb4-port1: unable to enumerate USB device [ 277.559119][ T7371] device syzkaller0 entered promiscuous mode [ 277.935790][ T7387] device syzkaller0 entered promiscuous mode [ 278.374704][ T7407] device syzkaller0 entered promiscuous mode [ 278.768661][ T7425] device syzkaller0 entered promiscuous mode [ 280.149906][ T7445] device syzkaller0 entered promiscuous mode [ 280.219091][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 280.383621][ T7] usb 3-1: device descriptor read/64, error -71 [ 280.511554][ T7463] device syzkaller0 entered promiscuous mode [ 280.673542][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 280.823497][ T7] usb 3-1: device descriptor read/64, error -71 [ 280.860523][ T27] audit: type=1326 audit(1777634975.082:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 280.914715][ T27] audit: type=1326 audit(1777634975.122:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 280.943649][ T7] usb usb3-port1: attempt power cycle [ 280.970444][ T27] audit: type=1326 audit(1777634975.122:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 281.020815][ T27] audit: type=1326 audit(1777634975.122:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 281.089095][ T27] audit: type=1326 audit(1777634975.122:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 281.153575][ T27] audit: type=1326 audit(1777634975.122:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 281.217906][ T27] audit: type=1326 audit(1777634975.122:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 281.282761][ T27] audit: type=1326 audit(1777634975.122:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 281.393667][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.829852][ T27] audit: type=1326 audit(1777634975.122:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 282.210492][ T7] usb 3-1: device descriptor read/8, error -71 [ 282.223812][ T27] audit: type=1326 audit(1777634975.122:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb31179cdd9 code=0x7ffc0000 [ 282.483554][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 282.743737][ T7] usb 3-1: device not accepting address 11, error -71 [ 282.751022][ T7] usb usb3-port1: unable to enumerate USB device [ 282.764845][ T7499] device syzkaller0 entered promiscuous mode [ 283.858477][ T7521] device syzkaller0 entered promiscuous mode [ 285.373827][ T4438] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 285.583637][ T4438] usb 5-1: device descriptor read/64, error -71 [ 285.883716][ T4438] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 286.053542][ T4438] usb 5-1: device descriptor read/64, error -71 [ 286.195700][ T4438] usb usb5-port1: attempt power cycle [ 286.513999][ T7563] device syzkaller0 entered promiscuous mode [ 286.592737][ T7567] netlink: 160 bytes leftover after parsing attributes in process `syz.3.984'. [ 286.623706][ T4438] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.825800][ T4438] usb 5-1: device descriptor read/8, error -71 [ 287.113858][ T4438] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 287.211301][ T4438] usb 5-1: device descriptor read/8, error -71 [ 287.385731][ T4438] usb usb5-port1: unable to enumerate USB device [ 287.715698][ T4319] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 287.916715][ T4319] usb 4-1: Using ep0 maxpacket: 32 [ 287.929231][ T4319] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 287.955708][ T4319] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 287.995615][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 288.037333][ T4319] usb 4-1: config 1 has no interface number 0 [ 288.057624][ T4319] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.139252][ T4319] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 288.203295][ T4319] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 288.251614][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.295166][ T4319] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 288.320558][ T7601] 9pnet_fd: Insufficient options for proto=fd [ 288.984611][ T4319] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 289.290234][ T4319] usb 4-1: USB disconnect, device number 23 [ 289.354229][ T4319] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 289.513691][ T7614] netlink: 160 bytes leftover after parsing attributes in process `syz.3.997'. [ 289.534911][ T7616] device syzkaller0 entered promiscuous mode [ 289.663661][ T4321] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.853568][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 289.863093][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.889773][ T4321] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 289.918881][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.974860][ T4321] usb 5-1: config 0 descriptor?? [ 289.999578][ T4321] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 291.033207][ T7636] 9pnet_fd: Insufficient options for proto=fd [ 292.008379][ T7647] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1010'. [ 292.022461][ T4321] gspca_vc032x: reg_w err -71 [ 292.029520][ T4321] vc032x: probe of 5-1:0.0 failed with error -71 [ 292.049936][ T4321] usb 5-1: USB disconnect, device number 14 [ 292.083632][ T4317] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 292.135457][ T7652] device syzkaller0 entered promiscuous mode [ 292.283577][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 292.291415][ T4317] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 292.321022][ T4317] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 292.506205][ T4317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 292.515854][ T4317] usb 3-1: config 1 has no interface number 0 [ 292.522016][ T4317] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.533110][ T4317] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 292.546863][ T4317] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 292.556431][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.579391][ T4317] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 292.994107][ T4317] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 293.434648][ T4317] usb 3-1: USB disconnect, device number 12 [ 293.442273][ T4317] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 293.689318][ T7681] device syzkaller0 entered promiscuous mode [ 293.804365][ T7683] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1024'. [ 293.910545][ T7687] device syzkaller0 entered promiscuous mode [ 293.998511][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 295.227640][ T7711] loop2: detected capacity change from 0 to 7 [ 295.293831][ T7711] Dev loop2: unable to read RDB block 7 [ 295.318076][ T7711] loop2: unable to read partition table [ 295.340578][ T7711] loop2: partition table beyond EOD, truncated [ 295.351458][ T7717] netlink: 49 bytes leftover after parsing attributes in process `syz.4.1037'. [ 295.374471][ T7711] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.449865][ T3637] Dev loop2: unable to read RDB block 7 [ 295.463638][ T3637] loop2: unable to read partition table [ 295.469592][ T3637] loop2: partition table beyond EOD, truncated [ 295.562181][ T7722] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1039'. [ 295.700416][ T7726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1041'. [ 296.090719][ T7740] device syzkaller0 entered promiscuous mode [ 296.490595][ T7755] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1053'. [ 296.960626][ T7773] device syzkaller0 entered promiscuous mode [ 297.141088][ T7781] loop2: detected capacity change from 0 to 7 [ 297.156763][ T4263] Dev loop2: unable to read RDB block 7 [ 297.162480][ T4263] loop2: unable to read partition table [ 297.174775][ T4263] loop2: partition table beyond EOD, truncated [ 297.185037][ T7781] Dev loop2: unable to read RDB block 7 [ 297.191099][ T7781] loop2: unable to read partition table [ 297.206065][ T7781] loop2: partition table beyond EOD, truncated [ 297.219760][ T7781] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.250423][ T3637] Dev loop2: unable to read RDB block 7 [ 297.258466][ T3637] loop2: unable to read partition table [ 297.270273][ T3637] loop2: partition table beyond EOD, truncated [ 297.316847][ T4262] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 297.411848][ T7787] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1065'. [ 297.513471][ T4262] usb 3-1: Using ep0 maxpacket: 32 [ 299.349966][ T4262] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 301.120697][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.129317][ T4262] usb 3-1: Product: syz [ 301.133826][ T4262] usb 3-1: Manufacturer: syz [ 301.138478][ T4262] usb 3-1: SerialNumber: syz [ 301.145360][ T4262] usb 3-1: config 0 descriptor?? [ 301.192240][ T4262] usb 3-1: can't set config #0, error -71 [ 301.257239][ T4262] usb 3-1: USB disconnect, device number 13 [ 301.528114][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 301.540725][ T7812] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 302.338223][ T7816] device syzkaller0 entered promiscuous mode [ 302.565373][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1076'. [ 302.760045][ T7827] blktrace: Concurrent blktraces are not allowed on loop6 [ 303.027179][ T7838] ------------[ cut here ]------------ [ 303.033182][ T7838] WARNING: CPU: 0 PID: 7838 at security/landlock/fs.c:752 collect_domain_accesses+0x7a4/0x810 [ 303.043659][ T7838] Modules linked in: [ 303.047623][ T7838] CPU: 0 PID: 7838 Comm: syz.0.1083 Not tainted syzkaller #0 [ 303.055124][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.065339][ T7838] RIP: 0010:collect_domain_accesses+0x7a4/0x810 [ 303.071660][ T7838] Code: 89 d8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 b6 aa fd 31 db eb dd e8 e7 b6 aa fd 0f 0b b3 01 eb db e8 dc b6 aa fd <0f> 0b eb e8 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 20 f9 ff ff 48 89 [ 303.091442][ T7838] RSP: 0018:ffffc9000e6a7ab0 EFLAGS: 00010283 [ 303.097622][ T7838] RAX: ffffffff83d7be74 RBX: ffff888073bdb028 RCX: 0000000000080000 [ 303.105865][ T7838] RDX: ffffc9000cba9000 RSI: 0000000000000236 RDI: 0000000000000237 [ 303.114048][ T7838] RBP: ffffc9000e6a7bfa R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 303.122498][ T7838] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000002004 [ 303.130813][ T7838] R13: 0000000000000000 R14: ffff888073bdb028 R15: ffff88802e6cd1ac [ 303.138891][ T7838] FS: 00007f5131aaf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 303.147921][ T7838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.154586][ T7838] CR2: 000000110c25d828 CR3: 000000005ec3e000 CR4: 00000000003506f0 [ 303.162619][ T7838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.170688][ T7838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.178749][ T7838] Call Trace: [ 303.182075][ T7838] [ 303.185097][ T7838] current_check_refer_path+0x4d8/0xa00 [ 303.190733][ T7838] ? hook_file_open+0x600/0x600 [ 303.195700][ T7838] ? _raw_spin_unlock+0x24/0x40 [ 303.200640][ T7838] ? d_set_d_op+0x25b/0x370 [ 303.205264][ T7838] security_path_rename+0x168/0x200 [ 303.210528][ T7838] do_renameat2+0x6ba/0xce0 [ 303.215120][ T7838] ? __lock_acquire+0x7d10/0x7d10 [ 303.220233][ T7838] ? fsnotify_move+0x4e0/0x4e0 [ 303.225105][ T7838] ? __check_object_size+0x500/0xa40 [ 303.230468][ T7838] ? getname_flags+0x206/0x500 [ 303.235319][ T7838] __x64_sys_renameat2+0xce/0xe0 [ 303.240321][ T7838] do_syscall_64+0x4c/0xa0 [ 303.244840][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 303.249575][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 303.254346][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.260412][ T7838] RIP: 0033:0x7f5130b9cdd9 [ 303.264915][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.284627][ T7838] RSP: 002b:00007f5131aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 303.293097][ T7838] RAX: ffffffffffffffda RBX: 00007f5130e15fa0 RCX: 00007f5130b9cdd9 [ 303.301245][ T7838] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 303.309399][ T7838] RBP: 00007f5130c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 303.317457][ T7838] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 303.325515][ T7838] R13: 00007f5130e16038 R14: 00007f5130e15fa0 R15: 00007ffe1cbbfab8 [ 303.333586][ T7838] [ 303.336648][ T7838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 303.343959][ T7838] CPU: 0 PID: 7838 Comm: syz.0.1083 Not tainted syzkaller #0 [ 303.351363][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.361469][ T7838] Call Trace: [ 303.364793][ T7838] [ 303.367764][ T7838] dump_stack_lvl+0x188/0x24e [ 303.372502][ T7838] ? memcpy+0x3c/0x60 [ 303.376538][ T7838] ? show_regs_print_info+0x12/0x12 [ 303.381796][ T7838] ? load_image+0x400/0x400 [ 303.386375][ T7838] panic+0x2e5/0x730 [ 303.390350][ T7838] ? bpf_jit_dump+0xd0/0xd0 [ 303.394919][ T7838] __warn+0x2f8/0x4f0 [ 303.398944][ T7838] ? collect_domain_accesses+0x7a4/0x810 [ 303.404638][ T7838] ? collect_domain_accesses+0x7a4/0x810 [ 303.410330][ T7838] report_bug+0x2ba/0x4f0 [ 303.414716][ T7838] ? collect_domain_accesses+0x7a4/0x810 [ 303.420413][ T7838] handle_bug+0x3a/0x70 [ 303.424623][ T7838] exc_invalid_op+0x16/0x40 [ 303.429177][ T7838] asm_exc_invalid_op+0x16/0x20 [ 303.434082][ T7838] RIP: 0010:collect_domain_accesses+0x7a4/0x810 [ 303.440465][ T7838] Code: 89 d8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 b6 aa fd 31 db eb dd e8 e7 b6 aa fd 0f 0b b3 01 eb db e8 dc b6 aa fd <0f> 0b eb e8 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 20 f9 ff ff 48 89 [ 303.460133][ T7838] RSP: 0018:ffffc9000e6a7ab0 EFLAGS: 00010283 [ 303.466255][ T7838] RAX: ffffffff83d7be74 RBX: ffff888073bdb028 RCX: 0000000000080000 [ 303.474277][ T7838] RDX: ffffc9000cba9000 RSI: 0000000000000236 RDI: 0000000000000237 [ 303.482309][ T7838] RBP: ffffc9000e6a7bfa R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 303.490327][ T7838] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000002004 [ 303.498351][ T7838] R13: 0000000000000000 R14: ffff888073bdb028 R15: ffff88802e6cd1ac [ 303.506384][ T7838] ? collect_domain_accesses+0x7a4/0x810 [ 303.512127][ T7838] current_check_refer_path+0x4d8/0xa00 [ 303.517784][ T7838] ? hook_file_open+0x600/0x600 [ 303.522722][ T7838] ? _raw_spin_unlock+0x24/0x40 [ 303.527631][ T7838] ? d_set_d_op+0x25b/0x370 [ 303.532276][ T7838] security_path_rename+0x168/0x200 [ 303.537640][ T7838] do_renameat2+0x6ba/0xce0 [ 303.542289][ T7838] ? __lock_acquire+0x7d10/0x7d10 [ 303.547384][ T7838] ? fsnotify_move+0x4e0/0x4e0 [ 303.552204][ T7838] ? __check_object_size+0x500/0xa40 [ 303.557559][ T7838] ? getname_flags+0x206/0x500 [ 303.562374][ T7838] __x64_sys_renameat2+0xce/0xe0 [ 303.567449][ T7838] do_syscall_64+0x4c/0xa0 [ 303.571921][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 303.576652][ T7838] ? clear_bhb_loop+0x60/0xb0 [ 303.581384][ T7838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.587325][ T7838] RIP: 0033:0x7f5130b9cdd9 [ 303.591799][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.611449][ T7838] RSP: 002b:00007f5131aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 303.619919][ T7838] RAX: ffffffffffffffda RBX: 00007f5130e15fa0 RCX: 00007f5130b9cdd9 [ 303.627934][ T7838] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 303.635952][ T7838] RBP: 00007f5130c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 303.643967][ T7838] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 303.651978][ T7838] R13: 00007f5130e16038 R14: 00007f5130e15fa0 R15: 00007ffe1cbbfab8 [ 303.660010][ T7838] [ 303.663642][ T7838] Kernel Offset: disabled [ 303.668077][ T7838] Rebooting in 86400 seconds..