last executing test programs: 7m42.327045325s ago: executing program 2 (id=33): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) syz_open_dev$dri(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xe7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) close(r0) 7m42.132024952s ago: executing program 2 (id=35): read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, r0, {0x7, 0x2d, 0x401, 0x80400e0, 0x401, 0x4bb1, 0x8, 0xfff, 0x0, 0x0, 0x2, 0x7}}, 0x50) 7m42.003002706s ago: executing program 2 (id=36): eventfd(0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7d08, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25d, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) 7m40.846287096s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m40.573023236s ago: executing program 2 (id=47): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 7m40.15989885s ago: executing program 2 (id=50): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, 0x0) 7m39.695077436s ago: executing program 32 (id=50): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, 0x0) 17.359889493s ago: executing program 1 (id=2130): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) 14.486167262s ago: executing program 1 (id=2140): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 12.332181366s ago: executing program 1 (id=2146): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dri(0x0, 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 11.309892881s ago: executing program 1 (id=2151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 4.618057631s ago: executing program 1 (id=2180): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) 4.327039471s ago: executing program 3 (id=2183): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4.188620876s ago: executing program 0 (id=2184): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) 3.76413447s ago: executing program 0 (id=2186): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f6", 0x3b}, {&(0x7f0000000540)}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.635440775s ago: executing program 1 (id=2188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 3.49431983s ago: executing program 3 (id=2190): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/67, 0x0, 0x5000}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000180), 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup(r4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYBLOB="0603"], 0xd, 0x0) unshare(0x10000) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)='q', 0x1}], 0x1}}], 0xfffffffffffffe9d, 0x20001000) 3.1885094s ago: executing program 4 (id=2192): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd", 0x9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x5a2}, {0x0}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.18771127s ago: executing program 0 (id=2193): r0 = syz_io_uring_setup(0x3dd6, &(0x7f0000000200)={0x0, 0xcec, 0x2, 0x1, 0x4356}, &(0x7f00000000c0), &(0x7f0000000080), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0xfffffffffffffff8, r1, 0x32, {0xa3d6, 0x1}, 0x6}, 0x1) 2.91088812s ago: executing program 0 (id=2194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d6673636163"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r6, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r7, 0x0, r8, 0x0, 0x10000000000016, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.868040751s ago: executing program 4 (id=2195): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x1, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) 2.289292051s ago: executing program 3 (id=2196): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x1, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x28c}, 0x1c, &(0x7f0000000080)}}], 0x1, 0x20048000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0804000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) 2.087284278s ago: executing program 4 (id=2197): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd", 0x9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x5a2}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18", 0xc1}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.674322293s ago: executing program 4 (id=2198): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) 1.673232153s ago: executing program 3 (id=2199): r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.018178365s ago: executing program 0 (id=2200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r1, 0x0, 0x2) 818.803592ms ago: executing program 0 (id=2201): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10694, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 780.092593ms ago: executing program 3 (id=2202): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, &(0x7f00000009c0)={{0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000240)={@_ha_fsid}, 0x0}, 0x0, &(0x7f0000000900)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000001000)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x48800) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000a80)={0x3f, 0x6, 0x2, 0xd, "7dd9996c5fab016c72b345904888b4938f31fa3f491b644c20c7ea90c5d45bb4"}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/95) socket$nl_netfilter(0x10, 0x3, 0xc) 687.672336ms ago: executing program 4 (id=2203): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd", 0x9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x5a2}, {0x0}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 458.912764ms ago: executing program 4 (id=2204): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/67, 0x0, 0x5000}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, &(0x7f0000000180), 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup(r4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYBLOB="0603"], 0xd, 0x0) unshare(0x10000) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)='q', 0x1}], 0x1}}], 0xfffffffffffffe9d, 0x20001000) 0s ago: executing program 3 (id=2205): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x463af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB='\b@'], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): ered forwarding state [ 80.782608][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.789783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.824342][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.833577][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.871771][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.878936][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.895547][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.902831][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.924183][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.931404][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.980827][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.988042][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.012025][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.051207][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.118841][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.126211][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.160979][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.168458][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.416816][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.538010][ T5768] veth0_vlan: entered promiscuous mode [ 81.562465][ T5768] veth1_vlan: entered promiscuous mode [ 81.598991][ T5778] Bluetooth: hci0: command tx timeout [ 81.657089][ T5768] veth0_macvtap: entered promiscuous mode [ 81.678662][ T5778] Bluetooth: hci1: command tx timeout [ 81.699111][ T5768] veth1_macvtap: entered promiscuous mode [ 81.759456][ T5778] Bluetooth: hci2: command tx timeout [ 81.759901][ T5084] Bluetooth: hci3: command tx timeout [ 81.784915][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.824986][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.843989][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.853836][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863006][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.872042][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.918119][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.956370][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.008080][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.172139][ T5770] veth0_vlan: entered promiscuous mode [ 82.179955][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.196893][ T5769] veth0_vlan: entered promiscuous mode [ 82.226162][ T5770] veth1_vlan: entered promiscuous mode [ 82.232569][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.373629][ T5769] veth1_vlan: entered promiscuous mode [ 82.412802][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.430679][ T5771] veth0_vlan: entered promiscuous mode [ 82.458500][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.523179][ T5770] veth0_macvtap: entered promiscuous mode [ 82.556574][ T5771] veth1_vlan: entered promiscuous mode [ 82.598165][ T5770] veth1_macvtap: entered promiscuous mode [ 82.697665][ T5769] veth0_macvtap: entered promiscuous mode [ 82.756222][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.780109][ T5836] random: crng reseeded on system resumption [ 82.789792][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.809747][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.834927][ T5769] veth1_macvtap: entered promiscuous mode [ 82.851843][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.877997][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.899184][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.924285][ T5771] veth0_macvtap: entered promiscuous mode [ 82.952428][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967731][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.976488][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.007877][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.034951][ T5771] veth1_macvtap: entered promiscuous mode [ 83.055177][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.067008][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.079013][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.090948][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.103162][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.142465][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.155973][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.169240][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.180551][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.192286][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.216922][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.229028][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.242345][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253056][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332179][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.346429][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.357576][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.374301][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.384738][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.395410][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.412909][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.479055][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.508370][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.520515][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.533945][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.545026][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.558731][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.569713][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.589362][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.617681][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.625640][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.677746][ T5084] Bluetooth: hci0: command tx timeout [ 83.705730][ T5844] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 83.753858][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.763178][ T5084] Bluetooth: hci1: command tx timeout [ 83.787052][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.797584][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.808575][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.838776][ T5084] Bluetooth: hci2: command tx timeout [ 83.840656][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.848477][ T5084] Bluetooth: hci3: command tx timeout [ 84.023742][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.034909][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.187639][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.197759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.215123][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.248533][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.324307][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.342025][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.757832][ T5084] Bluetooth: hci0: command tx timeout [ 85.837804][ T5084] Bluetooth: hci1: command tx timeout [ 85.847803][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.929964][ T5084] Bluetooth: hci3: command tx timeout [ 85.929974][ T5778] Bluetooth: hci2: command tx timeout [ 86.062277][ T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.087349][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.101115][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.111886][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.130385][ T787] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 86.140519][ T787] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 86.149180][ T787] usb 2-1: Manufacturer: syz [ 86.160086][ T787] usb 2-1: config 0 descriptor?? [ 86.286840][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 86.293670][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.305609][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.315644][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 86.322356][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.335209][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.343735][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 86.350381][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.361834][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.378600][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 86.385281][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.393442][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.407150][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 86.413916][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.438949][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.460108][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 86.466792][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.497302][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.548541][ T5873] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.598378][ T42] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 86.623943][ T5888] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(24) [ 86.624157][ T5778] Bluetooth: hci2: Dropping invalid advertising data [ 86.630612][ T5888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.646667][ T5778] Bluetooth: hci2: Malformed LE Event: 0x02 [ 86.651955][ T787] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 86.658265][ T5888] vhci_hcd vhci_hcd.0: Device attached [ 86.677244][ T5873] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 86.684098][ T5873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.703467][ T787] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 86.708491][ T5888] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.730190][ T5873] vhci_hcd vhci_hcd.0: Device attached [ 86.785652][ T787] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 86.789917][ T5876] vhci_hcd: connection closed [ 86.796907][ T5891] vhci_hcd: connection closed [ 86.797183][ T5889] vhci_hcd: connection closed [ 86.804571][ T5874] vhci_hcd: connection reset by peer [ 86.806790][ T5882] vhci_hcd: connection closed [ 86.817074][ T5884] vhci_hcd: connection closed [ 86.817628][ T5880] vhci_hcd: connection closed [ 86.828122][ T5878] vhci_hcd: connection closed [ 86.840275][ T1144] vhci_hcd: stop threads [ 86.868523][ T1144] vhci_hcd: release socket [ 86.892542][ T1144] vhci_hcd: disconnect device [ 86.944016][ T1144] vhci_hcd: stop threads [ 86.951904][ T1144] vhci_hcd: release socket [ 86.975210][ T1144] vhci_hcd: disconnect device [ 86.990847][ T1144] vhci_hcd: stop threads [ 86.995262][ T1144] vhci_hcd: release socket [ 87.032508][ T1144] vhci_hcd: disconnect device [ 87.053012][ T1144] vhci_hcd: stop threads [ 87.058153][ T1144] vhci_hcd: release socket [ 87.067898][ T1144] vhci_hcd: disconnect device [ 87.079483][ T1144] vhci_hcd: stop threads [ 87.083803][ T1144] vhci_hcd: release socket [ 87.098267][ T1144] vhci_hcd: disconnect device [ 87.103646][ T1144] vhci_hcd: stop threads [ 87.188858][ T23] cfg80211: failed to load regulatory.db [ 87.198963][ T1144] vhci_hcd: release socket [ 87.219733][ T1144] vhci_hcd: disconnect device [ 87.245127][ T1144] vhci_hcd: stop threads [ 87.484477][ T787] usb 2-1: USB disconnect, device number 2 [ 88.997450][ C1] sched: RT throttling activated [ 88.999877][ T1144] vhci_hcd: release socket [ 89.690933][ T1144] vhci_hcd: disconnect device [ 89.696122][ T1144] vhci_hcd: stop threads [ 89.713840][ T1144] vhci_hcd: release socket [ 89.733156][ T5898] fido_id[5898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 89.743096][ T1144] vhci_hcd: disconnect device [ 90.172111][ T5912] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 90.178723][ T5912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.207871][ T5912] vhci_hcd vhci_hcd.0: Device attached [ 90.305911][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 90.341651][ T5913] vhci_hcd: connection closed [ 90.356343][ T1144] vhci_hcd: stop threads [ 90.486568][ T1144] vhci_hcd: release socket [ 90.555443][ T1144] vhci_hcd: disconnect device [ 91.829202][ T42] vhci_hcd: vhci_device speed not set [ 93.087575][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.287598][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 93.317672][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.351862][ T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.365004][ T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.377180][ T23] usb 4-1: Product: syz [ 93.385213][ T23] usb 4-1: Manufacturer: syz [ 93.395609][ T23] usb 4-1: SerialNumber: syz [ 93.413461][ T23] usb 4-1: config 0 descriptor?? [ 93.429657][ T5924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.463236][ T23] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.472329][ T23] hub: probe of 4-1:0.0 failed with error -5 [ 93.991097][ T5808] usb usb38-port1: attempt power cycle [ 94.497495][ T5958] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 94.504079][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.537659][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.548518][ T5961] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 94.555210][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.577867][ T5961] vhci_hcd vhci_hcd.0: Device attached [ 94.590321][ T5958] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 94.596993][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 94.612209][ T23] usb 4-1: USB disconnect, device number 2 [ 94.633903][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.652821][ T5961] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 94.659508][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.675490][ T5961] vhci_hcd vhci_hcd.0: Device attached [ 94.676720][ T5808] usb usb38-port1: unable to enumerate USB device [ 94.698220][ T5958] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 94.704899][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.736749][ T5961] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 94.743402][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.769156][ T5961] vhci_hcd vhci_hcd.0: Device attached [ 94.778596][ T5961] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.784390][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.817835][ T5961] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 94.824513][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.842099][ T5961] vhci_hcd vhci_hcd.0: Device attached [ 94.868243][ T5958] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(20) [ 94.874924][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.906812][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 94.935814][ T5958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.017625][ T42] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 95.029319][ T5974] vhci_hcd: connection closed [ 95.029550][ T5972] vhci_hcd: connection closed [ 95.030453][ T5968] vhci_hcd: connection closed [ 95.034681][ T5970] vhci_hcd: connection closed [ 95.044292][ T5966] vhci_hcd: connection closed [ 95.049607][ T49] vhci_hcd: stop threads [ 95.063680][ T5962] vhci_hcd: connection closed [ 95.063936][ T5959] vhci_hcd: connection reset by peer [ 95.063998][ T49] vhci_hcd: release socket [ 95.072526][ T5964] vhci_hcd: connection closed [ 95.074211][ T49] vhci_hcd: disconnect device [ 95.088785][ T49] vhci_hcd: stop threads [ 95.093089][ T49] vhci_hcd: release socket [ 95.097716][ T49] vhci_hcd: disconnect device [ 95.108234][ T49] vhci_hcd: stop threads [ 95.112559][ T49] vhci_hcd: release socket [ 95.122752][ T49] vhci_hcd: disconnect device [ 95.130122][ T49] vhci_hcd: stop threads [ 95.136867][ T49] vhci_hcd: release socket [ 95.144946][ T49] vhci_hcd: disconnect device [ 95.152506][ T49] vhci_hcd: stop threads [ 95.159199][ T49] vhci_hcd: release socket [ 95.169466][ T49] vhci_hcd: disconnect device [ 95.176769][ T49] vhci_hcd: stop threads [ 95.183833][ T49] vhci_hcd: release socket [ 95.191843][ T49] vhci_hcd: disconnect device [ 95.211555][ T49] vhci_hcd: stop threads [ 95.222826][ T49] vhci_hcd: release socket [ 95.235478][ T49] vhci_hcd: disconnect device [ 95.254672][ T49] vhci_hcd: stop threads [ 95.266904][ T49] vhci_hcd: release socket [ 95.277800][ T49] vhci_hcd: disconnect device [ 95.557552][ T5986] overlayfs: failed to clone upperpath [ 96.130494][ T6003] fuse: Bad value for 'fd' [ 96.304186][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.491530][ T5077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.502432][ T5811] usb 1-1: Using ep0 maxpacket: 32 [ 96.519673][ T5811] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 96.545082][ T5811] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.564812][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.585072][ T5811] usb 1-1: Product: syz [ 96.592247][ T5811] usb 1-1: Manufacturer: syz [ 96.612515][ T5811] usb 1-1: SerialNumber: syz [ 96.636552][ T5811] usb 1-1: config 0 descriptor?? [ 96.655137][ T5077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.655870][ T6000] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.690262][ T5811] hub 1-1:0.0: bad descriptor, ignoring hub [ 96.696346][ T5811] hub: probe of 1-1:0.0 failed with error -5 [ 96.785891][ T5077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.019793][ T5077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.702534][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.714306][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.724106][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.732863][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.743243][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.752896][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.928757][ T5841] usb 1-1: USB disconnect, device number 2 [ 98.569473][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 99.579083][ T6062] overlayfs: failed to clone upperpath [ 99.838905][ T5778] Bluetooth: hci3: command tx timeout [ 100.004989][ T5077] hsr_slave_0: left promiscuous mode [ 100.100198][ T5077] hsr_slave_1: left promiscuous mode [ 100.107528][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.126056][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.151780][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.160013][ T42] vhci_hcd: vhci_device speed not set [ 100.203248][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.234360][ T5077] bridge_slave_1: left allmulticast mode [ 100.247630][ T5077] bridge_slave_1: left promiscuous mode [ 100.254597][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.274387][ T5077] bridge_slave_0: left allmulticast mode [ 100.282596][ T5077] bridge_slave_0: left promiscuous mode [ 100.288455][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.325432][ T5077] veth1_macvtap: left promiscuous mode [ 100.335524][ T5077] veth0_macvtap: left promiscuous mode [ 100.343629][ T5077] veth1_vlan: left promiscuous mode [ 100.351750][ T5077] veth0_vlan: left promiscuous mode [ 100.527933][ T6070] fuse: Unknown parameter 'user_id00000000000000000000' [ 101.256935][ T5077] team0 (unregistering): Port device team_slave_1 removed [ 101.304308][ T5077] team0 (unregistering): Port device team_slave_0 removed [ 101.348786][ T5077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.395565][ T5077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.548767][ T5808] usb usb38-port1: attempt power cycle [ 101.894215][ T5077] bond0 (unregistering): Released all slaves [ 101.922457][ T5778] Bluetooth: hci3: command tx timeout [ 101.961105][ T6085] overlayfs: failed to clone upperpath [ 102.027874][ T6087] fuse: Unknown parameter 'user_id00000000000000000000' [ 102.056549][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.076460][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.096806][ T6024] bridge_slave_0: entered allmulticast mode [ 102.105242][ T6024] bridge_slave_0: entered promiscuous mode [ 102.124460][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.152696][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.183333][ T6024] bridge_slave_1: entered allmulticast mode [ 102.200400][ T6024] bridge_slave_1: entered promiscuous mode [ 102.229502][ T5808] usb usb38-port1: unable to enumerate USB device [ 102.367107][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.415296][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.556028][ T6024] team0: Port device team_slave_0 added [ 102.590683][ T6024] team0: Port device team_slave_1 added [ 102.701842][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.720870][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.764307][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.800819][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.825501][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.871853][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.077729][ T6114] overlayfs: failed to clone upperpath [ 103.095203][ T6024] hsr_slave_0: entered promiscuous mode [ 103.134795][ T6024] hsr_slave_1: entered promiscuous mode [ 103.161229][ T6024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.171301][ T6116] fuse: Unknown parameter 'user_id00000000000000000000' [ 103.180276][ T6024] Cannot create hsr debugfs directory [ 103.725855][ T6024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.744614][ T6024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.766364][ T6024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.779926][ T6024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.848432][ T5809] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.954414][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.003328][ T5778] Bluetooth: hci3: command tx timeout [ 104.004518][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.035703][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.042962][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.064163][ T5809] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.070564][ T6142] overlayfs: failed to clone upperpath [ 104.087539][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.098852][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.109298][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.109676][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.124224][ T5809] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.129845][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.142001][ T5809] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.202261][ T5809] usb 4-1: Manufacturer: syz [ 104.220297][ T5809] usb 4-1: config 0 descriptor?? [ 104.408065][ T6147] fuse: Bad value for 'fd' [ 104.653295][ T5809] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 104.679569][ T5809] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 104.718703][ T5809] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 104.862249][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.922107][ T6186] fuse: Bad value for 'fd' [ 105.935594][ T6024] veth0_vlan: entered promiscuous mode [ 105.979176][ T6024] veth1_vlan: entered promiscuous mode [ 106.062691][ T6024] veth0_macvtap: entered promiscuous mode [ 106.078044][ T5778] Bluetooth: hci3: command tx timeout [ 106.100718][ T6024] veth1_macvtap: entered promiscuous mode [ 106.197800][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.231827][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.247493][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.277009][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.314064][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.345481][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.372872][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.403125][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.457526][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.497534][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.530855][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.549766][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.582358][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.764461][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.772252][ T5809] usb 4-1: USB disconnect, device number 3 [ 106.837136][ T6024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.937288][ T6024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.016889][ T6024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.046104][ T6024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.465761][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.544445][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.634322][ T5077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.644905][ T5077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.842523][ T6222] fuse: Bad value for 'fd' [ 107.887568][ T6224] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 107.894315][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.943517][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 107.998374][ T6228] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 108.005107][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.063688][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 108.100695][ T6224] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 108.107348][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.142417][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 108.169529][ T6228] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 108.176221][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.198113][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 108.207739][ T5811] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 108.261761][ T6224] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 108.268448][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.304160][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 108.344462][ T6228] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 108.351137][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.401793][ T6224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.410340][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 108.447683][ T6224] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(23) [ 108.454520][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.548443][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 108.594755][ T6228] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(27) [ 108.601434][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.664028][ T6224] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 108.695173][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 108.769763][ T6252] vhci_hcd: connection closed [ 108.770011][ T6246] vhci_hcd: connection closed [ 108.771757][ T6237] vhci_hcd: connection closed [ 108.778104][ T6229] vhci_hcd: connection closed [ 108.785210][ T6240] vhci_hcd: connection closed [ 108.790136][ T6256] vhci_hcd: connection closed [ 108.795116][ T6226] vhci_hcd: connection reset by peer [ 108.809836][ T6234] vhci_hcd: connection closed [ 108.810237][ T1144] vhci_hcd: stop threads [ 108.857598][ T1144] vhci_hcd: release socket [ 108.881198][ T1144] vhci_hcd: disconnect device [ 108.892860][ T1144] vhci_hcd: stop threads [ 108.897186][ T1144] vhci_hcd: release socket [ 108.921919][ T1144] vhci_hcd: disconnect device [ 108.932959][ T1144] vhci_hcd: stop threads [ 108.946422][ T1144] vhci_hcd: release socket [ 108.958328][ T1144] vhci_hcd: disconnect device [ 108.973071][ T1144] vhci_hcd: stop threads [ 108.977396][ T1144] vhci_hcd: release socket [ 108.996974][ T1144] vhci_hcd: disconnect device [ 109.012338][ T1144] vhci_hcd: stop threads [ 109.016682][ T1144] vhci_hcd: release socket [ 109.043331][ T1144] vhci_hcd: disconnect device [ 109.055307][ T1144] vhci_hcd: stop threads [ 109.064412][ T1144] vhci_hcd: release socket [ 109.074810][ T1144] vhci_hcd: disconnect device [ 109.089993][ T1144] vhci_hcd: stop threads [ 109.099899][ T1144] vhci_hcd: release socket [ 109.109246][ T1144] vhci_hcd: disconnect device [ 109.119677][ T1144] vhci_hcd: stop threads [ 109.128792][ T1144] vhci_hcd: release socket [ 109.147982][ T1144] vhci_hcd: disconnect device [ 109.565653][ T6274] syzkaller0: entered promiscuous mode [ 109.577634][ T6274] syzkaller0: entered allmulticast mode [ 110.757327][ T6304] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 110.763936][ T6304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.800164][ T6304] vhci_hcd vhci_hcd.0: Device attached [ 110.823820][ T6310] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 110.830673][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.863904][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 110.883938][ T6304] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 110.890706][ T6304] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.921051][ T6304] vhci_hcd vhci_hcd.0: Device attached [ 110.943005][ T6310] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 110.949770][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.967688][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 111.019885][ T6304] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 111.026839][ T6304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.064361][ T6310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 111.071132][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 111.107157][ T6304] vhci_hcd vhci_hcd.0: Device attached [ 111.127812][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 111.150146][ T6304] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.186683][ T6304] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(23) [ 111.193463][ T6304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.208606][ T6304] vhci_hcd vhci_hcd.0: Device attached [ 111.245568][ T6304] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(26) [ 111.252250][ T6304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.301749][ T6304] vhci_hcd vhci_hcd.0: Device attached [ 111.338522][ T6310] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.409710][ T6328] vhci_hcd: connection closed [ 111.409936][ T6326] vhci_hcd: connection closed [ 111.412246][ T6323] vhci_hcd: connection closed [ 111.421365][ T6321] vhci_hcd: connection closed [ 111.421473][ T6318] vhci_hcd: connection closed [ 111.437744][ T6311] vhci_hcd: connection closed [ 111.438207][ T41] vhci_hcd: stop threads [ 111.442640][ T6316] vhci_hcd: connection closed [ 111.457538][ T6305] vhci_hcd: connection closed [ 111.458081][ T41] vhci_hcd: release socket [ 111.497782][ T41] vhci_hcd: disconnect device [ 111.509481][ T41] vhci_hcd: stop threads [ 111.513969][ T41] vhci_hcd: release socket [ 111.542786][ T41] vhci_hcd: disconnect device [ 111.552297][ T41] vhci_hcd: stop threads [ 111.569207][ T41] vhci_hcd: release socket [ 111.587369][ T41] vhci_hcd: disconnect device [ 111.604194][ T41] vhci_hcd: stop threads [ 111.615281][ T41] vhci_hcd: release socket [ 111.625487][ T41] vhci_hcd: disconnect device [ 111.632647][ T41] vhci_hcd: stop threads [ 111.657083][ T41] vhci_hcd: release socket [ 111.667245][ T41] vhci_hcd: disconnect device [ 111.690208][ T41] vhci_hcd: stop threads [ 111.694795][ T41] vhci_hcd: release socket [ 111.724603][ T41] vhci_hcd: disconnect device [ 111.743006][ T41] vhci_hcd: stop threads [ 111.757392][ T41] vhci_hcd: release socket [ 111.768131][ T41] vhci_hcd: disconnect device [ 111.777939][ T41] vhci_hcd: stop threads [ 111.786199][ T41] vhci_hcd: release socket [ 111.808599][ T41] vhci_hcd: disconnect device [ 112.028162][ T6345] syzkaller0: entered promiscuous mode [ 112.033726][ T6345] syzkaller0: entered allmulticast mode [ 112.069665][ T27] audit: type=1326 audit(1775020171.586:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 112.152407][ T27] audit: type=1326 audit(1775020171.616:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 112.257675][ T27] audit: type=1326 audit(1775020171.616:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 112.307186][ T27] audit: type=1326 audit(1775020171.616:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 112.336716][ T27] audit: type=1326 audit(1775020171.616:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6348 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 112.900053][ T5841] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.112459][ T5841] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.158276][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.198632][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.230193][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.290306][ T5841] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 113.316686][ T5841] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 113.337557][ T5841] usb 1-1: Manufacturer: syz [ 113.368337][ T5841] usb 1-1: config 0 descriptor?? [ 113.377923][ T5811] vhci_hcd: vhci_device speed not set [ 113.816957][ T5841] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 113.858745][ T5841] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 113.886988][ T5841] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 114.770105][ T5809] usb usb42-port1: attempt power cycle [ 115.447300][ T5809] usb usb42-port1: unable to enumerate USB device [ 116.413327][ T5841] usb 1-1: USB disconnect, device number 3 [ 116.713896][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 116.743249][ T6454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 116.749847][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.777155][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 116.797657][ T6459] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 116.804333][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.829941][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 116.846448][ T6454] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 116.853133][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.880696][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 116.927841][ T6454] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 116.934687][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.954064][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 116.978389][ T6459] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 116.985160][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.012357][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 117.037591][ T5809] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 117.046961][ T6454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 117.053619][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.086686][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 117.087327][ T6459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.147126][ T6454] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(23) [ 117.155028][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.207617][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 117.232497][ T6454] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(25) [ 117.239267][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.268809][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 117.272573][ T6459] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.340399][ T6478] vhci_hcd: connection closed [ 117.340634][ T6473] vhci_hcd: connection closed [ 117.340970][ T6464] vhci_hcd: connection closed [ 117.345751][ T5077] vhci_hcd: stop threads [ 117.351611][ T6460] vhci_hcd: connection closed [ 117.358515][ T5077] vhci_hcd: release socket [ 117.366982][ T6462] vhci_hcd: connection closed [ 117.368586][ T6481] vhci_hcd: connection closed [ 117.388530][ T6470] vhci_hcd: connection closed [ 117.394202][ T6457] vhci_hcd: connection reset by peer [ 117.407698][ T5077] vhci_hcd: disconnect device [ 117.435844][ T5077] vhci_hcd: stop threads [ 117.447279][ T5077] vhci_hcd: release socket [ 117.465363][ T5077] vhci_hcd: disconnect device [ 117.474915][ T5077] vhci_hcd: stop threads [ 117.484250][ T5077] vhci_hcd: release socket [ 117.491651][ T5077] vhci_hcd: disconnect device [ 117.500098][ T5077] vhci_hcd: stop threads [ 117.509620][ T5077] vhci_hcd: release socket [ 117.532338][ T5077] vhci_hcd: disconnect device [ 117.544617][ T5077] vhci_hcd: stop threads [ 117.551967][ T5077] vhci_hcd: release socket [ 117.562207][ T5077] vhci_hcd: disconnect device [ 117.572971][ T5077] vhci_hcd: stop threads [ 117.586047][ T5077] vhci_hcd: release socket [ 117.633112][ T5077] vhci_hcd: disconnect device [ 117.675764][ T5077] vhci_hcd: stop threads [ 117.717166][ T5077] vhci_hcd: release socket [ 117.770507][ T5077] vhci_hcd: disconnect device [ 117.834836][ T5077] vhci_hcd: stop threads [ 117.877720][ T5077] vhci_hcd: release socket [ 117.922104][ T5077] vhci_hcd: disconnect device [ 119.358719][ T6512] 9pnet_virtio: no channels available for device syz [ 122.191960][ T5809] vhci_hcd: vhci_device speed not set [ 122.287696][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.510240][ T787] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.567777][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.621766][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.657970][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.717952][ T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.738345][ T787] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.766787][ T787] usb 1-1: Manufacturer: syz [ 122.798829][ T787] usb 1-1: config 0 descriptor?? [ 123.237089][ T787] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 123.298872][ T787] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 123.400640][ T787] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 123.588292][ T5811] usb usb34-port1: attempt power cycle [ 124.268915][ T5811] usb usb34-port1: unable to enumerate USB device [ 124.451379][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.460158][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.000748][ T5809] usb 1-1: USB disconnect, device number 4 [ 125.334290][ T6577] 9pnet_virtio: no channels available for device syz [ 125.460074][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.561831][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.565351][ T6564] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.576283][ T6564] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.586726][ T6564] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.598901][ T6564] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.291805][ T6611] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 127.689513][ T6620] syzkaller0: entered promiscuous mode [ 127.707647][ T6620] syzkaller0: entered allmulticast mode [ 128.455783][ T6637] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 130.632056][ T6652] fuse: Bad value for 'fd' [ 132.917527][ T6667] Zero length message leads to an empty skb [ 133.078821][ T6669] overlayfs: failed to clone lowerpath [ 133.131130][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139179][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.288518][ T6734] fuse: Invalid rootmode [ 136.721809][ T6742] syzkaller0: entered promiscuous mode [ 136.727889][ T6742] syzkaller0: entered allmulticast mode [ 138.029364][ T6762] fuse: Unknown parameter '00000000000000000000' [ 140.032008][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 140.059286][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 141.504554][ T6855] netlink: 52 bytes leftover after parsing attributes in process `syz.1.258'. [ 142.578540][ T6876] syzkaller0: entered promiscuous mode [ 142.620234][ T6876] syzkaller0: entered allmulticast mode [ 144.159663][ T6909] ======================================================= [ 144.159663][ T6909] WARNING: The mand mount option has been deprecated and [ 144.159663][ T6909] and is ignored by this kernel. Remove the mand [ 144.159663][ T6909] option from the mount to silence this warning. [ 144.159663][ T6909] ======================================================= [ 147.464098][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 148.107289][ T6956] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 148.114071][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.156060][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 148.225801][ T6964] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 148.232498][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.255348][ T6956] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 148.262388][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.291215][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 148.312819][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 148.345785][ T6964] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 148.352578][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.368581][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 148.407500][ T6956] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 148.414167][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.427639][ T6589] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 148.499064][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 148.516505][ T6964] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 148.523249][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.569721][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 148.588332][ T6956] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 148.594997][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.768789][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 148.800469][ T6985] vhci_hcd: connection closed [ 148.800700][ T6978] vhci_hcd: connection closed [ 148.805537][ T6975] vhci_hcd: connection closed [ 148.810397][ T6960] vhci_hcd: connection reset by peer [ 148.827569][ T6968] vhci_hcd: connection closed [ 148.827771][ T6966] vhci_hcd: connection closed [ 148.832775][ T6981] vhci_hcd: connection closed [ 149.397775][ T6990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.294'. [ 150.058328][ T59] vhci_hcd: stop threads [ 150.083399][ T59] vhci_hcd: release socket [ 150.137554][ T59] vhci_hcd: disconnect device [ 150.165108][ T59] vhci_hcd: stop threads [ 150.192865][ T59] vhci_hcd: release socket [ 150.229058][ T59] vhci_hcd: disconnect device [ 150.278564][ T59] vhci_hcd: stop threads [ 150.309920][ T59] vhci_hcd: release socket [ 150.344404][ T59] vhci_hcd: disconnect device [ 150.369454][ T59] vhci_hcd: stop threads [ 150.373773][ T59] vhci_hcd: release socket [ 150.439836][ T59] vhci_hcd: disconnect device [ 150.454875][ T59] vhci_hcd: stop threads [ 150.468021][ T59] vhci_hcd: release socket [ 150.471323][ T7003] overlayfs: failed to clone upperpath [ 150.481537][ T59] vhci_hcd: disconnect device [ 150.505832][ T59] vhci_hcd: stop threads [ 150.527819][ T59] vhci_hcd: release socket [ 150.541964][ T59] vhci_hcd: disconnect device [ 150.556470][ T59] vhci_hcd: stop threads [ 150.560970][ T59] vhci_hcd: release socket [ 150.571313][ T59] vhci_hcd: disconnect device [ 154.587730][ T6589] vhci_hcd: vhci_device speed not set [ 156.453671][ T23] usb usb34-port1: attempt power cycle [ 156.868810][ T7112] overlayfs: failed to resolve './file0': -2 [ 157.040545][ T7119] overlayfs: failed to clone upperpath [ 157.149373][ T23] usb usb34-port1: unable to enumerate USB device [ 158.308051][ T7152] overlayfs: failed to resolve './file1': -2 [ 158.590688][ T7160] syz.4.339 uses obsolete (PF_INET,SOCK_PACKET) [ 159.242234][ T27] audit: type=1326 audit(1775020218.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.322291][ T27] audit: type=1326 audit(1775020218.736:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.451432][ T27] audit: type=1326 audit(1775020218.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.521044][ T27] audit: type=1326 audit(1775020218.786:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.591319][ T27] audit: type=1326 audit(1775020218.786:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.645927][ T27] audit: type=1326 audit(1775020218.786:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.684224][ T27] audit: type=1326 audit(1775020218.796:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.707840][ T27] audit: type=1326 audit(1775020218.806:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.745864][ T27] audit: type=1326 audit(1775020218.806:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 159.790384][ T7194] overlayfs: failed to clone upperpath [ 159.817257][ T27] audit: type=1326 audit(1775020218.806:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd964f9c819 code=0x7ffc0000 [ 162.628615][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 162.694348][ T7303] bond0: entered promiscuous mode [ 162.715570][ T7303] bond_slave_0: entered promiscuous mode [ 162.752401][ T7303] bond_slave_1: entered promiscuous mode [ 162.801318][ T7303] gretap0: entered promiscuous mode [ 162.826048][ T7303] hsr1: entered promiscuous mode [ 163.272256][ T7313] overlayfs: failed to clone upperpath [ 168.261411][ T7419] fuse: Unknown parameter '0x0000000000000005' [ 169.335486][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 169.414747][ T7432] fuse: Bad value for 'fd' [ 169.928049][ T7452] fuse: Unknown parameter '0x0000000000000005' [ 171.006974][ T7461] fuse: Bad value for 'fd' [ 171.073260][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 171.456801][ T7481] fuse: Unknown parameter '0x0000000000000005' [ 172.659792][ T7492] fuse: Bad value for 'fd' [ 174.154419][ T7514] fuse: Unknown parameter '0x0000000000000005' [ 175.857874][ T7539] overlayfs: failed to clone upperpath [ 175.942336][ T7543] fuse: Unknown parameter '0x0000000000000005' [ 177.087656][ T6588] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.119327][ T7570] fuse: Unknown parameter '0x0000000000000005' [ 177.291615][ T6588] usb 1-1: Using ep0 maxpacket: 16 [ 177.305572][ T6588] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.320283][ T6588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.347681][ T6588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.368304][ T6588] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.397506][ T6588] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.419832][ T6588] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.438095][ T6588] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.456639][ T6588] usb 1-1: Manufacturer: syz [ 177.471756][ T6588] usb 1-1: config 0 descriptor?? [ 177.898588][ T6588] rc_core: IR keymap rc-hauppauge not found [ 177.911423][ T6588] Registered IR keymap rc-empty [ 177.923139][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.924984][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.941529][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.990431][ T7597] fuse: Unknown parameter '0x0000000000000005' [ 177.999905][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.047113][ T6588] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 178.083668][ T6588] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 178.153061][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.240509][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.278972][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.330807][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.370451][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.441990][ T7601] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.462926][ T7601] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.534114][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.587688][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.629800][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.657870][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.698785][ T6588] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.739943][ T6588] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 178.753876][ T6588] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.277954][ T6588] usb 1-1: USB disconnect, device number 5 [ 180.498685][ T7614] overlayfs: failed to clone upperpath [ 180.994783][ T7626] autofs4:pid:7626:autofs_fill_super: called with bogus options [ 185.153584][ T7640] fuse: Unknown parameter '0x0000000000000005' [ 185.558659][ T7654] overlayfs: missing 'lowerdir' [ 185.956294][ T7666] fuse: Unknown parameter '0x0000000000000005' [ 186.205607][ T7677] overlayfs: missing 'lowerdir' [ 186.320020][ T7678] overlayfs: failed to clone upperpath [ 188.576413][ T7701] fuse: Unknown parameter 'fd0x0000000000000005' [ 189.048188][ T7707] overlayfs: missing 'lowerdir' [ 189.758182][ T7722] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 189.791249][ T7723] warning: `syz.1.523' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.931653][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 191.457157][ T7755] overlayfs: failed to clone upperpath [ 192.077552][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 192.484764][ T7766] "syz.3.540" (7766) uses obsolete ecb(arc4) skcipher [ 193.929824][ T7802] netlink: 84 bytes leftover after parsing attributes in process `syz.0.552'. [ 194.657873][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.678411][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.502574][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 197.502592][ T27] audit: type=1326 audit(1775020256.626:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 197.736138][ T27] audit: type=1326 audit(1775020256.626:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.1.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0019c819 code=0x7ffc0000 [ 198.981834][ T7831] syz.1.563[7831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 199.048081][ T6568] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.307625][ T6568] usb 1-1: Using ep0 maxpacket: 16 [ 199.340781][ T6568] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.361323][ T6568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.382761][ T6568] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.409862][ T6568] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 199.429941][ T6568] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.518181][ T6568] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.577679][ T6568] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.610609][ T6568] usb 1-1: Manufacturer: syz [ 199.809864][ T6568] usb 1-1: config 0 descriptor?? [ 200.257783][ T6568] rc_core: IR keymap rc-hauppauge not found [ 200.299655][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.322821][ T6568] Registered IR keymap rc-empty [ 200.347868][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 200.387588][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 200.390974][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.439242][ T6568] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 200.479669][ T6568] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 200.896247][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 200.957696][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.038067][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.077784][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.117713][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.197802][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.250026][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.301590][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.347579][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.387574][ T6568] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 201.439395][ T6568] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 201.481382][ T6568] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 201.510329][ T6568] usb 1-1: USB disconnect, device number 6 [ 201.759263][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 201.765437][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.585896][ T7935] syzkaller0: entered promiscuous mode [ 207.603693][ T7935] syzkaller0: entered allmulticast mode [ 210.263308][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 213.385221][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.392910][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.202782][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.239333][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.586613][ T7995] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.597192][ T7995] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.606877][ T7995] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.615832][ T7995] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.716699][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 216.008684][ T8054] 9pnet_virtio: no channels available for device syz [ 217.667992][ T8049] overlayfs: failed to clone lowerpath [ 218.986456][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 219.304410][ T8070] overlayfs: missing 'workdir' [ 220.110676][ T8094] overlayfs: missing 'workdir' [ 220.205577][ T8090] syz.1.646 (8090) used greatest stack depth: 17896 bytes left [ 220.648717][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 221.145756][ T8117] overlayfs: missing 'workdir' [ 222.237755][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 222.564116][ T8138] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 222.621336][ T8138] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 222.940978][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 223.803201][ T8168] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 223.822586][ T8168] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.574427][ T8178] mmap: syz.3.677 (8178) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 224.841816][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 225.360091][ T8202] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 225.371680][ T8202] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 225.730552][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 225.941749][ T8223] overlayfs: failed to clone upperpath [ 226.170566][ T8231] macvlan2: entered promiscuous mode [ 226.214607][ T8231] bridge0: entered promiscuous mode [ 227.847789][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 229.102345][ T8285] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 229.295286][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 230.913478][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 230.962123][ T8326] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 232.653742][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 235.734865][ T8419] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.833250][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 237.495209][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 238.546195][ T5778] Bluetooth: unknown link type 100 [ 238.552015][ T5778] Bluetooth: hci0: connection err: -111 [ 238.741952][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 239.325186][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 242.554687][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 244.661489][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 244.863631][ T8] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 244.877857][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.927529][ T8] usb 1-1: config 0 has no interface number 0 [ 244.950647][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 244.960167][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.973209][ T8] usb 1-1: Product: syz [ 244.983401][ T8] usb 1-1: Manufacturer: syz [ 244.993553][ T8] usb 1-1: SerialNumber: syz [ 245.012312][ T8] usb 1-1: config 0 descriptor?? [ 245.833631][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 247.119975][ T8012] usb 1-1: USB disconnect, device number 7 [ 247.351433][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 247.705282][ T8659] 9pnet_virtio: no channels available for device syz [ 248.620196][ T8671] netlink: 64 bytes leftover after parsing attributes in process `syz.3.855'. [ 249.351489][ T8686] overlayfs: failed to clone upperpath [ 249.482885][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 249.577598][ T8014] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 249.767683][ T8014] usb 1-1: Using ep0 maxpacket: 16 [ 249.783205][ T8014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.866606][ T8014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.933662][ T8014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.001003][ T8014] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.088609][ T8014] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.207901][ T8014] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.218657][ T8014] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.226818][ T8014] usb 1-1: Manufacturer: syz [ 250.234324][ T8014] usb 1-1: config 0 descriptor?? [ 250.677962][ T8014] rc_core: IR keymap rc-hauppauge not found [ 250.694034][ T8014] Registered IR keymap rc-empty [ 250.714593][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.760206][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.772491][ T8706] 9pnet_virtio: no channels available for device syz [ 250.788689][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.818209][ T8014] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 250.835893][ T8014] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 250.858521][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.887825][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.950200][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.077679][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.118130][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.157506][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.197579][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.249567][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.377984][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.379023][ T8713] overlayfs: failed to clone upperpath [ 251.408009][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.450455][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 251.500962][ T8014] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 251.554460][ T8014] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 251.597442][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 251.627905][ T8014] usb 1-1: USB disconnect, device number 8 [ 252.246231][ T8723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 252.773708][ T27] audit: type=1800 audit(1775020312.286:23): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.873" name="bus" dev="overlay" ino=853 res=0 errno=0 [ 252.962779][ T8735] syzkaller0: entered promiscuous mode [ 252.973592][ T8738] overlayfs: failed to clone upperpath [ 252.975511][ T8735] syzkaller0: entered allmulticast mode [ 253.019922][ T8741] bridge0: left promiscuous mode [ 253.036280][ T8741] macvlan2: left promiscuous mode [ 253.375548][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 253.459362][ T8754] overlayfs: failed to clone upperpath [ 254.210625][ T8766] overlayfs: failed to clone upperpath [ 254.554613][ T5778] Bluetooth: hci2: ACL packet too small [ 255.022743][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 255.096034][ T8790] overlayfs: failed to clone upperpath [ 255.836905][ T8780] orangefs_mount: mount request failed with -4 [ 256.001867][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008476][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.428914][ T8810] overlayfs: failed to clone upperpath [ 256.695511][ T8820] process 'syz.4.912' launched './file2' with NULL argv: empty string added [ 256.700277][ T8812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.882397][ T8014] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 257.052015][ T8812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.153603][ T8812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.197533][ T8014] usb 1-1: Using ep0 maxpacket: 16 [ 257.205041][ T8014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.220904][ T8014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.232758][ T8014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.243301][ T8014] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 257.263387][ T8014] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.283707][ T8812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.295926][ T8014] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 257.317733][ T8014] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 257.339890][ T8014] usb 1-1: Manufacturer: syz [ 257.350043][ T8014] usb 1-1: config 0 descriptor?? [ 257.525477][ T8812] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.569523][ T8812] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.599861][ T8812] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.641369][ T8812] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.708036][ T8014] rc_core: IR keymap rc-hauppauge not found [ 257.732624][ T8014] Registered IR keymap rc-empty [ 257.743076][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 257.778649][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.799688][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 257.815208][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.848691][ T8014] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 257.892143][ T8014] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 257.932311][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 257.985731][ T8840] overlayfs: failed to clone upperpath [ 257.992992][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 258.287523][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 258.328780][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 258.480845][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 258.632780][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 258.883083][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 258.948493][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.017848][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.122671][ T8014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 259.201494][ T8014] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 259.228316][ T8014] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 259.282422][ T8014] usb 1-1: USB disconnect, device number 9 [ 260.003970][ T1139] Bluetooth: Error in BCSP hdr checksum [ 260.680518][ T8874] overlayfs: failed to clone upperpath [ 261.468970][ T8904] overlayfs: failed to resolve '/ -': -2 [ 261.757922][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 261.758457][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 262.267030][ T8932] netlink: 'syz.1.954': attribute type 1 has an invalid length. [ 262.463463][ T8934] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.512361][ T8934] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 262.605016][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 262.609652][ T8939] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 262.676903][ T8938] bond1: (slave gretap1): making interface the new active one [ 262.696591][ T8938] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 262.737273][ T8932] macvlan3: entered promiscuous mode [ 262.757610][ T8932] macvlan3: entered allmulticast mode [ 262.764395][ T8932] bond1: entered promiscuous mode [ 262.773387][ T8932] gretap1: entered promiscuous mode [ 262.786153][ T8932] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 262.814862][ T8932] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 262.846981][ T8932] bond1: left promiscuous mode [ 262.858694][ T8932] gretap1: left promiscuous mode [ 264.393996][ T8964] overlayfs: missing 'lowerdir' [ 264.773844][ T8014] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 267.647489][ T8014] usb 1-1: Using ep0 maxpacket: 16 [ 268.015970][ T8014] usb 1-1: device descriptor read/all, error -71 [ 270.049451][ T8989] syz.0.971: attempt to access beyond end of device [ 270.049451][ T8989] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 270.062585][ T8989] exFAT-fs (nbd0): unable to read boot sector [ 270.068722][ T8989] exFAT-fs (nbd0): failed to read boot sector [ 270.074887][ T8989] exFAT-fs (nbd0): failed to recognize exfat type [ 272.448124][ T8012] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.687611][ T8012] usb 1-1: Using ep0 maxpacket: 16 [ 272.696841][ T8012] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.617520][ T8012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.647637][ T8012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.350937][ T8012] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.361172][ T8012] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.454397][ T8012] usb 1-1: string descriptor 0 read error: -71 [ 275.462160][ T8012] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.497625][ T8012] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.510070][ T8012] usb 1-1: config 0 descriptor?? [ 275.515818][ T8012] usb 1-1: can't set config #0, error -71 [ 275.524590][ T8012] usb 1-1: USB disconnect, device number 12 [ 276.669061][ T8012] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 278.959469][ T8012] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 279.015593][ T8012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.048332][ T8012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.099232][ T8012] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 279.135722][ T8012] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 279.165465][ T8012] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 279.192537][ T8012] usb 1-1: Manufacturer: syz [ 279.226385][ T8012] usb 1-1: config 0 descriptor?? [ 279.509540][ T8012] usbhid 1-1:0.0: can't add hid device: -71 [ 279.515636][ T8012] usbhid: probe of 1-1:0.0 failed with error -71 [ 279.690003][ T8012] usb 1-1: USB disconnect, device number 13 [ 280.628805][ T9104] 9pnet_virtio: no channels available for device syz [ 280.665364][ T9104] overlayfs: failed to clone lowerpath [ 283.024509][ T9117] orangefs_mount: mount request failed with -4 [ 284.007621][ T9138] 9pnet_virtio: no channels available for device syz [ 284.877506][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 284.998164][ T9140] overlayfs: failed to clone lowerpath [ 288.595233][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 289.446550][ T9177] orangefs_mount: mount request failed with -4 [ 292.109012][ T9228] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1049'. [ 292.264628][ T9232] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 292.402973][ T9232] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1051'. [ 292.428807][ T9232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.440945][ T9232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.450637][ T9232] bond0 (unregistering): Released all slaves [ 292.460188][ T8013] infiniband syz1: ib_query_port failed (-19) [ 294.606885][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.616846][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.962429][ T9276] autofs4:pid:9276:autofs_fill_super: called with bogus options [ 296.538467][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.572364][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.917124][ T9260] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.931961][ T9260] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.947965][ T9260] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.971124][ T9260] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.466524][ T9308] macvlan3: entered promiscuous mode [ 299.510483][ T9308] bridge0: entered promiscuous mode [ 299.917770][ T5778] Bluetooth: hci0: Unknown advertising packet type: 0x3c [ 299.917797][ T5778] Bluetooth: hci0: adv larger than maximum supported [ 299.925127][ T5778] Bluetooth: hci0: Malformed LE Event: 0x0d [ 300.666415][ T9320] bridge0: left promiscuous mode [ 300.675906][ T9320] macvlan3: left promiscuous mode [ 301.690662][ T9328] syzkaller0: entered promiscuous mode [ 301.697531][ T9328] syzkaller0: entered allmulticast mode [ 302.240770][ T9326] orangefs_mount: mount request failed with -4 [ 307.158127][ T9362] orangefs_mount: mount request failed with -4 [ 307.926979][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 308.380305][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.388649][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.728079][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.843044][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.044049][ T9382] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.054878][ T9382] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.065360][ T9382] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.075172][ T9382] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.306563][ T9382] hsr1: left promiscuous mode [ 313.877841][ T9442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1122'. [ 313.887903][ T9442] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562264580) [ 313.901358][ T9442] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 313.951282][ T9442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1122'. [ 314.239786][ T9442] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562264580) [ 314.297255][ T9442] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 314.498672][ T9447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 317.011544][ T5829] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 317.516729][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.525896][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.692296][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 318.318844][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 319.265412][ T5829] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 319.273346][ T5829] usb 1-1: can't read configurations, error -71 [ 321.748232][ T9531] 9pnet_virtio: no channels available for device syz [ 323.138219][ T9529] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 323.146899][ T9529] overlayfs: overlapping lowerdir path [ 326.157764][ T9565] 9pnet_virtio: no channels available for device syz [ 327.198005][ T9565] overlayfs: failed to clone lowerpath [ 329.257489][ T8014] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 329.527633][ T8014] usb 1-1: Using ep0 maxpacket: 16 [ 329.685810][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 329.845315][ T8014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.856050][ T8014] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 329.877426][ T8014] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.886983][ T8014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.985335][ T9612] 9pnet_virtio: no channels available for device syz [ 330.016855][ T9612] overlayfs: failed to clone lowerpath [ 330.244465][ T8014] usb 1-1: config 0 descriptor?? [ 330.546357][ T8014] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 333.226781][ T5829] usb 1-1: USB disconnect, device number 16 [ 334.697680][ T5778] Bluetooth: hci1: Malformed LE Event: 0x0d [ 336.612174][ T9743] 9pnet_virtio: no channels available for device syz [ 337.051845][ T9756] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 337.519326][ T9769] tipc: Started in network mode [ 337.524688][ T9769] tipc: Node identity 080211000001, cluster identity 4711 [ 337.538353][ T9769] tipc: Enabled bearer , priority 0 [ 338.418349][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.425980][ T9782] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.436618][ T9782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.659213][ T8012] tipc: Node number set to 134418688 [ 339.176263][ T9791] 9pnet_virtio: no channels available for device syz [ 344.427499][ T9851] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1259'. [ 346.316642][ T9881] 9pnet_virtio: no channels available for device syz [ 346.683806][ T9886] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 348.449186][ T9908] 9pnet_virtio: no channels available for device syz [ 349.755144][ T9924] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1287'. [ 350.234166][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1293'. [ 350.371287][ T9942] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 350.819571][ T9944] 9pnet_virtio: no channels available for device syz [ 351.074288][ T9953] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1298'. [ 352.069974][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 352.903931][ T5778] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 353.214167][ T9983] 9pnet_virtio: no channels available for device syz [ 355.118159][T10014] 9pnet_virtio: no channels available for device syz [ 357.122397][ T27] audit: type=1800 audit(1775020416.636:24): pid=10051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1337" name="/newroot/330/file0" dev="tmpfs" ino=1770 res=0 errno=0 [ 357.145059][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.752377][ T5778] Bluetooth: hci3: Malformed LE Event: 0x0d [ 367.603918][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 371.434780][T10226] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1395'. [ 372.637524][ T5829] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 372.822695][ T5829] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.845923][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.881747][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.919187][ T5829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.030951][ T5829] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.055744][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.066345][ T5829] usb 1-1: Product: syz [ 373.073616][ T5829] usb 1-1: Manufacturer: syz [ 373.099036][ T5829] cdc_wdm 1-1:1.0: skipping garbage [ 373.122471][ T5829] cdc_wdm 1-1:1.0: skipping garbage [ 373.187728][ T5829] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 373.193799][ T5829] cdc_wdm 1-1:1.0: Unknown control protocol [ 373.349285][ T5829] usb 1-1: USB disconnect, device number 17 [ 376.029356][ T5778] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 376.955537][T10310] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1427'. [ 378.207735][T10332] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1436'. [ 378.882542][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.890343][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.878444][T10360] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1448'. [ 380.787955][T10375] 9pnet_virtio: no channels available for device syz [ 381.917931][T10373] overlayfs: failed to clone lowerpath [ 383.139992][T10378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.154223][T10378] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.322252][T10378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.696449][T10388] netlink: 'syz.0.1459': attribute type 72 has an invalid length. [ 383.741298][ T5778] Bluetooth: hci1: unexpected event for opcode 0x080d [ 384.518069][T10405] 9pnet_virtio: no channels available for device syz [ 385.608293][T10405] overlayfs: failed to clone lowerpath [ 387.097412][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 387.593623][ T8010] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 388.127709][T10432] 9pnet_virtio: no channels available for device syz [ 389.107946][T10432] overlayfs: failed to clone lowerpath [ 390.189189][ T8010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.329621][ T8010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.363534][ T8010] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.438230][ T8010] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.477439][ T8010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.528988][ T8010] usb 1-1: config 0 descriptor?? [ 390.544959][ T8010] usb 1-1: can't set config #0, error -71 [ 390.585582][ T8010] usb 1-1: USB disconnect, device number 18 [ 390.893163][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 391.777944][T10464] 9pnet_virtio: no channels available for device syz [ 392.827945][T10463] overlayfs: failed to clone lowerpath [ 394.231189][ T5778] Bluetooth: hci1: Malformed LE Event: 0x0d [ 394.766472][ T27] audit: type=1800 audit(1775020454.276:25): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1494" name="/newroot/356/file0" dev="tmpfs" ino=1907 res=0 errno=0 [ 394.972606][T10499] 9pnet_virtio: no channels available for device syz [ 395.005836][T10499] overlayfs: failed to clone lowerpath [ 396.571987][ T5778] Bluetooth: hci2: Malformed LE Event: 0x0d [ 396.601714][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 397.267944][T10528] 9pnet_virtio: no channels available for device syz [ 398.420308][T10527] overlayfs: failed to clone lowerpath [ 399.658072][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 400.597649][T10559] 9pnet_virtio: no channels available for device syz [ 401.867978][T10559] overlayfs: failed to clone lowerpath [ 403.431767][T10578] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 403.482599][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 404.787527][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 406.143949][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 406.365640][ T5778] Bluetooth: hci1: Malformed LE Event: 0x0d [ 407.250216][ T5778] Bluetooth: hci1: Malformed LE Event: 0x0d [ 407.619907][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 407.630151][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 407.637937][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.648117][ T5778] Workqueue: hci1 hci_rx_work [ 407.652839][ T5778] Call Trace: [ 407.656297][ T5778] [ 407.659235][ T5778] dump_stack_lvl+0x18c/0x250 [ 407.663934][ T5778] ? show_regs_print_info+0x20/0x20 [ 407.669139][ T5778] ? load_image+0x400/0x400 [ 407.673654][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 407.678886][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 407.683568][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 407.688774][ T5778] kobject_add_internal+0x61c/0xcc0 [ 407.693993][ T5778] kobject_add+0x164/0x240 [ 407.698531][ T5778] ? __rwlock_init+0x150/0x150 [ 407.703304][ T5778] ? kobject_init+0x1e0/0x1e0 [ 407.707997][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 407.712868][ T5778] ? get_device_parent+0x366/0x390 [ 407.718050][ T5778] device_add+0x408/0xc20 [ 407.722667][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 407.727725][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 407.733027][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 407.738151][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 407.744419][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 407.750148][ T5778] ? skb_pull_data+0xfb/0x200 [ 407.754948][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 407.760599][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 407.766766][ T5778] hci_event_packet+0x7ba/0x1270 [ 407.771716][ T5778] ? bis_list+0x290/0x290 [ 407.776069][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 407.781290][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 407.786504][ T5778] hci_rx_work+0x43a/0xd60 [ 407.790950][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 407.796713][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 407.802426][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 407.807909][ T5778] ? assign_work+0x3d2/0x5d0 [ 407.812528][ T5778] worker_thread+0xa55/0xfc0 [ 407.817226][ T5778] kthread+0x2fa/0x390 [ 407.821390][ T5778] ? pr_cont_work+0x560/0x560 [ 407.826073][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 407.830836][ T5778] ret_from_fork+0x48/0x80 [ 407.835258][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 407.839857][ T5778] ret_from_fork_asm+0x11/0x20 [ 407.844681][ T5778] [ 407.849378][ T5778] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 407.863754][ T5778] Bluetooth: hci1: failed to register connection device [ 410.159950][T10715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.167825][T10715] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.187619][T10715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.491438][T10722] trusted_key: encrypted_key: insufficient parameters specified [ 410.719797][ T5778] Bluetooth: hci3: Malformed LE Event: 0x0d [ 410.986649][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 411.049562][T10743] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.063993][T10743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.391255][ T27] audit: type=1800 audit(1775020470.906:26): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1585" name="/newroot/504/file0" dev="tmpfs" ino=2712 res=0 errno=0 [ 411.408931][T10749] 9pnet_virtio: no channels available for device syz [ 411.907560][ T5778] Bluetooth: hci3: Malformed LE Event: 0x0d [ 412.052440][T10763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.120707][T10771] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1599'. [ 412.466431][ T27] audit: type=1800 audit(1775020471.976:27): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1600" name="/newroot/507/file0" dev="tmpfs" ino=2728 res=0 errno=0 [ 412.998005][ T5778] Bluetooth: hci0: Malformed LE Event: 0x0d [ 413.900785][ T27] audit: type=1800 audit(1775020473.416:28): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1615" name="/newroot/511/file0" dev="tmpfs" ino=2749 res=0 errno=0 [ 414.004492][ T5778] Bluetooth: hci3: Malformed LE Event: 0x0d [ 414.229039][T10825] overlayfs: failed to clone upperpath [ 414.411934][T10831] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1623'. [ 414.570377][ T5778] Bluetooth: hci1: Malformed LE Event: 0x0d [ 414.995150][T10849] 9pnet_virtio: no channels available for device syz [ 416.414315][T10876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.607609][ T6582] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 416.819212][ T6582] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.847487][ T6582] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 416.860992][ T6582] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.880577][ T6582] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.916887][ T6582] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.926987][ T6582] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.937247][ T6582] usb 1-1: Product: syz [ 416.958675][ T6582] usb 1-1: Manufacturer: syz [ 416.976569][ T6582] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 417.214286][ T8014] usb 1-1: USB disconnect, device number 19 [ 419.616588][T10949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.847876][ T8011] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 420.071593][ T8011] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 420.092768][ T8011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.124576][ T8011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.155385][ T8011] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 420.251410][ T8011] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 420.290758][ T8011] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 420.322924][ T8011] usb 1-1: Manufacturer: syz [ 420.340255][ T8011] usb 1-1: config 0 descriptor?? [ 420.790248][ T8011] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 420.857726][ T8011] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 420.893807][ T8011] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 421.059290][T10970] overlayfs: failed to clone upperpath [ 421.372440][T10977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.380922][T10977] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.392134][T10977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.597350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 421.667335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 422.137325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 423.047010][ T6585] usb 1-1: USB disconnect, device number 20 [ 423.807907][T11005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.697682][ T6585] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 424.920618][ T6585] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.951264][ T6585] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.984483][ T6585] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.001114][ T6585] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.049497][ T6585] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.077803][ T6585] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.128197][ T6585] usb 1-1: Product: syz [ 425.132415][ T6585] usb 1-1: Manufacturer: syz [ 425.342991][ T6585] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 425.558523][ T8011] usb 1-1: USB disconnect, device number 21 [ 428.965580][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 430.770835][T11103] pim6reg: entered allmulticast mode [ 430.823809][T11101] team0: entered allmulticast mode [ 430.829192][T11101] team_slave_0: entered allmulticast mode [ 430.834993][T11101] team_slave_1: entered allmulticast mode [ 430.841251][T11101] team0: left allmulticast mode [ 430.846115][T11101] team_slave_0: left allmulticast mode [ 430.851617][T11101] team_slave_1: left allmulticast mode [ 430.857196][T11101] pim6reg: left allmulticast mode [ 431.916224][ T5778] Bluetooth: hci0: unexpected event for opcode 0x000d [ 432.495730][T11145] 9pnet_virtio: no channels available for device syz [ 432.565535][T11145] overlayfs: failed to clone lowerpath [ 432.759497][T11148] nbd: must specify an index to disconnect [ 433.571800][ T5778] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 433.581744][ T5778] Bluetooth: hci3: Injecting HCI hardware error event [ 433.590506][ T5778] Bluetooth: hci3: hardware error 0x00 [ 435.326156][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 436.637490][ T5778] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 437.377954][T11192] overlayfs: failed to clone lowerpath [ 440.547922][T11219] overlayfs: failed to clone lowerpath [ 440.637415][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.643845][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.737997][T11218] syzkaller0: entered promiscuous mode [ 440.758812][T11218] syzkaller0: entered allmulticast mode [ 446.758726][T11262] overlayfs: failed to clone lowerpath [ 449.588045][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 453.447107][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 456.850635][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 457.724951][T11399] fuse: Bad value for 'fd' [ 461.663962][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 464.768635][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1844'. [ 464.994681][T11485] syz.1.1841 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 467.186073][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 468.124381][T11555] syzkaller0: entered promiscuous mode [ 468.145543][T11555] syzkaller0: entered allmulticast mode [ 469.427387][ T6582] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 469.697467][ T6582] usb 1-1: Using ep0 maxpacket: 32 [ 469.724433][ T6582] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 469.761981][ T6582] usb 1-1: config 0 has no interface number 0 [ 469.908390][ T6582] usb 1-1: config 0 interface 184 has no altsetting 0 [ 469.920776][ T6582] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 469.931781][ T6582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.961250][ T6582] usb 1-1: Product: syz [ 470.028741][ T6582] usb 1-1: Manufacturer: syz [ 470.047437][ T6582] usb 1-1: SerialNumber: syz [ 470.118612][ T6582] usb 1-1: config 0 descriptor?? [ 470.230551][ T6582] smsc75xx v1.0.0 [ 470.792898][ T6582] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 470.803880][ T6582] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.044351][ T6582] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 471.081514][ T6582] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 471.121854][ T6582] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 471.155251][ T6582] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 471.208060][ T6582] usb 1-1: USB disconnect, device number 22 [ 471.283939][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'. [ 471.785453][T11587] syzkaller0: entered promiscuous mode [ 471.792837][T11587] syzkaller0: entered allmulticast mode [ 474.115661][T11616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.095843][T11639] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 477.310527][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 477.335414][T11676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.777578][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 481.083800][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 481.717791][ T6587] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 481.969803][ T6587] usb 1-1: config 0 has no interfaces? [ 481.993559][ T6587] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 482.014662][ T6587] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.037383][ T6587] usb 1-1: Manufacturer: syz [ 482.044980][ T6587] usb 1-1: config 0 descriptor?? [ 482.549667][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 484.991385][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 485.137417][ T6587] usb 1-1: USB disconnect, device number 23 [ 485.550063][T11830] 9pnet_virtio: no channels available for device syz [ 487.525953][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 491.398528][T11893] 9pnet_virtio: no channels available for device syz [ 494.836574][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'. [ 495.558318][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 495.864776][T11939] 9pnet_virtio: no channels available for device syz [ 497.098540][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.227516][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.288212][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.634260][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.643821][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 497.653854][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.829535][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 498.915773][T11943] chnl_net:caif_netlink_parms(): no params data found [ 499.758649][ T5084] Bluetooth: hci4: command tx timeout [ 500.998194][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 501.465943][T11943] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.473713][T11943] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.484494][T11943] bridge_slave_0: entered allmulticast mode [ 501.510389][T11943] bridge_slave_0: entered promiscuous mode [ 501.599684][T11943] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.637536][T11943] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.645003][T11943] bridge_slave_1: entered allmulticast mode [ 501.688874][T11943] bridge_slave_1: entered promiscuous mode [ 501.765330][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.773331][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.838222][ T5084] Bluetooth: hci4: command tx timeout [ 502.006826][T11943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.071109][T11943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.641289][T12002] 9pnet_virtio: no channels available for device syz [ 502.707237][ T1139] bond1: (slave gretap1): Releasing active interface [ 503.193996][T11943] team0: Port device team_slave_0 added [ 503.205177][T11943] team0: Port device team_slave_1 added [ 503.510559][T11943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.555491][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.588206][T11943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.638613][T11943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.653530][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.726037][T11943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.917401][ T5084] Bluetooth: hci4: command tx timeout [ 504.099218][ T1139] hsr_slave_0: left promiscuous mode [ 504.136182][ T1139] hsr_slave_1: left promiscuous mode [ 504.168033][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.318142][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.363831][ T1139] bridge_slave_1: left allmulticast mode [ 504.387373][ T1139] bridge_slave_1: left promiscuous mode [ 504.403708][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.467032][ T1139] bridge_slave_0: left allmulticast mode [ 504.478771][ T1139] bridge_slave_0: left promiscuous mode [ 504.582044][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.142095][ T1139] bond1 (unregistering): Released all slaves [ 505.998474][ T5084] Bluetooth: hci4: command tx timeout [ 506.440579][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 506.506024][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 506.569348][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.673039][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.630725][ T1139] bond0 (unregistering): Released all slaves [ 507.755939][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 507.826550][T11943] hsr_slave_0: entered promiscuous mode [ 507.884446][T11943] hsr_slave_1: entered promiscuous mode [ 508.194701][T12072] 9pnet_virtio: no channels available for device syz [ 508.518223][T12062] orangefs_mount: mount request failed with -4 [ 511.650177][T12109] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 513.770833][T11943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 513.801102][T11943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.824479][T11943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.852533][T11943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.545531][T11943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.612562][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.679145][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.686305][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.722646][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.730012][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.836954][ T27] audit: type=1800 audit(1775020576.346:29): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2041" name="/newroot/568/file0" dev="tmpfs" ino=3031 res=0 errno=0 [ 516.868667][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.068531][T11943] veth0_vlan: entered promiscuous mode [ 517.104671][T11943] veth1_vlan: entered promiscuous mode [ 517.202918][T11943] veth0_macvtap: entered promiscuous mode [ 517.226617][T11943] veth1_macvtap: entered promiscuous mode [ 517.247347][ T6587] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 517.282402][T11943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.317145][T11943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.336443][T11943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.345836][T11943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.355972][T11943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.366790][T11943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.450612][ T6587] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 517.466479][ T6587] usb 1-1: config 0 interface 0 has no altsetting 0 [ 517.482826][ T6587] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 517.498813][ T6587] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 517.516325][ T6587] usb 1-1: Product: syz [ 517.535175][ T6587] usb 1-1: Manufacturer: syz [ 517.547044][ T6587] usb 1-1: SerialNumber: syz [ 517.560896][ T6587] usb 1-1: config 0 descriptor?? [ 517.582431][ T6587] usb 1-1: selecting invalid altsetting 0 [ 517.919204][T12177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.940875][T12177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.003168][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.038931][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.052003][ T6587] usb 1-1: USB disconnect, device number 24 [ 518.220410][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.230337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.569738][ T27] audit: type=1800 audit(1775020578.086:30): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2052" name="/newroot/574/file0" dev="tmpfs" ino=3062 res=0 errno=0 [ 519.731669][T12245] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 520.653200][ T27] audit: type=1800 audit(1775020580.166:31): pid=12248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2061" name="/newroot/1/file0" dev="tmpfs" ino=23 res=0 errno=0 [ 523.756713][T12274] 9pnet_virtio: no channels available for device syz [ 524.579138][T12243] vlan2: entered promiscuous mode [ 524.584203][T12243] bridge0: entered promiscuous mode [ 525.340460][T12292] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 528.585495][T12322] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.624665][T12322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.835008][ T27] audit: type=1800 audit(1775020590.326:32): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2082" name="/newroot/584/file0" dev="tmpfs" ino=3113 res=0 errno=0 [ 531.820086][T12371] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 533.427037][ T27] audit: type=1800 audit(1775020592.936:33): pid=12387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2093" name="/newroot/9/file0" dev="tmpfs" ino=67 res=0 errno=0 [ 533.694257][T12398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.780976][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 534.940103][ T27] audit: type=1800 audit(1775020594.456:34): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2107" name="/newroot/517/file0" dev="tmpfs" ino=2739 res=0 errno=0 [ 535.097193][T12434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.121806][T12420] orangefs_mount: mount request failed with -4 [ 537.695194][T12464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.445571][ T27] audit: type=1800 audit(1775020597.956:35): pid=12473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2122" name="/newroot/519/file0" dev="tmpfs" ino=2750 res=0 errno=0 [ 538.550847][T12468] orangefs_mount: mount request failed with -4 [ 539.076248][T12493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.857679][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.869391][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.877942][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.887128][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.906714][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 540.915450][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.482073][T12517] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 541.674618][T12507] chnl_net:caif_netlink_parms(): no params data found [ 542.036226][T12507] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.044362][T12507] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.067519][T12507] bridge_slave_0: entered allmulticast mode [ 542.075174][T12507] bridge_slave_0: entered promiscuous mode [ 542.087827][T12507] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.095090][T12507] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.100395][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2139'. [ 542.102981][T12507] bridge_slave_1: entered allmulticast mode [ 542.134646][T12529] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 542.149212][T12507] bridge_slave_1: entered promiscuous mode [ 542.320295][T12507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.252385][ T5778] Bluetooth: hci1: command tx timeout [ 543.271698][T12533] orangefs_mount: mount request failed with -4 [ 543.323387][T12507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.495384][T12507] team0: Port device team_slave_0 added [ 543.536808][T12507] team0: Port device team_slave_1 added [ 543.625439][T12507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.654983][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.690823][T12507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.719578][T12507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.727453][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.754037][T12507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.824664][T12546] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 543.978767][T12507] hsr_slave_0: entered promiscuous mode [ 543.996914][T12507] hsr_slave_1: entered promiscuous mode [ 544.023933][T12507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.032051][T12507] Cannot create hsr debugfs directory [ 545.277837][ T5778] Bluetooth: hci1: command tx timeout [ 545.613945][T12507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 545.651018][T12507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 545.687733][T12507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 545.737860][T12507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.086272][T12507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.205953][T12507] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.265873][T12507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.283120][T12507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.306686][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.313855][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.461051][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.468305][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.789723][T12585] orangefs_mount: mount request failed with -4 [ 547.190618][T12507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.323098][T12507] veth0_vlan: entered promiscuous mode [ 547.357805][ T5778] Bluetooth: hci1: command tx timeout [ 547.392256][T12507] veth1_vlan: entered promiscuous mode [ 547.428111][T12507] veth0_macvtap: entered promiscuous mode [ 547.469088][T12507] veth1_macvtap: entered promiscuous mode [ 547.529880][T12507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.545631][T12507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.570773][T12507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.606074][T12507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.630126][T12507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.659518][T12507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.690474][T12507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.711664][T12507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.732852][T12507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.755332][T12507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.031190][T12246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.054804][T12246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.131137][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.140798][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.437863][ T5778] Bluetooth: hci1: command tx timeout [ 549.598460][T12626] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 549.836699][ T27] audit: type=1800 audit(1775020609.346:36): pid=12620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2165" name="/newroot/3/file0" dev="tmpfs" ino=33 res=0 errno=0 [ 551.238364][T12653] 9pnet_virtio: no channels available for device syz [ 552.057848][ T27] audit: type=1800 audit(1775020611.546:37): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2178" name="/newroot/394/file0" dev="tmpfs" ino=2112 res=0 errno=0 [ 552.736857][T12679] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 553.854267][ T27] audit: type=1800 audit(1775020613.356:38): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2190" name="/newroot/11/file0" dev="tmpfs" ino=74 res=0 errno=0 [ 553.980617][T12711] 9pnet_virtio: no channels available for device syz [ 554.665415][T12718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.447682][ T27] audit: type=1800 audit(1775020615.956:39): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2204" name="/newroot/546/file0" dev="tmpfs" ino=2891 res=0 errno=0 [ 556.861847][T12742] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2205'. [ 556.871114][T12742] ------------[ cut here ]------------ [ 556.877372][T12742] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 556.890468][T12742] WARNING: CPU: 0 PID: 12742 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 556.899906][T12742] Modules linked in: [ 556.903852][T12742] CPU: 0 PID: 12742 Comm: syz.3.2205 Not tainted syzkaller #0 [ 556.911457][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.922055][T12742] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 556.927699][T12742] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 556.947670][T12742] RSP: 0018:ffffc90003ad6d40 EFLAGS: 00010246 [ 556.954074][T12742] RAX: ba0e19dbbc852000 RBX: ffff88802f946000 RCX: 0000000000080000 [ 556.962583][T12742] RDX: ffffc9000d2bb000 RSI: 0000000000006729 RDI: 000000000000672a [ 556.970665][T12742] RBP: ffffc90003ad6ef8 R08: ffffc90003ad6a47 R09: 1ffff9200075ad48 [ 556.978823][T12742] R10: dffffc0000000000 R11: fffff5200075ad49 R12: ffff88802f944000 [ 556.987354][T12742] R13: ffff88802f9440e8 R14: 0000000000000020 R15: ffff88807b418000 [ 556.995546][T12742] FS: 00007f8fe4e246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 557.004624][T12742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.011564][T12742] CR2: 0000001b34821ff6 CR3: 000000005eb41000 CR4: 00000000003506f0 [ 557.019780][T12742] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 557.027834][T12742] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 557.036025][T12742] Call Trace: [ 557.039433][T12742] [ 557.042405][T12742] ? tc_new_tfilter+0x8f7/0x17c0 [ 557.047602][T12742] ? u32_get+0x370/0x370 [ 557.051925][T12742] ? u32_get+0x370/0x370 [ 557.056216][T12742] tc_new_tfilter+0x11f9/0x17c0 [ 557.061232][T12742] ? tcf_proto_signal_destroying+0x240/0x240 [ 557.067342][T12742] ? rcu_read_unlock+0x8c/0xa0 [ 557.072173][T12742] ? tcf_proto_signal_destroying+0x240/0x240 [ 557.078475][T12742] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 557.084088][T12742] ? tcf_proto_signal_destroying+0x240/0x240 [ 557.090387][T12742] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 557.095478][T12742] ? lockdep_hardirqs_on+0x98/0x150 [ 557.100776][T12742] ? rtnetlink_bind+0x80/0x80 [ 557.106881][T12742] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 557.113849][T12742] ? lock_chain_count+0x20/0x20 [ 557.118846][T12742] ? __local_bh_enable_ip+0x13a/0x1c0 [ 557.124288][T12742] ? lockdep_hardirqs_on+0x98/0x150 [ 557.129875][T12742] ? __local_bh_enable_ip+0x13a/0x1c0 [ 557.135295][T12742] ? _local_bh_enable+0xa0/0xa0 [ 557.140301][T12742] ? __dev_queue_xmit+0x265/0x3660 [ 557.145462][T12742] ? __dev_queue_xmit+0x265/0x3660 [ 557.150792][T12742] ? __dev_queue_xmit+0x1b2c/0x3660 [ 557.156055][T12742] ? __dev_queue_xmit+0x265/0x3660 [ 557.161302][T12742] ? ref_tracker_free+0x690/0x840 [ 557.166387][T12742] netlink_rcv_skb+0x241/0x4d0 [ 557.171369][T12742] ? rtnetlink_bind+0x80/0x80 [ 557.176100][T12742] ? netlink_ack+0x1180/0x1180 [ 557.180985][T12742] ? __lock_acquire+0x7d40/0x7d40 [ 557.186503][T12742] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.191957][T12742] netlink_unicast+0x751/0x8d0 [ 557.196885][T12742] netlink_sendmsg+0x8d0/0xbf0 [ 557.201839][T12742] ? netlink_getsockopt+0x590/0x590 [ 557.207113][T12742] ? aa_sock_msg_perm+0x94/0x150 [ 557.212190][T12742] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 557.217683][T12742] ? security_socket_sendmsg+0x80/0xa0 [ 557.223277][T12742] ? netlink_getsockopt+0x590/0x590 [ 557.229072][T12742] ____sys_sendmsg+0x5ba/0x960 [ 557.233982][T12742] ? __asan_memset+0x22/0x40 [ 557.238676][T12742] ? __sys_sendmsg_sock+0x30/0x30 [ 557.243742][T12742] ? __import_iovec+0x5f2/0x850 [ 557.248698][T12742] ? import_iovec+0x73/0xa0 [ 557.253248][T12742] ___sys_sendmsg+0x2a6/0x360 [ 557.258067][T12742] ? __sys_sendmsg+0x2a0/0x2a0 [ 557.263019][T12742] __sys_sendmmsg+0x2ca/0x510 [ 557.267816][T12742] ? __ia32_sys_sendmsg+0x90/0x90 [ 557.273153][T12742] ? __ia32_sys_get_robust_list+0x110/0x110 [ 557.279235][T12742] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 557.285276][T12742] ? lock_chain_count+0x20/0x20 [ 557.290768][T12742] __x64_sys_sendmmsg+0xa0/0xb0 [ 557.295855][T12742] do_syscall_64+0x55/0xa0 [ 557.300506][T12742] ? clear_bhb_loop+0x40/0x90 [ 557.305236][T12742] ? clear_bhb_loop+0x40/0x90 [ 557.310123][T12742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.316333][T12742] RIP: 0033:0x7f8fe3f9c819 [ 557.321041][T12742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.340866][T12742] RSP: 002b:00007f8fe4e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.349407][T12742] RAX: ffffffffffffffda RBX: 00007f8fe4215fa0 RCX: 00007f8fe3f9c819 [ 557.357908][T12742] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 557.365936][T12742] RBP: 00007f8fe4032c91 R08: 0000000000000000 R09: 0000000000000000 [ 557.374161][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.382263][T12742] R13: 00007f8fe4216038 R14: 00007f8fe4215fa0 R15: 00007ffde0117048 [ 557.390781][T12742] [ 557.393845][T12742] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 557.401168][T12742] CPU: 0 PID: 12742 Comm: syz.3.2205 Not tainted syzkaller #0 [ 557.408670][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.418863][T12742] Call Trace: [ 557.422177][T12742] [ 557.425155][T12742] dump_stack_lvl+0x18c/0x250 [ 557.429894][T12742] ? show_regs_print_info+0x20/0x20 [ 557.435125][T12742] ? load_image+0x400/0x400 [ 557.439679][T12742] panic+0x2dc/0x730 [ 557.443603][T12742] ? bpf_jit_dump+0xd0/0xd0 [ 557.448219][T12742] __warn+0x2e0/0x470 [ 557.452212][T12742] ? u32_change+0x1c5a/0x24f0 [ 557.456995][T12742] ? u32_change+0x1c5a/0x24f0 [ 557.461693][T12742] report_bug+0x2be/0x4f0 [ 557.466074][T12742] ? u32_change+0x1c5a/0x24f0 [ 557.470987][T12742] ? u32_change+0x1c5a/0x24f0 [ 557.475780][T12742] ? u32_change+0x1c5c/0x24f0 [ 557.480479][T12742] handle_bug+0xcf/0x120 [ 557.484740][T12742] exc_invalid_op+0x1a/0x50 [ 557.489343][T12742] asm_exc_invalid_op+0x1a/0x20 [ 557.494221][T12742] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 557.500045][T12742] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 557.519749][T12742] RSP: 0018:ffffc90003ad6d40 EFLAGS: 00010246 [ 557.525910][T12742] RAX: ba0e19dbbc852000 RBX: ffff88802f946000 RCX: 0000000000080000 [ 557.533954][T12742] RDX: ffffc9000d2bb000 RSI: 0000000000006729 RDI: 000000000000672a [ 557.542033][T12742] RBP: ffffc90003ad6ef8 R08: ffffc90003ad6a47 R09: 1ffff9200075ad48 [ 557.550192][T12742] R10: dffffc0000000000 R11: fffff5200075ad49 R12: ffff88802f944000 [ 557.558181][T12742] R13: ffff88802f9440e8 R14: 0000000000000020 R15: ffff88807b418000 [ 557.566261][T12742] ? tc_new_tfilter+0x8f7/0x17c0 [ 557.571230][T12742] ? u32_get+0x370/0x370 [ 557.575505][T12742] ? u32_get+0x370/0x370 [ 557.579941][T12742] tc_new_tfilter+0x11f9/0x17c0 [ 557.584830][T12742] ? tcf_proto_signal_destroying+0x240/0x240 [ 557.590928][T12742] ? rcu_read_unlock+0x8c/0xa0 [ 557.595708][T12742] ? tcf_proto_signal_destroying+0x240/0x240 [ 557.601706][T12742] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 557.606911][T12742] ? tcf_proto_signal_destroying+0x240/0x240 [ 557.612904][T12742] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 557.617856][T12742] ? lockdep_hardirqs_on+0x98/0x150 [ 557.623067][T12742] ? rtnetlink_bind+0x80/0x80 [ 557.627757][T12742] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 557.633748][T12742] ? lock_chain_count+0x20/0x20 [ 557.638608][T12742] ? __local_bh_enable_ip+0x13a/0x1c0 [ 557.643986][T12742] ? lockdep_hardirqs_on+0x98/0x150 [ 557.649194][T12742] ? __local_bh_enable_ip+0x13a/0x1c0 [ 557.654579][T12742] ? _local_bh_enable+0xa0/0xa0 [ 557.659455][T12742] ? __dev_queue_xmit+0x265/0x3660 [ 557.664580][T12742] ? __dev_queue_xmit+0x265/0x3660 [ 557.669700][T12742] ? __dev_queue_xmit+0x1b2c/0x3660 [ 557.674929][T12742] ? __dev_queue_xmit+0x265/0x3660 [ 557.680065][T12742] ? ref_tracker_free+0x690/0x840 [ 557.685368][T12742] netlink_rcv_skb+0x241/0x4d0 [ 557.690189][T12742] ? rtnetlink_bind+0x80/0x80 [ 557.694884][T12742] ? netlink_ack+0x1180/0x1180 [ 557.699676][T12742] ? __lock_acquire+0x7d40/0x7d40 [ 557.704720][T12742] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.709937][T12742] netlink_unicast+0x751/0x8d0 [ 557.714727][T12742] netlink_sendmsg+0x8d0/0xbf0 [ 557.719521][T12742] ? netlink_getsockopt+0x590/0x590 [ 557.724742][T12742] ? aa_sock_msg_perm+0x94/0x150 [ 557.729713][T12742] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 557.735096][T12742] ? security_socket_sendmsg+0x80/0xa0 [ 557.740579][T12742] ? netlink_getsockopt+0x590/0x590 [ 557.745792][T12742] ____sys_sendmsg+0x5ba/0x960 [ 557.750660][T12742] ? __asan_memset+0x22/0x40 [ 557.755261][T12742] ? __sys_sendmsg_sock+0x30/0x30 [ 557.760291][T12742] ? __import_iovec+0x5f2/0x850 [ 557.765162][T12742] ? import_iovec+0x73/0xa0 [ 557.769960][T12742] ___sys_sendmsg+0x2a6/0x360 [ 557.774677][T12742] ? __sys_sendmsg+0x2a0/0x2a0 [ 557.779595][T12742] __sys_sendmmsg+0x2ca/0x510 [ 557.784307][T12742] ? __ia32_sys_sendmsg+0x90/0x90 [ 557.789620][T12742] ? __ia32_sys_get_robust_list+0x110/0x110 [ 557.795536][T12742] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 557.801798][T12742] ? lock_chain_count+0x20/0x20 [ 557.806672][T12742] __x64_sys_sendmmsg+0xa0/0xb0 [ 557.811538][T12742] do_syscall_64+0x55/0xa0 [ 557.815974][T12742] ? clear_bhb_loop+0x40/0x90 [ 557.820749][T12742] ? clear_bhb_loop+0x40/0x90 [ 557.825437][T12742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.831430][T12742] RIP: 0033:0x7f8fe3f9c819 [ 557.835873][T12742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.855580][T12742] RSP: 002b:00007f8fe4e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.864017][T12742] RAX: ffffffffffffffda RBX: 00007f8fe4215fa0 RCX: 00007f8fe3f9c819 [ 557.872260][T12742] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 557.880328][T12742] RBP: 00007f8fe4032c91 R08: 0000000000000000 R09: 0000000000000000 [ 557.888309][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.896524][T12742] R13: 00007f8fe4216038 R14: 00007f8fe4215fa0 R15: 00007ffde0117048 [ 557.904612][T12742] [ 557.907768][T12742] Kernel Offset: disabled [ 557.912115][T12742] Rebooting in 86400 seconds..