last executing test programs: 57.352312s ago: executing program 1 (id=584): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 56.465984425s ago: executing program 1 (id=609): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/contro', 0x12) lseek(r0, 0x0, 0x0) read(r0, &(0x7f0000000100), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0xc138fd11, 0x0) 56.376559316s ago: executing program 1 (id=610): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r0, &(0x7f0000000140)=""/214, 0xd6) 56.376180438s ago: executing program 1 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 56.373978511s ago: executing program 1 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x6006}, @val={0x1, 0x4, 0x47, 0x2, 0x80, 0x6}, @mpls={[], @llc={@llc={0xaa, 0xff, '>', "20c3e9fd647f7f1d3b641d81c0971d3bd60f9594c9dde7a340c51ad97f1f4a1cf3fba7ebd6a8318eee27e72f4f4c15af53597d55edb758306ec88f6e37161bac8cea0a12cb8304bc874428e23fbc71380dcded9bf0dc780357426c5dade2cb2a36a83f0dcce7c46b23eea07c3cc068d5e381e4eb77945fa160159743b63d66139c0a5fc728"}}}}, 0x96) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') lseek(r2, 0x2, 0x0) 55.736695409s ago: executing program 1 (id=622): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x40, 0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 55.678923611s ago: executing program 32 (id=622): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x40, 0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.78586949s ago: executing program 4 (id=1441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4090, 0xffa}], 0x1}, 0xfff}], 0x26, 0x10022, 0x0) 1.556241027s ago: executing program 0 (id=1446): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @delba={0x3, 0x2, {{0x0, 0x0, 0x2}, 0x3e, {0xbd, 0x6, @device_b}}}}}]}, 0x48}}, 0x0) 1.500295246s ago: executing program 0 (id=1447): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.435185302s ago: executing program 0 (id=1448): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, {0x7}, 0x34, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0xe7}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c) splice(r3, 0x0, r4, 0x0, 0xce2, 0x4) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xb}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0xfffd, 0x0) r7 = dup(0xffffffffffffffff) write$FUSE_BMAP(r7, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 1.34604163s ago: executing program 4 (id=1450): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000000300)) 726.557418ms ago: executing program 2 (id=1456): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 726.077674ms ago: executing program 2 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0xd75d, 0x5, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 676.069891ms ago: executing program 2 (id=1460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x18, 0x2, 0x9, 0x205, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040040}, 0x40004) 675.942652ms ago: executing program 2 (id=1461): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x8568, &(0x7f0000000240)=[{0xfffffffffffffffc, 0x0, 0x4}], 0x1, 0x3, 0x0, 0x0, 0x45, 0x51}) 625.559296ms ago: executing program 2 (id=1463): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) io_uring_setup(0x7, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 516.048724ms ago: executing program 0 (id=1464): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000004900010028bd7000fbdbdf250a008000", @ANYRES32, @ANYBLOB="f8ffffff0800020001000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044044) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x6}, 0x800, 0x80, &(0x7f0000000000)={0x5, 0x14, 0x8000, 0x7f, 0x7fff}, 0x8, 0x2, 0x9, 0x0, 0x4, 0x8, 0x0}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000dae900000014000200fe8040000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040884}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 507.564437ms ago: executing program 3 (id=1465): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0xfffc, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x190) 443.131414ms ago: executing program 4 (id=1466): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 442.080854ms ago: executing program 2 (id=1467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40004) recvmmsg(r5, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4090, 0xffa}], 0x1}, 0xfff}], 0x26, 0x10022, 0x0) 354.656263ms ago: executing program 3 (id=1468): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 305.468991ms ago: executing program 3 (id=1469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0020803c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000400000000000000000000000000000000000000000000000000000090000000000000000002080900"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x47, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 305.257375ms ago: executing program 4 (id=1470): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 304.548844ms ago: executing program 3 (id=1471): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010"], 0x38}}, 0x0) 214.75205ms ago: executing program 3 (id=1472): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) 213.835322ms ago: executing program 4 (id=1473): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b2e64640f01c5aaf82766b866878a8566efbafc0cedbaf80c66b8e057308c66efbafc0c66b80900000066eff30fc7b30000", 0x47}], 0x1, 0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x660000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 213.710755ms ago: executing program 3 (id=1474): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000000300)) 57.259345ms ago: executing program 4 (id=1475): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x1a, 0x0, @opaque="0123456789abcdef0123456789abcdef01be"}}}, 0x38) 43.793737ms ago: executing program 0 (id=1476): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4d040, &(0x7f0000001100)={0xa, 0x1, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=""/5, 0x56}, 0x400}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x40010162, 0x0) 0s ago: executing program 0 (id=1477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24008004) 0s ago: executing program 0 (id=1478): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x12d1, 0x553}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xec}}}}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50111' (ED25519) to the list of known hosts. [ 42.317288][ T5718] cgroup: Unknown subsys name 'net' [ 42.507304][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.511724][ T5718] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.460777][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.747915][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.748667][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.752190][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.753908][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.760001][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.760148][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.763367][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.768779][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.769427][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.770701][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.771213][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.773608][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.774956][ T5758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.781854][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.785208][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.785713][ T5758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.787836][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.788671][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.789614][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.790172][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.472736][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.476551][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.481056][ T5742] bridge_slave_0: entered allmulticast mode [ 48.485408][ T5742] bridge_slave_0: entered promiscuous mode [ 48.507492][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.510813][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.513948][ T5742] bridge_slave_1: entered allmulticast mode [ 48.518044][ T5742] bridge_slave_1: entered promiscuous mode [ 48.579185][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.581617][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.584370][ T5755] bridge_slave_0: entered allmulticast mode [ 48.587156][ T5755] bridge_slave_0: entered promiscuous mode [ 48.595985][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.598902][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.601719][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.604316][ T5749] bridge_slave_0: entered allmulticast mode [ 48.607225][ T5749] bridge_slave_0: entered promiscuous mode [ 48.610829][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.613449][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.615746][ T5755] bridge_slave_1: entered allmulticast mode [ 48.618412][ T5755] bridge_slave_1: entered promiscuous mode [ 48.629701][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.639303][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.641941][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.644415][ T5749] bridge_slave_1: entered allmulticast mode [ 48.647221][ T5749] bridge_slave_1: entered promiscuous mode [ 48.690239][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.699949][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.704096][ T5742] team0: Port device team_slave_0 added [ 48.707967][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.712784][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.715892][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.718993][ T5746] bridge_slave_0: entered allmulticast mode [ 48.723110][ T5746] bridge_slave_0: entered promiscuous mode [ 48.742207][ T5742] team0: Port device team_slave_1 added [ 48.751434][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.754645][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.757269][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.759942][ T5746] bridge_slave_1: entered allmulticast mode [ 48.762954][ T5746] bridge_slave_1: entered promiscuous mode [ 48.775382][ T5755] team0: Port device team_slave_0 added [ 48.779091][ T5755] team0: Port device team_slave_1 added [ 48.819913][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.824147][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.827073][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.837542][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.866124][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.869952][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.873180][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.883497][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.890129][ T5749] team0: Port device team_slave_0 added [ 48.893166][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.896111][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.905592][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.931175][ T5749] team0: Port device team_slave_1 added [ 48.933799][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.936086][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.944331][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.957260][ T5746] team0: Port device team_slave_0 added [ 48.985692][ T5746] team0: Port device team_slave_1 added [ 49.003611][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.006185][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.016543][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.022008][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.024891][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.035233][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.075566][ T5742] hsr_slave_0: entered promiscuous mode [ 49.078223][ T5742] hsr_slave_1: entered promiscuous mode [ 49.091951][ T5755] hsr_slave_0: entered promiscuous mode [ 49.095192][ T5755] hsr_slave_1: entered promiscuous mode [ 49.098163][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 49.100599][ T5755] Cannot create hsr debugfs directory [ 49.110789][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.112887][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.120239][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.124452][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.126511][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.133804][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.174629][ T5749] hsr_slave_0: entered promiscuous mode [ 49.177403][ T5749] hsr_slave_1: entered promiscuous mode [ 49.180295][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 49.182971][ T5749] Cannot create hsr debugfs directory [ 49.274041][ T5746] hsr_slave_0: entered promiscuous mode [ 49.277237][ T5746] hsr_slave_1: entered promiscuous mode [ 49.280245][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 49.282773][ T5746] Cannot create hsr debugfs directory [ 49.515678][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.525064][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.528081][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.533349][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.536188][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.540858][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.544508][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.549899][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.592990][ T5749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.599605][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.602430][ T5749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.607355][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.615655][ T5749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.622923][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.625841][ T5749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.632167][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.695525][ T5755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.701118][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.704465][ T5755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.708701][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.713189][ T5755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.718238][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.721990][ T5755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.727390][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.782173][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.783177][ T5758] Bluetooth: hci0: command tx timeout [ 49.805016][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.809291][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.812367][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.816846][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.819631][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.823979][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.826761][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.830666][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.863275][ T5758] Bluetooth: hci3: command tx timeout [ 49.863295][ T5744] Bluetooth: hci2: command tx timeout [ 49.868521][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.872988][ T5758] Bluetooth: hci1: command tx timeout [ 49.882635][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.885430][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.895316][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.906006][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.908310][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.931679][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.943796][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.946147][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.960109][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.962494][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.982206][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.021783][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.034519][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.036905][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.057949][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.062809][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.065168][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.089536][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.105029][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.107364][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.134962][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.138195][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.323999][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.345373][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.364687][ T5749] veth0_vlan: entered promiscuous mode [ 50.374544][ T5749] veth1_vlan: entered promiscuous mode [ 50.399324][ T5742] veth0_vlan: entered promiscuous mode [ 50.415608][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.424114][ T5749] veth0_macvtap: entered promiscuous mode [ 50.431651][ T5742] veth1_vlan: entered promiscuous mode [ 50.441485][ T5749] veth1_macvtap: entered promiscuous mode [ 50.477116][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.483291][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.487572][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.523445][ T5755] veth0_vlan: entered promiscuous mode [ 50.529026][ T5742] veth0_macvtap: entered promiscuous mode [ 50.539440][ T5742] veth1_macvtap: entered promiscuous mode [ 50.545574][ T5755] veth1_vlan: entered promiscuous mode [ 50.579098][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.603693][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.611713][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.614944][ T5746] veth0_vlan: entered promiscuous mode [ 50.618310][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.643880][ T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.644160][ T5755] veth0_macvtap: entered promiscuous mode [ 50.646936][ T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.659372][ T5755] veth1_macvtap: entered promiscuous mode [ 50.665443][ T5746] veth1_vlan: entered promiscuous mode [ 50.683240][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.705208][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.726837][ T5749] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.730249][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.737166][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.744685][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.755599][ T5749] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.762608][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.764825][ T5749] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.774152][ T5746] veth0_macvtap: entered promiscuous mode [ 50.775588][ T5749] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.778580][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.787356][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.794646][ T5749] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.794765][ T5746] veth1_macvtap: entered promiscuous mode [ 50.855134][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.869341][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.888210][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.892515][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.930973][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.935511][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.985210][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.989278][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.990617][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.035799][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.042827][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.043304][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.048564][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.079796][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.091171][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.113033][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.119793][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.153348][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.160877][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.193176][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.197716][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.225378][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.255111][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.255143][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.566887][ T5941] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 51.808843][ T5966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.812405][ T5966] IPv6: NLM_F_CREATE should be set when creating new route [ 51.815949][ T5966] Zero length message leads to an empty skb [ 51.850648][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.854577][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.863309][ T5758] Bluetooth: hci0: command tx timeout [ 51.914072][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.919179][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.942552][ T5758] Bluetooth: hci1: command tx timeout [ 51.943109][ T5744] Bluetooth: hci3: command tx timeout [ 51.943158][ T5102] Bluetooth: hci2: command tx timeout [ 52.072806][ T5820] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.076909][ T5820] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.080798][ T5820] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.084806][ T5820] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.239398][ T5994] loop2: detected capacity change from 0 to 7 [ 52.247897][ T5994] Dev loop2: unable to read RDB block 7 [ 52.250503][ T5994] loop2: AHDI p1 p2 p3 [ 52.252269][ T5994] loop2: partition table partially beyond EOD, truncated [ 52.257231][ T5994] loop2: p1 start 1601398130 is beyond EOD, truncated [ 52.260558][ T5994] loop2: p2 start 1702059890 is beyond EOD, truncated [ 53.407498][ T6027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.412125][ T6027] block device autoloading is deprecated and will be removed. [ 53.457418][ T6031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.539720][ T6039] fuse: Bad value for 'group_id' [ 53.548127][ T6039] fuse: Bad value for 'group_id' [ 53.943034][ T5744] Bluetooth: hci0: command tx timeout [ 54.022538][ T5744] Bluetooth: hci2: command tx timeout [ 54.022631][ T5758] Bluetooth: hci1: command tx timeout [ 54.025271][ T5102] Bluetooth: hci3: command tx timeout [ 54.079924][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 54.120418][ T6074] loop2: detected capacity change from 0 to 7 [ 54.127557][ T6074] Dev loop2: unable to read RDB block 7 [ 54.130099][ T6074] loop2: AHDI p1 p2 p3 [ 54.131509][ T6074] loop2: partition table partially beyond EOD, truncated [ 54.135070][ T6074] loop2: p1 start 1601398130 is beyond EOD, truncated [ 54.141539][ T6074] loop2: p2 start 1702059890 is beyond EOD, truncated [ 54.329619][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 54.586196][ T6104] loop2: detected capacity change from 0 to 7 [ 54.589475][ T6104] Dev loop2: unable to read RDB block 7 [ 54.591241][ T6104] loop2: AHDI p1 p2 p3 [ 54.592671][ T6104] loop2: partition table partially beyond EOD, truncated [ 54.595392][ T6104] loop2: p1 start 1601398130 is beyond EOD, truncated [ 54.597754][ T6104] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.119907][ T6139] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.149190][ T6138] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 55.150431][ T6143] netlink: 'syz.2.107': attribute type 4 has an invalid length. [ 55.167428][ T6143] netlink: 'syz.2.107': attribute type 4 has an invalid length. [ 55.216749][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.219997][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.294220][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.299938][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.406825][ T6156] syzkaller0: entered promiscuous mode [ 55.409348][ T6156] syzkaller0: entered allmulticast mode [ 55.432773][ T5850] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.436661][ T5850] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.439564][ T5850] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.497700][ T6172] loop2: detected capacity change from 0 to 7 [ 55.503635][ T6172] Dev loop2: unable to read RDB block 7 [ 55.504393][ T5850] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.505655][ T6172] loop2: AHDI p1 p2 p3 [ 55.510338][ T6172] loop2: partition table partially beyond EOD, truncated [ 55.514438][ T6172] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.516671][ T6172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 55.909054][ T6215] loop2: detected capacity change from 0 to 7 [ 55.911591][ T6215] Dev loop2: unable to read RDB block 7 [ 55.914398][ T6215] loop2: AHDI p1 p2 p3 [ 55.915762][ T6215] loop2: partition table partially beyond EOD, truncated [ 55.918114][ T6215] loop2: p1 start 1601398130 is beyond EOD, truncated [ 55.922564][ T6215] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.033887][ T5102] Bluetooth: hci0: command tx timeout [ 56.104732][ T5102] Bluetooth: hci1: command tx timeout [ 56.104756][ T5758] Bluetooth: hci3: command tx timeout [ 56.106531][ T5744] Bluetooth: hci2: command tx timeout [ 56.113547][ T6244] loop2: detected capacity change from 0 to 7 [ 56.116393][ T6244] Dev loop2: unable to read RDB block 7 [ 56.118116][ T6244] loop2: AHDI p1 p2 p3 [ 56.119499][ T6244] loop2: partition table partially beyond EOD, truncated [ 56.121999][ T6244] loop2: p1 start 1601398130 is beyond EOD, truncated [ 56.126101][ T6244] loop2: p2 start 1702059890 is beyond EOD, truncated [ 56.493311][ T6274] fuse: Unknown parameter 'grou00000000000000000000' [ 57.204655][ T6330] fuse: Unknown parameter 'group_i00000000000000000000' [ 57.322640][ T6340] loop6: detected capacity change from 0 to 7 [ 57.331727][ T6340] Dev loop6: unable to read RDB block 7 [ 57.333970][ T6340] loop6: unable to read partition table [ 57.337201][ T6340] loop6: partition table beyond EOD, truncated [ 57.340743][ T6340] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 57.761984][ T6371] warning: `syz.3.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.949909][ T6380] trusted_key: encrypted_key: keylen parameter is missing [ 57.992351][ T6381] syzkaller0: entered promiscuous mode [ 57.998758][ T6381] syzkaller0: entered allmulticast mode [ 58.130667][ T6331] syz.3.185 (6331) used greatest stack depth: 17944 bytes left [ 59.712208][ T6456] fuse: Bad value for 'user_id' [ 59.715776][ T6456] fuse: Bad value for 'user_id' [ 60.005550][ T6469] bridge_slave_0: left allmulticast mode [ 60.007934][ T6469] bridge_slave_0: left promiscuous mode [ 60.010554][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.019836][ T6469] bridge_slave_1: left allmulticast mode [ 60.021828][ T6469] bridge_slave_1: left promiscuous mode [ 60.029959][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.042402][ T6469] bond0: (slave bond_slave_0): Releasing backup interface [ 60.051268][ T6469] bond0: (slave bond_slave_1): Releasing backup interface [ 60.065776][ T6469] team0: Port device team_slave_0 removed [ 60.072368][ T6469] team0: Port device team_slave_1 removed [ 60.076762][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.079872][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.085032][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.088245][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.093609][ T6469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.201534][ T6472] trusted_key: encrypted_key: insufficient parameters specified [ 60.206485][ T6472] trusted_key: encrypted_key: keylen parameter is missing [ 60.935397][ T6520] fuse: Bad value for 'fd' [ 61.012756][ T6523] gretap0: entered promiscuous mode [ 61.185732][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 61.299558][ T6541] trusted_key: encrypted_key: keylen parameter is missing [ 61.642226][ T6567] fuse: Invalid rootmode [ 61.818803][ T6582] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 61.825154][ T6582] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 61.890031][ T6590] Illegal XDP return value 4294967282 on prog (id 31) dev syz_tun, expect packet loss! [ 63.778866][ T6714] fuse: Unknown parameter 'use00000000000000000000' [ 63.826484][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 63.829572][ T6720] 8021q: VLANs not supported on sit0 [ 64.126722][ T6734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.362'. [ 64.161926][ T6739] fuse: Unknown parameter 'use00000000000000000000' [ 64.592540][ T6758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.371'. [ 64.665350][ T6762] fuse: Unknown parameter 'use00000000000000000000' [ 65.121278][ T6783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.177571][ T6790] fuse: Unknown parameter 'user_i00000000000000000000' [ 65.461108][ T6814] fuse: Unknown parameter 'user_i00000000000000000000' [ 66.645169][ T6890] capability: warning: `syz.2.429' uses 32-bit capabilities (legacy support in use) [ 66.651051][ T6890] program syz.2.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.016026][ T6906] futex_wake_op: syz.1.436 tries to shift op by 144; fix this program [ 67.019987][ T6906] futex_wake_op: syz.1.436 tries to shift op by 144; fix this program [ 67.339896][ T6915] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 67.404078][ T6915] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 67.407714][ T6915] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 67.410002][ T6915] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 67.414731][ T6915] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 67.427343][ T6915] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12457 usecs [ 67.447293][ T6922] netlink: 'syz.0.442': attribute type 8 has an invalid length. [ 67.478209][ T6915] pci 0000:00:01.0: Adding to iommu group 1 [ 67.488295][ T6915] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 67.490473][ T6915] pci 0000:00:01.0: vgaarb: bridge control possible [ 67.492513][ T6915] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 67.506493][ T6915] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 67.509604][ T6924] kvm: pic: level sensitive irq not supported [ 67.515953][ T6915] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 67.529931][ T6915] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 67.545501][ T6915] [drm] Found bochs VGA, ID 0xb0c5. [ 67.547271][ T6915] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 67.562962][ T6915] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 67.640068][ T6915] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 67.805696][ T6943] fuse: Unknown parameter '0x0000000000000003' [ 67.976198][ T6957] 9pnet_fd: Insufficient options for proto=fd [ 68.048300][ T6963] program syz.0.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.061628][ T6965] fuse: Unknown parameter '0x0000000000000003' [ 69.269531][ T7026] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 69.287449][ T7026] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 69.289862][ T7026] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 69.292138][ T7026] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 69.300093][ T7026] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 69.314354][ T7026] pci 0000:00:01.0: Adding to iommu group 1 [ 69.317637][ T7027] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.331502][ T7026] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 69.333688][ T7026] pci 0000:00:01.0: vgaarb: bridge control possible [ 69.335750][ T7026] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 69.346153][ T7026] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 69.348917][ T7026] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 69.362754][ T7026] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 69.372679][ T7026] [drm] Found bochs VGA, ID 0xb0c5. [ 69.374773][ T7026] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 69.398170][ T7026] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 69.437712][ T7030] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3306954443 (211645084352 ns) > initial count (153796029952 ns). Using initial count to start timer. [ 69.445793][ T7026] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 70.169278][ T7075] fuse: Unknown parameter 'fd0x0000000000000003' [ 70.986836][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.989871][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.927266][ T7190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.409418][ T7219] fuse: Unknown parameter 'ÿÿ' [ 73.306426][ T7272] program syz.2.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.400983][ T7282] ip6gre1: entered promiscuous mode [ 73.403440][ T7282] ip6gre1: entered allmulticast mode [ 73.826480][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 74.595333][ T5820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.682962][ T5820] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.777569][ T7355] fuse: Unknown parameter 'ÿÿ' [ 74.837906][ T5820] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.947144][ T5820] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.020867][ T7367] Process accounting resumed [ 75.090335][ T5758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.101705][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.105401][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.110054][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.114802][ T5758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.165230][ T5820] bridge_slave_1: left allmulticast mode [ 75.174030][ T5820] bridge_slave_1: left promiscuous mode [ 75.177312][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.187798][ T5820] bridge_slave_0: left allmulticast mode [ 75.192687][ T5820] bridge_slave_0: left promiscuous mode [ 75.195280][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.375673][ T5820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.383333][ T5820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.389178][ T5820] bond0 (unregistering): Released all slaves [ 75.401676][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 75.570167][ T5456] 8021q: adding VLAN 0 to HW filter on device eth3 [ 75.760385][ T5820] hsr_slave_0: left promiscuous mode [ 75.763639][ T5820] hsr_slave_1: left promiscuous mode [ 75.766537][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.769744][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.777080][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.780321][ T5820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.793125][ T5820] veth1_macvtap: left promiscuous mode [ 75.795681][ T5820] veth0_macvtap: left promiscuous mode [ 75.799056][ T5820] veth1_vlan: left promiscuous mode [ 75.801470][ T5820] veth0_vlan: left promiscuous mode [ 75.952417][ T5820] team0 (unregistering): Port device team_slave_1 removed [ 75.971966][ T5820] team0 (unregistering): Port device team_slave_0 removed [ 76.105490][ T5456] 8021q: adding VLAN 0 to HW filter on device eth4 [ 76.133156][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.135612][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.137976][ T7371] bridge_slave_0: entered allmulticast mode [ 76.140651][ T7371] bridge_slave_0: entered promiscuous mode [ 76.144656][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.147122][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.149453][ T7371] bridge_slave_1: entered allmulticast mode [ 76.152176][ T7371] bridge_slave_1: entered promiscuous mode [ 76.172338][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.178938][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.205345][ T7371] team0: Port device team_slave_0 added [ 76.210086][ T7371] team0: Port device team_slave_1 added [ 76.233209][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.235777][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.245678][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.251394][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.254420][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.265063][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.309749][ T7371] hsr_slave_0: entered promiscuous mode [ 76.312078][ T7371] hsr_slave_1: entered promiscuous mode [ 76.393028][ T5456] 8021q: adding VLAN 0 to HW filter on device eth5 [ 76.419905][ T7371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.434668][ T7371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.445104][ T7371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.452685][ T7371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.457735][ T7371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.473244][ T7371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.481594][ T7371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.494522][ T7371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.674182][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.699222][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.708599][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.710961][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.720349][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.723354][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.746557][ T7461] ip6gre1: entered promiscuous mode [ 76.748273][ T7461] ip6gre1: entered allmulticast mode [ 77.104112][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.223009][ T5102] Bluetooth: hci0: command tx timeout [ 77.290499][ T7371] veth0_vlan: entered promiscuous mode [ 77.298193][ T7371] veth1_vlan: entered promiscuous mode [ 77.326522][ T7371] veth0_macvtap: entered promiscuous mode [ 77.331452][ T7371] veth1_macvtap: entered promiscuous mode [ 77.340722][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.350611][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.413030][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418464][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.431166][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.435331][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.442911][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.446815][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.464567][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.468423][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.514787][ T7502] netlink: 180 bytes leftover after parsing attributes in process `syz.3.652'. [ 77.732094][ T7522] raw_sendmsg: syz.4.658 forgot to set AF_INET. Fix it! [ 77.844301][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.662'. [ 78.719192][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 79.302673][ T5102] Bluetooth: hci0: command tx timeout [ 80.240295][ T7624] Process accounting resumed [ 80.402098][ T7635] syzkaller0: entered promiscuous mode [ 80.403821][ T7635] syzkaller0: entered allmulticast mode [ 81.274859][ T50] cfg80211: failed to load regulatory.db [ 81.384284][ T5102] Bluetooth: hci0: command tx timeout [ 81.526535][ T7658] bridge_slave_0: left allmulticast mode [ 81.530361][ T7658] bridge_slave_0: left promiscuous mode [ 81.533899][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.540577][ T7658] bridge_slave_1: left allmulticast mode [ 81.543488][ T7658] bridge_slave_1: left promiscuous mode [ 81.545326][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.556661][ T7658] bond0: (slave bond_slave_0): Releasing backup interface [ 81.561444][ T7658] bond0: (slave bond_slave_1): Releasing backup interface [ 81.568221][ T7658] team0: Port device team_slave_0 removed [ 81.572308][ T7658] team0: Port device team_slave_1 removed [ 81.578135][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.582598][ T7658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.583620][ T7658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.591553][ T7659] team0: Mode changed to "loadbalance" [ 81.650861][ T42] audit: type=1326 audit(1785847508.383:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.651282][ T42] audit: type=1326 audit(1785847508.383:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.651716][ T42] audit: type=1326 audit(1785847508.383:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.651834][ T42] audit: type=1326 audit(1785847508.383:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.681934][ T42] audit: type=1326 audit(1785847508.393:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.689520][ T42] audit: type=1326 audit(1785847508.393:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.689549][ T42] audit: type=1326 audit(1785847508.393:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.689571][ T42] audit: type=1326 audit(1785847508.393:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.689592][ T42] audit: type=1326 audit(1785847508.393:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.689614][ T42] audit: type=1326 audit(1785847508.393:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.714" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 81.780327][ T7686] program syz.2.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.047465][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 82.508606][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.734'. [ 82.602113][ T7734] hugetlbfs: syz.0.737 (7734): Using mlock ulimits for SHM_HUGETLB is obsolete [ 83.456674][ T7793] program syz.4.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.462674][ T5102] Bluetooth: hci0: command tx timeout [ 83.939983][ T7814] lo: entered promiscuous mode [ 83.941650][ T7814] lo: entered allmulticast mode [ 83.945107][ T7814] bond0: entered promiscuous mode [ 83.946769][ T7814] bond0: entered allmulticast mode [ 83.948942][ T7814] dummy0: entered promiscuous mode [ 83.951619][ T7814] dummy0: entered allmulticast mode [ 83.958066][ T7814] eql: entered promiscuous mode [ 83.960317][ T7814] eql: entered allmulticast mode [ 83.963387][ T7814] ifb0: entered promiscuous mode [ 83.966145][ T7814] ifb0: entered allmulticast mode [ 83.969501][ T7814] ifb1: entered promiscuous mode [ 83.970016][ T7816] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 83.971180][ T7814] ifb1: entered allmulticast mode [ 83.979809][ T7814] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 83.984568][ T7814] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 83.995869][ T7814] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 83.998932][ T7814] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 84.006240][ T7814] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 84.009213][ T7814] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 84.012421][ T7814] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 84.015639][ T7814] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 84.018571][ T7814] hwsim0: entered promiscuous mode [ 84.020352][ T7814] hwsim0: entered allmulticast mode [ 84.022909][ T7814] ieee802154 phy0 wpan0: entered promiscuous mode [ 84.025746][ T7814] ieee802154 phy0 wpan0: entered allmulticast mode [ 84.029477][ T7814] ieee802154 phy1 wpan1: entered promiscuous mode [ 84.032095][ T7814] ieee802154 phy1 wpan1: entered allmulticast mode [ 84.035852][ T7814] teql0: entered promiscuous mode [ 84.037764][ T7814] teql0: entered allmulticast mode [ 84.039506][ T7814] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 84.064362][ T7816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.072297][ T7818] bond1: (slave dummy0): making interface the new active one [ 84.077092][ T7818] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 85.151631][ T50] kernel read not supported for file /vcsa (pid: 50 comm: kworker/3:1) [ 86.524848][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 87.572594][ T7940] process 'syz.3.811' launched './file0' with NULL argv: empty string added [ 88.069421][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.827'. [ 89.214073][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 89.214086][ T42] audit: type=1804 audit(1785847515.953:26): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.846" name="/newroot/70/bus/file0" dev="overlay" ino=393 res=1 errno=0 [ 89.222767][ T42] audit: type=1804 audit(1785847515.953:27): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.846" name="/newroot/70/bus/file0" dev="overlay" ino=393 res=1 errno=0 [ 89.925617][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 90.140231][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 90.344216][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.858'. [ 90.384593][ T8071] ======================================================= [ 90.384593][ T8071] WARNING: The mand mount option has been deprecated and [ 90.384593][ T8071] and is ignored by this kernel. Remove the mand [ 90.384593][ T8071] option from the mount to silence this warning. [ 90.384593][ T8071] ======================================================= [ 90.868097][ T8087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.006171][ T8098] netlink: 'syz.0.869': attribute type 1 has an invalid length. [ 91.037034][ T8098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.140487][ T8098] bond2: (slave ip6gretap1): making interface the new active one [ 91.144483][ T8098] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 91.151822][ T8102] bond1: (slave dummy0): Releasing active interface [ 91.158848][ T8102] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 91.166725][ T8098] bond2: (slave dummy0): Releasing active interface [ 91.169287][ T8098] ip6gretap1: entered promiscuous mode [ 91.173702][ T8098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.252120][ T8112] ipvlan2: entered promiscuous mode [ 91.255026][ T8112] ipvlan2: entered allmulticast mode [ 91.256786][ T8112] macvlan0: entered allmulticast mode [ 91.258603][ T8112] veth1_vlan: entered allmulticast mode [ 91.271844][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 91.356605][ T8114] bridge1: port 1(veth3) entered blocking state [ 91.359312][ T8114] bridge1: port 1(veth3) entered disabled state [ 91.363265][ T8114] veth3: entered allmulticast mode [ 91.366212][ T8114] veth3: entered promiscuous mode [ 91.401886][ T8119] bridge1: port 2(veth5) entered blocking state [ 91.405427][ T8119] bridge1: port 2(veth5) entered disabled state [ 91.407602][ T8119] veth5: entered allmulticast mode [ 91.411014][ T8119] veth5: entered promiscuous mode [ 92.274416][ T8154] overlayfs: failed to resolve './file1': -2 [ 92.365110][ T8160] bridge_slave_0: left allmulticast mode [ 92.367081][ T8160] bridge_slave_0: left promiscuous mode [ 92.369070][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.374140][ T8160] bridge_slave_1: left allmulticast mode [ 92.376386][ T8160] bridge_slave_1: left promiscuous mode [ 92.378273][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.389170][ T8160] bond0: (slave bond_slave_0): Releasing backup interface [ 92.396327][ T8160] bond0: (slave bond_slave_1): Releasing backup interface [ 92.402867][ T8160] team0: Port device team_slave_0 removed [ 92.409907][ T8160] team0: Port device team_slave_1 removed [ 92.412305][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.415481][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.419039][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.421628][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.427570][ T8160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.613876][ T8176] overlayfs: failed to resolve './file1': -2 [ 92.656085][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 92.660324][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 92.663786][ T8180] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 92.667108][ T8180] iwpm_hello_cb: Unable to parse nlmsg [ 93.257587][ T8218] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 93.310597][ T8224] ipvlan2: entered promiscuous mode [ 93.312397][ T8224] ipvlan2: entered allmulticast mode [ 93.314515][ T8224] gretap0: entered allmulticast mode [ 93.460706][ T8230] syzkaller0: entered promiscuous mode [ 93.463919][ T8230] syzkaller0: entered allmulticast mode [ 94.542741][ T8248] overlayfs: failed to resolve './file0': -2 [ 94.754929][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 94.773124][ T8260] ip6gre2: entered promiscuous mode [ 94.775344][ T8260] ip6gre2: entered allmulticast mode [ 94.872950][ T8268] kvm: pic: level sensitive irq not supported [ 94.994117][ T8277] syzkaller0: entered promiscuous mode [ 94.999365][ T8277] syzkaller0: entered allmulticast mode [ 96.266859][ T8301] syz.2.953 (8301): /proc/8300/oom_adj is deprecated, please use /proc/8300/oom_score_adj instead. [ 97.407200][ T8333] ip6_vti0: Master is either lo or non-ether device [ 97.516828][ T8339] 9p: Bad value for 'wfdno' [ 97.536330][ T8341] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 97.559239][ T8341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.580858][ T8341] bond1: (slave ip6gretap1): making interface the new active one [ 97.585870][ T8341] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 97.602431][ T8341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.736659][ T8349] netlink: 'syz.3.972': attribute type 4 has an invalid length. [ 97.887840][ T8357] sctp: [Deprecated]: syz.2.975 (pid 8357) Use of int in max_burst socket option. [ 97.887840][ T8357] Use struct sctp_assoc_value instead [ 97.994324][ T8363] sit1: entered promiscuous mode [ 97.996507][ T8363] sit1: entered allmulticast mode [ 97.999325][ T8363] team0: Device sit1 is of different type [ 98.162617][ T8369] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 98.200666][ T8369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.236566][ T8369] bond1: (slave ip6gretap1): making interface the new active one [ 98.240840][ T8369] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 98.257104][ T8369] bridge_slave_0: left allmulticast mode [ 98.258895][ T8369] bridge_slave_0: left promiscuous mode [ 98.268375][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.284599][ T8369] bridge_slave_1: left allmulticast mode [ 98.288637][ T8369] bridge_slave_1: left promiscuous mode [ 98.290382][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.316249][ T8369] bond0: (slave bond_slave_0): Releasing backup interface [ 98.321702][ T8369] bond0: (slave bond_slave_1): Releasing backup interface [ 98.328458][ T8369] team0: Port device team_slave_0 removed [ 98.331203][ T8369] team0: Port device team_slave_1 removed [ 98.333338][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.336936][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.339945][ T8369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.993919][ T42] audit: type=1326 audit(1785847525.733:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.000822][ T42] audit: type=1326 audit(1785847525.733:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.013415][ T42] audit: type=1326 audit(1785847525.733:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.030794][ T42] audit: type=1326 audit(1785847525.733:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.038808][ T42] audit: type=1326 audit(1785847525.733:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.044288][ T8403] netlink: 27 bytes leftover after parsing attributes in process `syz.0.993'. [ 99.047161][ T42] audit: type=1326 audit(1785847525.733:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.058826][ T42] audit: type=1326 audit(1785847525.733:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.068252][ T42] audit: type=1326 audit(1785847525.733:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.075964][ T42] audit: type=1326 audit(1785847525.733:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.083498][ T42] audit: type=1326 audit(1785847525.733:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.0.992" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6fec code=0x7ffc0000 [ 99.427364][ T8417] kvm: pic: level sensitive irq not supported [ 99.444480][ T8417] kvm: pic: level sensitive irq not supported [ 99.450227][ T8417] kvm: pic: single mode not supported [ 99.661201][ T8434] 9p: Bad value for 'rfdno' [ 99.954398][ T8445] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.378940][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 100.492768][ T8472] syzkaller0: entered promiscuous mode [ 100.499743][ T8472] syzkaller0: entered allmulticast mode [ 100.718602][ T8484] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 101.751697][ T8484] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 101.792401][ T8486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.830818][ T8504] ipip0: entered allmulticast mode [ 101.841722][ T8510] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 101.941448][ T8518] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 101.948829][ T8518] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.087960][ T8531] syzkaller0: entered promiscuous mode [ 102.090256][ T8531] syzkaller0: entered allmulticast mode [ 102.966925][ T8541] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 103.226498][ T8537] netlink: 'syz.2.1046': attribute type 4 has an invalid length. [ 103.268548][ T8541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.283496][ T8543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.363912][ T13] ip6gretap1: left promiscuous mode [ 103.772085][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.775947][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.779805][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.805980][ T8580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.809818][ T8580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.816309][ T8580] veth1_vlan: left promiscuous mode [ 103.818508][ T8580] veth0_vlan: left promiscuous mode [ 103.820993][ T8580] veth0_vlan: entered promiscuous mode [ 103.831325][ T8580] veth1_vlan: entered promiscuous mode [ 103.835518][ T8580] veth1_macvtap: left promiscuous mode [ 103.837757][ T8580] veth0_macvtap: left promiscuous mode [ 103.839832][ T8580] veth0_macvtap: entered promiscuous mode [ 103.842179][ T8580] veth1_macvtap: entered promiscuous mode [ 103.847891][ T8580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.851097][ T8580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.855708][ T8580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.858376][ T8580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.879685][ T1164] bridge1: port 1(veth3) entered blocking state [ 103.882109][ T1164] bridge1: port 1(veth3) entered forwarding state [ 103.887359][ T1164] bridge1: port 2(veth5) entered blocking state [ 103.889785][ T1164] bridge1: port 2(veth5) entered forwarding state [ 103.912725][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.915728][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.918527][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.921214][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.932077][ T8585] netlink: 'syz.3.1062': attribute type 4 has an invalid length. [ 104.030298][ T8594] 9p: Bad value for 'wfdno' [ 104.392961][ T8616] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1075'. [ 104.467838][ T8620] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.517100][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 104.517114][ T42] audit: type=1804 audit(1785847531.253:39): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1079" name="/newroot/113/bus/file0" dev="overlay" ino=630 res=1 errno=0 [ 104.526417][ T42] audit: type=1804 audit(1785847531.253:40): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1079" name="/newroot/113/bus/file0" dev="overlay" ino=630 res=1 errno=0 [ 104.679540][ T8644] syz.2.1086 uses obsolete (PF_INET,SOCK_PACKET) [ 105.017736][ T8672] 9p: Bad value for 'rfdno' [ 107.022758][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 107.028361][ T8741] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1125'. [ 107.031692][ T8741] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1125'. [ 107.220277][ T8756] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.223621][ T8756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.515974][ T8780] netlink: 'syz.4.1146': attribute type 4 has an invalid length. [ 107.534028][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.554414][ T8782] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 107.557964][ T8782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.627588][ T8789] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 107.727561][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.732161][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.737044][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.745011][ T24] usb 5-1: config 0 descriptor?? [ 107.843578][ T8795] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1153'. [ 107.968097][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 107.970214][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 107.977970][ T24] usb 5-1: USB disconnect, device number 2 [ 108.013518][ T42] audit: type=1804 audit(1785847534.753:41): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1157" name="/newroot/314/bus/file0" dev="overlay" ino=1674 res=1 errno=0 [ 108.024309][ T42] audit: type=1804 audit(1785847534.763:42): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1157" name="/newroot/314/bus/file0" dev="overlay" ino=1674 res=1 errno=0 [ 108.031523][ T42] audit: type=1804 audit(1785847534.763:43): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1158" name="/newroot/297/bus/file0" dev="overlay" ino=1564 res=1 errno=0 [ 108.043166][ T42] audit: type=1804 audit(1785847534.763:44): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1158" name="/newroot/297/bus/file0" dev="overlay" ino=1564 res=1 errno=0 [ 108.492814][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.656933][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.661855][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 108.665458][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.688859][ T24] usb 5-1: config 0 descriptor?? [ 108.884546][ T8821] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 108.888334][ T8821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.049791][ T8835] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 109.074494][ T8835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.087340][ T42] audit: type=1804 audit(1785847535.823:45): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1172" name="/newroot/301/bus/file0" dev="overlay" ino=1593 res=1 errno=0 [ 109.136831][ T42] audit: type=1804 audit(1785847535.873:46): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1173" name="/newroot/302/bus/file0" dev="overlay" ino=1607 res=1 errno=0 [ 109.144672][ T42] audit: type=1804 audit(1785847535.873:47): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1173" name="/newroot/302/bus/file0" dev="overlay" ino=1607 res=1 errno=0 [ 109.220475][ T8849] binder: 8848:8849 ioctl c0306201 80000080 returned -14 [ 109.503727][ T24] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 109.517671][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 109.812625][ T1861] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 109.845572][ T24] usb 5-1: USB disconnect, device number 3 [ 109.847500][ C2] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 109.962565][ T1861] usb 9-1: Using ep0 maxpacket: 16 [ 109.968718][ T1861] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.973876][ T1861] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.977846][ T1861] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 109.981897][ T1861] usb 9-1: config 0 interface 0 has no altsetting 0 [ 109.984173][ T1861] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 109.987025][ T1861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.998694][ T1861] usb 9-1: config 0 descriptor?? [ 110.023389][ T8866] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 110.049763][ T8866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.068466][ T8866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.421052][ T8880] netlink: 'syz.3.1186': attribute type 4 has an invalid length. [ 110.424453][ T1861] hid (null): nested delimiters [ 110.427674][ T1861] hid (null): report_id 24797 is invalid [ 110.429710][ T1861] hid (null): bogus close delimiter [ 110.625518][ T1861] usb 9-1: USB disconnect, device number 2 [ 110.834158][ T8914] netlink: 'syz.3.1198': attribute type 4 has an invalid length. [ 110.976820][ T42] audit: type=1107 audit(1785847537.713:48): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 110.976820][ T42]  ' [ 111.045848][ T8930] syzkaller0: entered promiscuous mode [ 111.047623][ T8930] syzkaller0: entered allmulticast mode [ 111.242876][ T8953] netlink: 'syz.3.1217': attribute type 4 has an invalid length. [ 111.509299][ T5102] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 111.512133][ T8985] netlink: 'syz.4.1229': attribute type 4 has an invalid length. [ 111.582562][ T1044] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 111.769383][ T1044] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 111.778123][ T1044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.783938][ T1044] usb 7-1: Product: syz [ 111.785714][ T1044] usb 7-1: Manufacturer: syz [ 111.788286][ T1044] usb 7-1: SerialNumber: syz [ 112.427337][ T1044] rtl8150 7-1:1.0: eth6: rtl8150 is detected [ 112.613462][ T1861] usb 7-1: USB disconnect, device number 2 [ 112.672625][ T5836] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.712786][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 112.717200][ T9027] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1243'. [ 112.721004][ T9027] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1243'. [ 112.824453][ T5836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.827849][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.831515][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.831777][ T9036] Bluetooth: MGMT ver 1.23 [ 112.834839][ T5836] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.835767][ T5836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 112.844560][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.847804][ T5836] usb 5-1: SerialNumber: syz [ 112.857518][ T5836] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 112.860758][ T5836] usb-storage 5-1:1.0: USB Mass Storage device detected [ 112.867904][ T5836] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 113.059916][ T5836] usb 5-1: USB disconnect, device number 4 [ 114.707291][ T9082] netlink: 'syz.2.1264': attribute type 13 has an invalid length. [ 114.712106][ T9082] gretap0: refused to change device tx_queue_len [ 114.717685][ T9082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.767798][ T9085] overlayfs: failed to resolve './file1': -2 [ 115.018692][ T42] audit: type=1326 audit(1785847541.753:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.3.1268" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 115.519809][ T9101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1270'. [ 115.738292][ T9116] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.966319][ T9131] syzkaller0: entered promiscuous mode [ 115.968726][ T9131] syzkaller0: entered allmulticast mode [ 116.653504][ T9148] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 117.138687][ T9148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.149366][ T9150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.452694][ T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 117.577681][ T9171] binder: 9170:9171 ioctl c0306201 80000080 returned -14 [ 117.602642][ T846] usb 8-1: Using ep0 maxpacket: 32 [ 117.608919][ T846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.615739][ T846] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.621160][ T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.629720][ T846] usb 8-1: config 0 descriptor?? [ 117.642553][ T846] hub 8-1:0.0: USB hub found [ 117.660596][ T9177] overlayfs: failed to resolve './file0': -2 [ 117.795089][ T9187] input: syz1 as /devices/virtual/input/input6 [ 117.837834][ T846] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 118.123537][ T9201] overlayfs: failed to resolve './file0': -2 [ 118.301737][ T846] usbhid 8-1:0.0: can't add hid device: -71 [ 118.307104][ T846] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 118.343872][ T846] usb 8-1: USB disconnect, device number 2 [ 118.423878][ T9223] netlink: 'syz.4.1316': attribute type 4 has an invalid length. [ 118.503162][ T9231] overlayfs: failed to resolve './file0': -2 [ 118.655322][ T9243] Bluetooth: MGMT ver 1.23 [ 118.706969][ T42] audit: type=1804 audit(1785847545.443:50): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1324" name="/newroot/331/bus/file0" dev="overlay" ino=1767 res=1 errno=0 [ 119.212592][ T1861] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 119.364155][ T1861] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 119.368089][ T1861] usb 9-1: config 0 interface 0 has no altsetting 0 [ 119.370454][ T1861] usb 9-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 119.373322][ T1861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.378200][ T1861] usb 9-1: config 0 descriptor?? [ 119.462745][ T61] wlan1: Trigger new scan to find an IBSS to join [ 119.625689][ T9279] ptrace attach of "/syz-executor exec"[5746] was attempted by ""[9279] [ 119.792131][ T1861] hid-rmi 0003:17EF:6085.0003: unknown main item tag 0x1 [ 119.795810][ T1861] hid-rmi 0003:17EF:6085.0003: invalid report_count 24886 [ 119.799373][ T1861] hid-rmi 0003:17EF:6085.0003: item 0 4 1 9 parsing failed [ 119.803696][ T1861] hid-rmi 0003:17EF:6085.0003: parse failed [ 119.805590][ T1861] hid-rmi 0003:17EF:6085.0003: probe with driver hid-rmi failed with error -22 [ 119.912671][ T5117] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.992078][ T1044] usb 9-1: USB disconnect, device number 3 [ 120.062907][ T5117] usb 7-1: Using ep0 maxpacket: 32 [ 120.067147][ T5117] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.070547][ T5117] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.075780][ T5117] usb 7-1: config 0 has no interface number 0 [ 120.080493][ T5117] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.084464][ T5117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.087528][ T5117] usb 7-1: Product: syz [ 120.088826][ T5117] usb 7-1: Manufacturer: syz [ 120.090299][ T5117] usb 7-1: SerialNumber: syz [ 120.094599][ T5117] usb 7-1: config 0 descriptor?? [ 120.099210][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 120.104978][ T5117] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 120.302084][ T5117] usb 7-1: USB disconnect, device number 3 [ 120.535330][ T42] audit: type=1804 audit(1785847547.273:51): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1344" name="/newroot/296/bus/file0" dev="overlay" ino=1598 res=1 errno=0 [ 120.592003][ T9301] binder: 9300:9301 unknown command 1078485779 [ 120.595522][ T9301] binder: 9300:9301 ioctl c0306201 80000180 returned -22 [ 120.714471][ T9310] usb usb5: usbfs: process 9310 (syz.3.1351) did not claim interface 0 before use [ 121.092703][ T846] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 121.254700][ T846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.258987][ T846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.262937][ T846] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.268067][ T846] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.271613][ T846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.277253][ T846] usb 7-1: config 0 descriptor?? [ 121.286072][ T9321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.532732][ T1044] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 121.539946][ T9331] syzkaller0: entered promiscuous mode [ 121.542269][ T9331] syzkaller0: entered allmulticast mode [ 121.691765][ T1044] usb 9-1: unable to get BOS descriptor or descriptor too short [ 121.697553][ T1044] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 121.701662][ T846] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 121.703666][ T1044] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 121.705085][ T846] plantronics 0003:047F:FFFF.0004: parse failed [ 121.708391][ T1044] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.708405][ T1044] usb 9-1: Product: syz [ 121.708414][ T1044] usb 9-1: Manufacturer: syz [ 121.708421][ T1044] usb 9-1: SerialNumber: syz [ 121.718203][ T846] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 121.742590][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 121.894410][ T5117] usb 7-1: USB disconnect, device number 4 [ 121.895691][ T10] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.899761][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.915835][ T10] usb 8-1: config 0 descriptor?? [ 121.933636][ T10] cp210x 8-1:0.0: cp210x converter detected [ 121.988594][ T1044] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.123601][ T1044] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 122.127193][ T1044] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 122.130316][ T1044] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 122.135780][ T1044] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 122.138518][ T1044] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 122.141217][ T1044] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 122.403676][ T10] usb 8-1: cp210x converter now attached to ttyUSB0 [ 122.598380][ T42] audit: type=1804 audit(1785847549.333:52): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1364" name="/newroot/337/bus/file0" dev="overlay" ino=1806 res=1 errno=0 [ 122.605113][ T42] audit: type=1804 audit(1785847549.333:53): pid=9339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1364" name="/newroot/337/bus/file0" dev="overlay" ino=1806 res=1 errno=0 [ 122.966821][ T1044] usb 9-1: USB disconnect, device number 4 [ 123.017696][ T7375] udevd[7375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.712645][ T1044] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 123.862722][ T1044] usb 9-1: Using ep0 maxpacket: 32 [ 123.867147][ T1044] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.869834][ T1044] usb 9-1: config 0 has no interface number 0 [ 123.874326][ T1044] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.877300][ T1044] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.879851][ T1044] usb 9-1: Product: syz [ 123.881199][ T1044] usb 9-1: Manufacturer: syz [ 123.882754][ T1044] usb 9-1: SerialNumber: syz [ 123.885693][ T1044] usb 9-1: config 0 descriptor?? [ 124.342630][ T117] wlan1: Trigger new scan to find an IBSS to join [ 124.511614][ T1861] usb 8-1: USB disconnect, device number 3 [ 124.525777][ T1861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.538344][ T1861] cp210x 8-1:0.0: device disconnected [ 124.698633][ T1044] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 124.904720][ T1044] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 124.911099][ T1044] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 124.921420][ T1044] usb 9-1: USB disconnect, device number 5 [ 124.999804][ T9386] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 125.028297][ T9386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.041289][ T9386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.198300][ T42] audit: type=1804 audit(1785847551.933:54): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1385" name="/newroot/352/bus/file0" dev="overlay" ino=1901 res=1 errno=0 [ 125.207953][ T42] audit: type=1804 audit(1785847551.933:55): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1385" name="/newroot/352/bus/file0" dev="overlay" ino=1901 res=1 errno=0 [ 125.234912][ T117] wlan1: Creating new IBSS network, BSSID de:b1:33:ea:73:9c [ 125.660809][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 125.666974][ T9398] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1386'. [ 125.671328][ T9398] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1386'. [ 125.761970][ T9406] syzkaller0: entered promiscuous mode [ 125.764438][ T9406] syzkaller0: entered allmulticast mode [ 127.142933][ T9431] binder: 9430:9431 ioctl c0306201 80000080 returned -14 [ 127.145454][ T9429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 127.406365][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 127.410193][ T9452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1405'. [ 127.420042][ T9447] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1400'. [ 127.429783][ T9447] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1400'. [ 127.601760][ T9457] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 127.627714][ T9457] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 127.633428][ T9457] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 127.637081][ T9457] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 127.640871][ T9457] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 127.645213][ T9457] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 127.650125][ T9457] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 127.654411][ T9457] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.658659][ T9457] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 127.661938][ T9457] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 127.662504][ T59] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 127.696140][ T9464] dummy_hcd dummy_hcd.0: remove, state 4 [ 127.699010][ T9464] usb usb5: USB disconnect, device number 1 [ 127.720435][ T9464] dummy_hcd dummy_hcd.0: stopped [ 127.722385][ T9464] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 127.786905][ T42] audit: type=1804 audit(1785847554.523:56): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1411" name="/newroot/206/bus/file0" dev="overlay" ino=1128 res=1 errno=0 [ 127.794133][ T42] audit: type=1804 audit(1785847554.523:57): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1411" name="/newroot/206/bus/file0" dev="overlay" ino=1128 res=1 errno=0 [ 127.833890][ T59] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 127.836593][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.839700][ T59] usb 7-1: config 0 has no interface number 0 [ 127.843465][ T59] usb 7-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.849208][ T59] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 127.852140][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.855507][ T59] usb 7-1: Product: syz [ 127.857070][ T59] usb 7-1: Manufacturer: syz [ 127.858529][ T59] usb 7-1: SerialNumber: syz [ 127.862420][ T59] usb 7-1: config 0 descriptor?? [ 127.866505][ T59] asix 7-1:0.251: probe with driver asix failed with error -22 [ 128.157419][ T5117] usb 7-1: USB disconnect, device number 5 [ 128.659952][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 128.700959][ T9509] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1429'. [ 128.965958][ T846] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 129.127240][ T846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 129.134079][ T846] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 129.141035][ T846] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 129.145622][ T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.148953][ T846] usb 8-1: Product: syz [ 129.150616][ T846] usb 8-1: Manufacturer: syz [ 129.152734][ T846] usb 8-1: SerialNumber: syz [ 129.380598][ T846] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 129.387405][ T846] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 129.443479][ T846] usb 8-1: USB disconnect, device number 4 [ 129.483043][ T6443] udevd[6443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.924210][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 130.713119][ T9689] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 130.716781][ T9689] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 130.719545][ T9689] CPU: 0 UID: 0 PID: 9689 Comm: syz.0.1478 Not tainted syzkaller #0 PREEMPT(full) [ 130.722441][ T9689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.725603][ T9689] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 130.730237][ T9689] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 130.737794][ T9689] RSP: 0018:ffffc9000cf9fb28 EFLAGS: 00010246 [ 130.740192][ T9689] RAX: dffffc0000000000 RBX: ffff888022408c00 RCX: ffffc9000c832000 [ 130.743184][ T9689] RDX: 0000000000000000 RSI: ffffffff87cde547 RDI: ffff888022409290 [ 130.746364][ T9689] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 130.749258][ T9689] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806e62a050 [ 130.752173][ T9689] R13: 0000000000000000 R14: ffff888025f964f1 R15: ffff888025f96008 [ 130.755040][ T9689] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f5466b40 [ 130.758290][ T9689] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 130.760649][ T9689] CR2: 00000000f5463edc CR3: 0000000049d50000 CR4: 0000000000352ef0 [ 130.763631][ T9689] Call Trace: [ 130.764871][ T9689] [ 130.765927][ T9689] gadget_bind_driver+0x4ac/0xbf0 [ 130.767703][ T9689] ? __pfx_gadget_bind_driver+0x10/0x10 [ 130.769673][ T9689] really_probe+0x241/0xa60 [ 130.771314][ T9689] __driver_probe_device+0x20e/0x450 [ 130.773248][ T9689] driver_probe_device+0x4a/0x140 [ 130.775077][ T9689] __driver_attach+0x21f/0x5b0 [ 130.776850][ T9689] ? __pfx___driver_attach+0x10/0x10 [ 130.778690][ T9689] bus_for_each_dev+0x13e/0x1d0 [ 130.780444][ T9689] ? __pfx_bus_for_each_dev+0x10/0x10 [ 130.782328][ T9689] ? bus_add_driver+0x2b5/0x5b0 [ 130.784125][ T9689] bus_add_driver+0x305/0x5b0 [ 130.785904][ T9689] driver_register+0x1e2/0x360 [ 130.787638][ T9689] ? rcu_is_watching+0x12/0xc0 [ 130.789413][ T9689] usb_gadget_register_driver_owner+0x132/0x210 [ 130.791616][ T9689] raw_ioctl+0x1a85/0x2b80 [ 130.793198][ T9689] ? __pfx_raw_ioctl+0x10/0x10 [ 130.794899][ T9689] ? __pfx_raw_ioctl+0x10/0x10 [ 130.796626][ T9689] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 130.798552][ T9689] __do_fast_syscall_32+0xe7/0x970 [ 130.800469][ T9689] do_fast_syscall_32+0x32/0x70 [ 130.802250][ T9689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.804602][ T9689] RIP: 0023:0xf7fa6fec [ 130.806154][ T9689] Code: Unable to access opcode bytes at 0xf7fa6fc2. [ 130.808620][ T9689] RSP: 002b:00000000f5464424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 130.811695][ T9689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 130.814618][ T9689] RDX: 0000000000000000 RSI: 00000000f7437ff4 RDI: 00000000f54654c0 [ 130.817420][ T9689] RBP: 00000000f7437ff4 R08: 0000000000000000 R09: 0000000000000000 [ 130.820281][ T9689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.823004][ T9689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.825701][ T9689] [ 130.826783][ T9689] Modules linked in: [ 130.828435][ T9689] ---[ end trace 0000000000000000 ]--- [ 130.852724][ T9689] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 130.854549][ T9689] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 130.862657][ T9689] RSP: 0018:ffffc9000cf9fb28 EFLAGS: 00010246 [ 130.865267][ T9689] RAX: dffffc0000000000 RBX: ffff888022408c00 RCX: ffffc9000c832000 [ 130.868595][ T9689] RDX: 0000000000000000 RSI: ffffffff87cde547 RDI: ffff888022409290 [ 130.872059][ T9689] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 130.877172][ T9689] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806e62a050 [ 130.880442][ T9689] R13: 0000000000000000 R14: ffff888025f964f1 R15: ffff888025f96008 [ 130.884035][ T9689] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f5466b40 [ 130.893207][ T9689] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 130.902538][ T9689] CR2: 00000000f7fa7000 CR3: 0000000049d50000 CR4: 0000000000352ef0 [ 130.912586][ T9689] Kernel panic - not syncing: Fatal exception [ 130.915657][ T9689] Kernel Offset: disabled [ 130.917013][ T9689] Rebooting in 86400 seconds..