last executing test programs: 47m28.138482181s ago: executing program 1 (id=1167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00006cb000/0x400000)=nil) geteuid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r4, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") fstat(r0, &(0x7f0000000100)) r6 = open(0x0, 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x21) fcntl$setlease(r6, 0x400, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000002480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x80) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x4000) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) fsopen(0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000340)=0x1) close(r7) write$ppp(r8, &(0x7f0000000840)="9c4b6f", 0x3) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="2868a95c6a03e202702c706f2258000000000000a974f8f03030303030f34ad56ab8ba27653b1ffdf15bd93f41346532322c00f204c2cb67fd77aa08b6a35d9c45bf"]) 47m27.692136472s ago: executing program 1 (id=1168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x1) fchdir(r10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 47m26.003687915s ago: executing program 1 (id=1170): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x1, 0x11f4, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4024, &(0x7f0000000480), 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001740)={r3, &(0x7f0000000400), &(0x7f0000000740)=""/4096}, 0x20) 47m24.313205378s ago: executing program 1 (id=1172): mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/events/sched/sched_switch/enable\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) write(r0, &(0x7f0000000400)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./my_tracefs/tracing_on\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='1', 0x1) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000700)={0x0, 0xc350}, 0x10) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0xffffffff) 47m23.407736521s ago: executing program 1 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x12000, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}}, 0x20}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002a000000850000002a0000009500000000000000c6716cbde55f79594dec8881a4fc64ae128eb989df3a10205371784013f446bd23187959a0c6840480c4b76b55b17764bba4b066e3bed505ee6aecc0e90b1382f1f1a97a8fb4412822c30cf91961ae"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setreuid(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 47m20.017187417s ago: executing program 1 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x67db, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x12023, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x50, 0x0, &(0x7f0000000180)) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47m3.960226713s ago: executing program 32 (id=1183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x67db, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x12023, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x50, 0x0, &(0x7f0000000180)) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m15.103773338s ago: executing program 0 (id=3777): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffbff, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 27m14.920050562s ago: executing program 0 (id=3778): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rmdir(&(0x7f0000000040)='./bus\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 27m12.997155991s ago: executing program 0 (id=3783): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 27m7.508969022s ago: executing program 0 (id=3792): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r4, &(0x7f0000000040)=""/41, 0xfee3) 27m5.923101362s ago: executing program 0 (id=3796): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) 27m0.50874762s ago: executing program 0 (id=3805): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x5) r5 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r6, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r6, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) shutdown(r4, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 26m45.418510444s ago: executing program 33 (id=3805): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x5) r5 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r6, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r6, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) shutdown(r4, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11.866009748s ago: executing program 4 (id=7086): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f0000000480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000002f40)=""/4099, 0x1003}], 0x1, 0x2200, 0x1, 0x8) 9.372083962s ago: executing program 4 (id=7094): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0xc8c0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xd, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)="0130305c30", 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) 7.86882162s ago: executing program 4 (id=7097): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020303000000369ede16464307d0a14c30a55bf3afe600"], 0x14}}, 0x20040000) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r6 = syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4000000000, 0x4e8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r8, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") close(0x3) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0x1, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 7.509304349s ago: executing program 3 (id=7099): iopl(0x3) unshare(0x2040400) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) 7.426425741s ago: executing program 3 (id=7100): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r1 = socket$inet(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) write(r2, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,8,84', 0x29) 7.210989366s ago: executing program 5 (id=7102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) 7.030132081s ago: executing program 5 (id=7103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x40008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 6.858880515s ago: executing program 5 (id=7105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0xc8c0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xd, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)="0130305c30", 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) 5.412619222s ago: executing program 5 (id=7107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000640)="000a18000000604000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r4, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 5.200066838s ago: executing program 3 (id=7108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xcf}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x44}}, 0x48040) 3.783367304s ago: executing program 4 (id=7109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 3.774057494s ago: executing program 2 (id=7110): syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x88e5, @igmp={{0x1e, 0x4, 0x3, 0x1, 0x80, 0x68, 0x0, 0x3, 0x2, 0x0, @broadcast, @multicast2, {[@end, @generic={0x94, 0x5, "ed789d"}, @timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fe29d68}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}, {@broadcast, 0x5}, {@multicast2, 0xfffffffc}]}, @ssrr={0x89, 0x1b, 0x52, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @loopback, @local]}, @timestamp_addr={0x44, 0x1c, 0x2c, 0x1, 0x4, [{@empty, 0x401}, {@broadcast}, {@empty, 0x8}]}]}}, {0x13, 0x6, 0x0, @multicast1}}}}}, 0x0) 3.628242508s ago: executing program 2 (id=7111): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4003a00) 3.572088499s ago: executing program 3 (id=7112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x44}}, 0x0) 3.456158702s ago: executing program 2 (id=7113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) 3.228823858s ago: executing program 2 (id=7114): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r2) 3.024064113s ago: executing program 2 (id=7115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, 0x0, 0xc8c0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xd, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)="0130305c30", 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) 2.152861075s ago: executing program 2 (id=7116): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind(r0, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r1 = socket$inet(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) write(r2, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,8,84', 0x29) 1.988691469s ago: executing program 3 (id=7117): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020303000000369ede16464307d0a14c30a55bf3afe6000000000000"], 0x14}}, 0x20040000) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r6 = syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4000000000, 0x4e8800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r8, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") close(0x3) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0x1, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 431.990039ms ago: executing program 3 (id=7118): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x4d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aa00ff0000173afffe8000000000000000000400000000bbff020000002000000000000000d76640f7f6acf39400000000000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 187.216165ms ago: executing program 4 (id=7119): syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x88e5, @igmp={{0x1e, 0x4, 0x3, 0x1, 0x80, 0x68, 0x0, 0x3, 0x2, 0x0, @broadcast, @multicast2, {[@end, @generic={0x94, 0x5, "ed789d"}, @timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fe29d68}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}, {@broadcast, 0x5}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x1b, 0x52, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @loopback, @local]}, @timestamp_addr={0x44, 0x1c, 0x2c, 0x1, 0x4, [{@empty, 0x401}, {@broadcast}, {@empty, 0x8}]}]}}, {0x13, 0x6, 0x0, @multicast1}}}}}, 0x0) 162.965636ms ago: executing program 5 (id=7120): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000200)="01154e000100445588fb000088fb", 0xe, 0x804, &(0x7f0000000040)={0x11, 0xf8, 0x0, 0x0, 0x0, 0x0}, 0x14) 63.659349ms ago: executing program 4 (id=7121): bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x181000, &(0x7f00000001c0)={[{@dioread_lock}, {@noload}, {@test_dummy_encryption}, {@mb_optimize_scan}]}, 0xff, 0x78e, &(0x7f0000000f80)="$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") io_cancel(0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0}) 0s ago: executing program 5 (id=7122): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): ][ T7649] usb 5-1: Product: syz [ 1990.234244][ T7649] usb 5-1: Manufacturer: syz [ 1990.301083][ T7649] usb 5-1: SerialNumber: syz [ 1990.335632][ T7649] oti6858 5-1:1.0: oti6858 converter detected [ 1990.366696][ T7649] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 1990.718876][T22704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1991.364430][ T5847] usb 5-1: USB disconnect, device number 6 [ 1991.371142][T22688] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -19 [ 1991.428319][ T5847] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1991.465609][ T5847] oti6858 5-1:1.0: device disconnected [ 1995.648972][T22735] overlayfs: overlapping lowerdir path [ 1995.720170][T22737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1998.249295][T22756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4381'. [ 2000.172128][T22772] overlayfs: overlapping lowerdir path [ 2000.789887][T22775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4385'. [ 2005.203163][T22812] overlayfs: failed to resolve './file1/file0': -2 [ 2005.936680][T22818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4396'. [ 2011.175610][T22856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4406'. [ 2017.027304][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4417'. [ 2020.430225][T15458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2021.405332][T22936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4428'. [ 2028.428875][T22979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4440'. [ 2029.093935][T22985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2029.105542][T22985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2029.117628][T22985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2029.127767][T22985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2030.589433][T22985] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2030.597168][T22985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2032.191800][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.774917][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2034.280144][T22985] Bluetooth: hci0: command tx timeout [ 2034.556644][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2035.629646][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2036.468749][T22985] Bluetooth: hci0: command tx timeout [ 2037.096959][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4451'. [ 2037.789048][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.795636][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.834774][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 2038.083653][T22982] chnl_net:caif_netlink_parms(): no params data found [ 2038.507349][T22985] Bluetooth: hci0: command tx timeout [ 2039.698278][T22982] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.726975][T22982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.734244][T22982] bridge_slave_0: entered allmulticast mode [ 2039.768567][T22982] bridge_slave_0: entered promiscuous mode [ 2039.789761][T22982] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.819696][T22982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.850233][T22982] bridge_slave_1: entered allmulticast mode [ 2039.887889][T22982] bridge_slave_1: entered promiscuous mode [ 2040.090408][T22982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.168354][T22982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.648917][T22985] Bluetooth: hci0: command tx timeout [ 2043.044042][T22982] team0: Port device team_slave_0 added [ 2043.701575][T22982] team0: Port device team_slave_1 added [ 2043.957612][T22982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2043.964592][T22982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2043.997813][T22982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2044.018595][T22982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2044.025754][T22982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2044.094691][T22982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2044.934581][T22982] hsr_slave_0: entered promiscuous mode [ 2044.946427][T22982] hsr_slave_1: entered promiscuous mode [ 2044.964015][T22982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2044.972392][T22982] Cannot create hsr debugfs directory [ 2045.190841][ T42] hsr_slave_0: left promiscuous mode [ 2045.814609][ T42] hsr_slave_1: left promiscuous mode [ 2047.434543][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2047.468415][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2047.513628][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2047.619371][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2047.647229][ T42] bridge_slave_1: left allmulticast mode [ 2047.652931][ T42] bridge_slave_1: left promiscuous mode [ 2047.684724][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.427426][ T42] bridge_slave_0: left allmulticast mode [ 2048.483876][ T42] bridge_slave_0: left promiscuous mode [ 2048.529149][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.914820][ T42] veth1_macvtap: left promiscuous mode [ 2048.934573][ T42] veth0_macvtap: left promiscuous mode [ 2048.981038][ T42] veth1_vlan: left promiscuous mode [ 2049.003629][ T42] veth0_vlan: left promiscuous mode [ 2052.136992][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4473'. [ 2053.111387][ T4597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2058.850680][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2058.894749][T23188] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4481'. [ 2060.494945][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2060.607790][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2060.698584][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2061.763353][T23200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 2061.782899][ T42] bond0 (unregistering): Released all slaves [ 2065.811216][T22982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2065.822322][T22982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2065.833619][T22982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2065.845582][T22982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2066.856846][T22982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.899841][T22982] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.963235][T14971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.970611][T14971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2067.054978][T14971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2067.062236][T14971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.727722][T23269] Bluetooth: MGMT ver 1.22 [ 2069.428862][T22982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2070.456643][T22982] veth0_vlan: entered promiscuous mode [ 2070.503857][T22982] veth1_vlan: entered promiscuous mode [ 2070.627819][T22982] veth0_macvtap: entered promiscuous mode [ 2070.665623][T22982] veth1_macvtap: entered promiscuous mode [ 2071.472001][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.574667][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.634478][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.687556][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.743158][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.816169][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.864477][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.940163][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.976939][T22982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.300484][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.354437][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.395828][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.448578][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.493300][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.522921][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.563407][T22982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.590199][T22982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.624079][T22982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2072.697182][T22982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.738512][T22982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.439442][T22982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.459545][T22982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.420175][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.458661][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.509487][ T6728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.550912][ T6728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.977645][T23425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4523'. [ 2086.354190][T14971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2086.817310][T23448] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4520'. [ 2090.390459][T23477] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4535'. [ 2092.656826][T23496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4538'. [ 2099.152745][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.175191][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2102.548047][T23585] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4556'. [ 2103.478530][T23594] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4558'. [ 2109.763613][T23653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4569'. [ 2114.339438][T23682] overlayfs: failed to clone upperpath [ 2120.443395][ T4597] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2120.475075][T23727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4591'. [ 2125.623526][T23758] overlayfs: failed to clone upperpath [ 2125.782981][T23761] program syz.5.4601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2127.320585][T23772] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4603'. [ 2136.643076][T23845] program syz.3.4623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2137.755301][T23854] overlayfs: failed to clone upperpath [ 2140.678316][T23891] program syz.3.4636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2145.918110][T23923] overlayfs: failed to clone upperpath [ 2154.190393][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2160.589252][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.597191][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2164.366727][T24051] program syz.4.4673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2176.201357][T24126] program syz.3.4700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2186.230199][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2188.762438][T22985] Bluetooth: hci0: command 0x0406 tx timeout [ 2193.634374][T24215] program syz.5.4724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2196.340918][T24229] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 2197.995206][T24238] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4728'. [ 2199.900182][T24252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4732'. [ 2220.698473][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2222.072255][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.087604][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.739671][T19368] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 2226.702400][T19368] Bluetooth: hci1: unknown advertising packet type: 0x14 [ 2236.043510][T14810] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 2236.408927][T14810] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 2236.421526][T19368] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 2236.460441][T14810] usb 4-1: config 0 has no interface number 0 [ 2236.486410][T14810] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 2236.529651][T14810] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2236.569543][T14810] usb 4-1: config 0 interface 235 has no altsetting 0 [ 2236.657241][T14810] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 2236.692239][T14810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.700674][T14810] usb 4-1: Product: syz [ 2236.705692][T14810] usb 4-1: Manufacturer: syz [ 2236.710683][T14810] usb 4-1: SerialNumber: syz [ 2236.832855][T14810] usb 4-1: config 0 descriptor?? [ 2236.915230][T14810] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 2236.955764][T14810] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 2236.988297][T14810] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 2237.061453][T14810] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 2237.074448][T14810] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 2237.113337][T14810] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 2237.238241][T14810] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2238.469078][T19985] usb 4-1: USB disconnect, device number 13 [ 2238.640613][T19985] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2238.652890][T19985] keyspan 4-1:0.235: device disconnected [ 2253.915464][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2256.106600][T24551] program syz.3.4814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2261.799411][T20904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2262.070117][T20904] usb 5-1: Using ep0 maxpacket: 8 [ 2262.223757][T20904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2262.250292][T20904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2262.269121][T20904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2262.279144][T20904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 2262.298780][T20904] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2262.307875][T20904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.357791][T20904] usb 5-1: config 0 descriptor?? [ 2262.370072][T24587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2262.850326][T20904] usb 5-1: USB disconnect, device number 7 [ 2262.853122][T19368] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 2268.524272][T22985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2268.633288][T22985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2268.806857][T22985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2268.863137][T22985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2269.089696][T22985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2269.099511][T22985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2271.304495][T22985] Bluetooth: hci3: command tx timeout [ 2271.589227][T24627] chnl_net:caif_netlink_parms(): no params data found [ 2272.322646][T24652] ip6t_rpfilter: unknown options [ 2273.361748][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.367984][T22985] Bluetooth: hci3: command tx timeout [ 2273.682766][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.997526][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.060118][T24627] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.067220][T24627] bridge0: port 1(bridge_slave_0) entered disabled state [ 2274.102795][T24627] bridge_slave_0: entered allmulticast mode [ 2274.147064][T24627] bridge_slave_0: entered promiscuous mode [ 2275.672891][T22985] Bluetooth: hci3: command tx timeout [ 2275.784103][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.820475][T24627] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.840690][T24627] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.857770][T24627] bridge_slave_1: entered allmulticast mode [ 2275.924259][T24627] bridge_slave_1: entered promiscuous mode [ 2277.206602][T24627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2277.353779][T24677] binder: 24676:24677 ioctl c0306201 0 returned -14 [ 2278.476094][T19368] Bluetooth: hci3: command tx timeout [ 2278.485336][T24680] binder: 24676:24680 ioctl c0185879 0 returned -22 [ 2278.507913][T24627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.729841][T24627] team0: Port device team_slave_0 added [ 2278.776574][T24627] team0: Port device team_slave_1 added [ 2279.146386][T24627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2279.167058][T24627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.205804][T24627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2279.256973][T24627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2279.273514][T24627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2279.306976][T24627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2280.270131][T24627] hsr_slave_0: entered promiscuous mode [ 2280.283278][T24627] hsr_slave_1: entered promiscuous mode [ 2281.882681][T24627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2281.950490][T24627] Cannot create hsr debugfs directory [ 2284.197962][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2284.204357][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2287.289993][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2287.552168][ T3479] hsr_slave_0: left promiscuous mode [ 2287.642964][ T3479] hsr_slave_1: left promiscuous mode [ 2287.878474][T24753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4849'. [ 2289.257568][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2290.776391][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2290.927918][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2290.935384][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2291.035604][ T3479] bridge_slave_1: left allmulticast mode [ 2291.056525][ T3479] bridge_slave_1: left promiscuous mode [ 2291.083881][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.258536][ T3479] bridge_slave_0: left allmulticast mode [ 2291.264234][ T3479] bridge_slave_0: left promiscuous mode [ 2291.277635][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.000204][ T3479] veth1_macvtap: left promiscuous mode [ 2292.005804][ T3479] veth0_macvtap: left promiscuous mode [ 2292.036618][ T3479] veth1_vlan: left promiscuous mode [ 2292.057090][ T3479] veth0_vlan: left promiscuous mode [ 2298.527952][T24797] overlayfs: failed to resolve './file1/file0': -2 [ 2305.081124][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 2305.542308][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 2306.649243][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2306.739802][T24831] overlayfs: failed to resolve './file1/file0': -2 [ 2307.014452][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2311.303950][ T3479] bond0 (unregistering): Released all slaves [ 2312.476709][T24859] netlink: 'syz.3.4881': attribute type 4 has an invalid length. [ 2312.743664][T24866] overlayfs: failed to resolve './file1/file0': -2 [ 2314.253308][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.283886][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.292491][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.300748][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.308588][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.319551][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.339836][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.348514][T19985] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2314.419570][T19985] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 2314.443187][T24627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2314.506439][T24627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2314.597534][T24627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2314.653460][T24876] fido_id[24876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2314.669154][T24627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2314.786487][T24880] 9pnet_fd: Insufficient options for proto=fd [ 2314.922701][T24627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2314.994128][T24627] 8021q: adding VLAN 0 to HW filter on device team0 [ 2315.865811][T23171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.873053][T23171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2315.962832][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.970069][ T6728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2316.130865][T24627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2317.716420][T24627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2318.075128][T24627] veth0_vlan: entered promiscuous mode [ 2318.227206][T24627] veth1_vlan: entered promiscuous mode [ 2318.970908][T24627] veth0_macvtap: entered promiscuous mode [ 2319.016690][T24627] veth1_macvtap: entered promiscuous mode [ 2319.092363][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.107852][T24925] futex_wake_op: syz.3.4892 tries to shift op by 32; fix this program [ 2319.626709][T24926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2320.704896][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.733254][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.771672][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.863909][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.884405][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.919632][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.999330][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.064289][T24627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2322.506575][T23881] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2322.556421][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.589984][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.613856][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.645289][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.672925][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.714016][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.735704][T24627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2322.783793][T24627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2322.808943][T24627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2322.855384][T24627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.903720][T24627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.912466][T24627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2323.749266][T24627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2324.104393][T23171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2324.112699][T23171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2324.234821][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2324.242684][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2344.886833][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.893909][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.870778][T25119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2351.269366][T25132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4941'. [ 2351.616799][ T5811] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2352.190175][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2352.273779][ T5811] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2352.304648][ T5811] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2352.325830][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.340744][ T5811] usb 5-1: config 0 descriptor?? [ 2354.405017][T14810] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 2354.854572][ T5811] Bluetooth: Can't get version to change to load ram patch err [ 2354.863069][ T5811] Bluetooth: Loading sysconfig file failed [ 2354.868931][ T5811] ath3k: probe of 5-1:0.0 failed with error -71 [ 2354.980573][ T5811] usb 5-1: USB disconnect, device number 8 [ 2355.123227][ T6728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2355.591777][T14810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2355.624398][T14810] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2355.821295][T14810] usb 3-1: can't read configurations, error -71 [ 2359.360129][T25188] overlayfs: overlapping lowerdir path [ 2372.505019][ T5847] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2381.783811][T19368] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 2387.904663][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2394.052519][T25352] Bluetooth: hci3: command 0x0406 tx timeout [ 2398.091051][T25391] futex_wake_op: syz.3.5003 tries to shift op by 32; fix this program [ 2407.187329][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.193655][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.433550][T19368] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 2408.625476][T25438] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 2412.472632][T25454] program syz.3.5020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2415.057794][T19368] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 2415.759090][T25466] futex_wake_op: syz.5.5013 tries to shift op by 32; fix this program [ 2416.276450][T25466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2421.192996][T23881] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2424.915508][T19985] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2425.235467][T19985] usb 3-1: Using ep0 maxpacket: 8 [ 2425.259989][T19985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2425.272167][T19985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2425.283473][T19985] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2425.294136][T19985] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 2425.305601][T19985] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2425.314811][T19985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.348578][T19985] usb 3-1: config 0 descriptor?? [ 2425.366801][T25501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2425.827448][T25508] futex_wake_op: syz.4.5034 tries to shift op by 32; fix this program [ 2426.415691][T25508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2426.945505][ C0] Bluetooth: hci2: Unexpected continuation: 1 bytes [ 2427.152887][T19985] usb 3-1: USB disconnect, device number 14 [ 2427.161493][T19368] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 2427.366632][T19368] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 2438.367890][T25562] futex_wake_op: syz.3.5044 tries to shift op by 32; fix this program [ 2440.424428][T25562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2448.470953][T25601] fuse: Bad value for 'fd' [ 2450.397228][T25611] program syz.3.5066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2450.707424][T25618] overlayfs: missing 'lowerdir' [ 2451.217853][T25620] futex_wake_op: syz.2.5063 tries to shift op by 32; fix this program [ 2451.496060][T25621] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2454.443392][T14971] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2458.201968][T25653] program syz.4.5077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2460.181495][T25667] futex_wake_op: syz.5.5079 tries to shift op by 32; fix this program [ 2460.732836][T25667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2462.960286][T25679] overlayfs: missing 'lowerdir' [ 2467.759125][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.766133][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2473.746583][T25717] overlayfs: failed to resolve './file1/file0': -2 [ 2483.128926][T25748] program syz.2.5095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2486.102094][T25762] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2486.111402][T25762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2488.740774][T15458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2489.073658][T25776] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2489.081455][T25776] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2492.817852][T25794] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2492.827082][T25794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2498.385322][T25830] overlayfs: failed to resolve './file1': -2 [ 2505.114987][T25866] overlayfs: missing 'lowerdir' [ 2512.510421][T25902] overlayfs: failed to resolve './file1': -2 [ 2519.510960][T25919] program syz.4.5141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2519.852933][T25931] futex_wake_op: syz.4.5148 tries to shift op by 32; fix this program [ 2520.837138][T25936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2521.319824][T25941] overlayfs: failed to resolve './file1/file0': -2 [ 2524.802558][ T3479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2524.880288][T25964] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 2528.038505][T25983] overlayfs: missing 'workdir' [ 2529.211121][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.220799][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2535.461749][T26011] overlayfs: missing 'workdir' [ 2558.204820][T15028] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2558.358803][T26130] program syz.2.5200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2558.424364][T15028] usb 5-1: Using ep0 maxpacket: 32 [ 2558.436258][T15028] usb 5-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 2558.454547][T15028] usb 5-1: config 255 has an invalid interface descriptor of length 8, skipping [ 2558.489386][T15028] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2558.503921][T15028] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 253 [ 2558.517057][T15028] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2558.528511][T15028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.869643][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2561.626914][T26147] futex_wake_op: syz.3.5202 tries to shift op by 32; fix this program [ 2562.608387][T15028] usb 5-1: string descriptor 0 read error: -71 [ 2563.300677][T15028] usb 5-1: USB disconnect, device number 9 [ 2563.364606][T26147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2566.730153][T26168] program syz.5.5210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2573.129381][T26202] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5212'. [ 2575.685696][T26215] program syz.2.5222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2575.836028][T26224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5227'. [ 2575.846736][T26224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5227'. [ 2575.857963][T26224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5227'. [ 2582.179747][T26247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5230'. [ 2582.280983][T26251] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.5236'. [ 2584.458584][T26266] bridge0: port 3(syz_tun) entered blocking state [ 2584.482900][T26266] bridge0: port 3(syz_tun) entered disabled state [ 2584.502945][T26266] syz_tun: entered allmulticast mode [ 2584.509552][T26266] syz_tun: entered promiscuous mode [ 2584.543313][T26266] bridge0: port 3(syz_tun) entered blocking state [ 2584.550554][T26266] bridge0: port 3(syz_tun) entered forwarding state [ 2591.502349][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.508673][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.554769][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2599.572668][T26336] netlink: 'syz.3.5259': attribute type 29 has an invalid length. [ 2599.592043][T26336] netlink: 'syz.3.5259': attribute type 29 has an invalid length. [ 2599.641596][T26336] netlink: 'syz.3.5259': attribute type 29 has an invalid length. [ 2599.673351][T26336] netlink: 'syz.3.5259': attribute type 29 has an invalid length. [ 2616.752107][T26419] xt_hashlimit: size too large, truncated to 1048576 [ 2619.870140][T26439] futex_wake_op: syz.3.5286 tries to shift op by 32; fix this program [ 2622.248107][T26441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2623.929405][T26453] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2623.970985][T26453] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2627.371535][T26468] program syz.4.5292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2628.391127][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2630.732228][T26483] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 2652.672024][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.680371][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2661.489328][T14810] IPVS: starting estimator thread 0... [ 2661.606294][T26632] IPVS: using max 9 ests per chain, 21600 per kthread [ 2661.666504][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2670.188075][T26673] program syz.3.5346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2671.319391][T26680] (null): rxe_set_mtu: Set mtu to 1024 [ 2672.464951][T26680] infiniband syz0: set active [ 2672.481672][T26680] infiniband syz0: added bond_slave_1 [ 2672.509210][T26680] syz0: rxe_create_cq: returned err = -12 [ 2672.556097][T26680] infiniband syz0: Couldn't create ib_mad CQ [ 2672.583102][T26680] infiniband syz0: Couldn't open port 1 [ 2672.858256][T26680] RDS/IB: syz0: added [ 2672.916140][T26680] smc: adding ib device syz0 with port count 1 [ 2672.970162][T26680] smc: ib device syz0 port 1 has pnetid [ 2673.644686][T26713] program syz.4.5363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2675.875028][T26718] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2675.891089][T26718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2689.949406][T26792] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 2693.049823][T25309] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2697.351829][T26840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2698.946302][T26850] syzkaller0: entered promiscuous mode [ 2698.951821][T26850] syzkaller0: entered allmulticast mode [ 2705.654114][T26881] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2705.672912][T26881] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2714.892976][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.899313][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.189590][T26930] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2715.202656][T26930] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2721.140345][T26963] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 2721.171399][T26963] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2724.371254][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2736.937605][T27042] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 2736.946372][ T8] IPVS: starting estimator thread 0... [ 2737.039746][T27044] IPVS: using max 11 ests per chain, 26400 per kthread [ 2738.049906][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 2760.784626][ T3479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2761.276331][T27146] bridge0: port 3(syz_tun) entered blocking state [ 2761.287762][T27146] bridge0: port 3(syz_tun) entered disabled state [ 2761.304754][T27146] syz_tun: entered allmulticast mode [ 2761.312206][T27146] syz_tun: entered promiscuous mode [ 2761.337736][T27146] bridge0: port 3(syz_tun) entered blocking state [ 2761.344338][T27146] bridge0: port 3(syz_tun) entered forwarding state [ 2775.262069][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.269196][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2783.219539][T27264] overlayfs: failed to resolve './file2': -2 [ 2788.471221][T27290] overlayfs: failed to resolve './file2': -2 [ 2794.035189][T27322] overlayfs: failed to resolve './file2': -2 [ 2795.466336][ T3479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2802.538972][T27384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2803.462811][T27400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2806.669643][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2806.669657][ T28] audit: type=1800 audit(1785837758.437:637): pid=27431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5591" name="addr_trtype" dev="configfs" ino=79262 res=0 errno=0 [ 2809.780075][T27453] binder_alloc: 27452: binder_alloc_buf size 280 failed, no address space [ 2809.794524][T27453] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 2809.818024][ T28] audit: type=1800 audit(1785837761.587:638): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5600" name="addr_trtype" dev="configfs" ino=79885 res=0 errno=0 [ 2811.895203][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5604'. [ 2813.906835][T27484] socket: no more sockets [ 2822.779616][T27553] overlayfs: failed to resolve './file0': -2 [ 2823.231560][T27564] (null): rxe_set_mtu: Set mtu to 1024 [ 2823.251293][T27564] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2823.265348][T27564] (null): rxe_set_mtu: Set mtu to 4096 [ 2823.272283][T27564] lo speed is unknown, defaulting to 1000 [ 2823.288365][T27564] lo speed is unknown, defaulting to 1000 [ 2823.303520][T27564] lo speed is unknown, defaulting to 1000 [ 2823.748973][T27564] infiniband sz1: set active [ 2823.753957][T20904] lo speed is unknown, defaulting to 1000 [ 2823.773741][T27564] infiniband sz1: added lo [ 2824.626022][T27529] syz.5.5627 (27529): drop_caches: 2 [ 2824.709320][T27564] RDS/IB: sz1: added [ 2824.738700][T27564] smc: adding ib device sz1 with port count 1 [ 2824.754764][T27564] smc: ib device sz1 port 1 has pnetid [ 2824.804198][T27564] lo speed is unknown, defaulting to 1000 [ 2824.812514][T15028] lo speed is unknown, defaulting to 1000 [ 2825.250255][T27564] lo speed is unknown, defaulting to 1000 [ 2825.590503][T27565] bond1: entered promiscuous mode [ 2826.277483][T27585] bond_slave_0: entered promiscuous mode [ 2826.284258][T27585] bond_slave_1: entered promiscuous mode [ 2826.343405][T27585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2826.374869][T27585] bond1: (slave macvlan2): making interface the new active one [ 2826.382926][T23171] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:28db:c8ff:feee:3d0f error=-28 [ 2826.392468][T27585] macvlan2: entered promiscuous mode [ 2826.398798][T27585] bond0: entered promiscuous mode [ 2826.451601][T27585] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 2826.461262][ T3479] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:28db:c8ff:feee:3d0f error=-28 [ 2826.472476][T27588] overlayfs: failed to resolve './file0': -2 [ 2826.500855][T27564] lo speed is unknown, defaulting to 1000 [ 2827.608827][T23881] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2827.670967][T27564] lo speed is unknown, defaulting to 1000 [ 2829.321469][T27564] lo speed is unknown, defaulting to 1000 [ 2829.775901][T27616] overlayfs: failed to resolve './file0': -2 [ 2830.067281][T27622] (null): rxe_set_mtu: Set mtu to 4096 [ 2830.073546][T27622] rdma_rxe: rxe_newlink: failed to add lo [ 2834.873361][T27643] vfio-pci: probe of 0000:00:00.0 failed with error -22 [ 2836.635979][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.642387][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2841.101148][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2841.301168][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 2841.319696][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2841.347393][ T5812] usb 4-1: config 0 has no interfaces? [ 2841.369727][ T5812] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2841.396147][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2841.437305][ T5812] usb 4-1: config 0 descriptor?? [ 2843.039939][ T8] usb 4-1: USB disconnect, device number 14 [ 2845.023665][ T5812] IPVS: starting estimator thread 0... [ 2845.140869][T27710] IPVS: using max 14 ests per chain, 33600 per kthread [ 2848.980643][T20904] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2848.996370][ T8] IPVS: starting estimator thread 0... [ 2849.090600][T27741] IPVS: using max 10 ests per chain, 24000 per kthread [ 2850.599805][T20904] usb 4-1: Using ep0 maxpacket: 32 [ 2850.607396][T20904] usb 4-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 2850.630267][T20904] usb 4-1: config 255 has an invalid interface descriptor of length 8, skipping [ 2850.639350][T20904] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2850.681467][T20904] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 253 [ 2850.712512][T20904] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2850.776641][T20904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.160930][T20904] usb 4-1: can't set config #255, error -71 [ 2852.213062][T20904] usb 4-1: USB disconnect, device number 15 [ 2852.286146][T27757] overlayfs: failed to resolve './file1': -2 [ 2861.520300][T27797] overlayfs: failed to resolve './file1': -2 [ 2861.819606][ T5812] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2862.029716][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 2862.059451][ T5812] usb 3-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 2862.093155][ T5812] usb 3-1: config 255 has an invalid interface descriptor of length 8, skipping [ 2862.908664][ T5812] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2862.929305][ T5812] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 253 [ 2862.938979][ T5812] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2862.948545][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2864.730463][ T5812] usb 3-1: string descriptor 0 read error: -71 [ 2864.785264][ T5812] usb 3-1: USB disconnect, device number 15 [ 2866.069968][T27824] overlayfs: failed to resolve './file1': -2 [ 2867.889303][T27838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2867.968569][ T5812] wlan1: authenticate with 08:02:11:00:00:00 [ 2868.106970][T27838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2868.120497][ T5812] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 2868.170106][T23171] wlan1: authenticated [ 2868.183490][ T5809] mac80211_hwsim hwsim25 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 2868.207287][T27840] bond2 (unregistering): Released all slaves [ 2868.242115][T24319] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 2868.258300][T24319] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 2868.278170][T24319] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 2868.308625][T24319] wlan1: association with 08:02:11:00:00:00 timed out [ 2874.308481][ T5812] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2874.608511][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 2874.656158][ T5812] usb 6-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 2874.676715][ T5812] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2874.748485][ T5812] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 253 [ 2874.788448][ T5812] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2874.797781][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.033931][ T5812] usb 6-1: string descriptor 0 read error: -71 [ 2875.070106][ T5812] usb 6-1: USB disconnect, device number 3 [ 2881.517869][ T5812] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2881.738196][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 2881.757804][ T5812] usb 4-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 2881.797766][ T5812] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2881.831275][ T5812] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 253 [ 2881.878613][ T5812] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2881.912790][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2882.192476][ T5812] usb 4-1: string descriptor 0 read error: -71 [ 2882.230260][ T5812] usb 4-1: USB disconnect, device number 16 [ 2883.448223][ T5809] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2883.657646][ T5809] usb 6-1: Using ep0 maxpacket: 8 [ 2883.675420][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2883.721637][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2883.788038][ T5809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2883.814285][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2883.874402][ T5809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2883.907608][ T5809] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2883.916707][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2885.059665][ T5809] usb 6-1: config 0 descriptor?? [ 2885.752148][T19368] Bluetooth: hci2: urb ffff888066b05f00 submission failed (90) [ 2885.942797][ T5809] usb 6-1: USB disconnect, device number 4 [ 2890.273145][T25309] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2892.346969][T27246] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2892.617257][T27246] usb 5-1: Using ep0 maxpacket: 32 [ 2892.662980][T27246] usb 5-1: config 255 has too many interfaces: 253, using maximum allowed: 32 [ 2892.698440][T27246] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.743182][T27246] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 253 [ 2892.816030][T27246] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2892.866990][T27246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2893.873285][ T5809] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 2894.656179][T27246] usb 5-1: string descriptor 0 read error: -71 [ 2894.669768][ T5809] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2894.697509][T27246] usb 5-1: USB disconnect, device number 10 [ 2894.703769][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2894.723209][ T5809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2894.737972][ T5809] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2894.753322][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2894.773145][ T5809] usb 3-1: config 0 descriptor?? [ 2896.021371][ T5809] usbhid 3-1:0.0: can't add hid device: -71 [ 2896.041145][ T5809] usbhid: probe of 3-1:0.0 failed with error -71 [ 2896.068862][ T5809] usb 3-1: USB disconnect, device number 16 [ 2896.235262][T28037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5786'. [ 2898.005935][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.041385][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.559905][T28063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5797'. [ 2905.215538][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5808'. [ 2922.115467][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2934.073580][T15028] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2934.272772][T15028] usb 3-1: Using ep0 maxpacket: 8 [ 2934.321695][T15028] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.353763][T15028] usb 3-1: config 0 has no interfaces? [ 2934.359312][T15028] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2934.393508][T15028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.415842][T15028] usb 3-1: config 0 descriptor?? [ 2937.241398][T19985] usb 3-1: USB disconnect, device number 17 [ 2946.480060][T28325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2946.574776][T28325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2949.662231][T27246] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 2949.854899][T27246] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2949.876466][T27246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2949.888418][T27246] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2949.902327][T27246] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2949.911685][T27246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.929643][T27246] usb 6-1: config 0 descriptor?? [ 2950.168677][T27246] usbhid 6-1:0.0: can't add hid device: -71 [ 2950.188174][T27246] usbhid: probe of 6-1:0.0 failed with error -71 [ 2950.199606][T27246] usb 6-1: USB disconnect, device number 5 [ 2953.113745][T28363] overlayfs: failed to clone upperpath [ 2954.302218][T28382] netlink: 'syz.3.5894': attribute type 2 has an invalid length. [ 2955.392983][T15458] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2955.761693][T27246] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2956.015288][T27246] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2956.714313][T27246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2956.765543][T27246] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2956.835480][T27246] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2956.875361][T27246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2956.925668][T28417] overlayfs: failed to clone upperpath [ 2956.936803][T27246] usb 4-1: config 0 descriptor?? [ 2957.304866][T27246] usbhid 4-1:0.0: can't add hid device: -71 [ 2957.311115][T27246] usbhid: probe of 4-1:0.0 failed with error -71 [ 2957.341863][T27246] usb 4-1: USB disconnect, device number 17 [ 2958.889502][T28444] overlayfs: failed to clone upperpath [ 2959.235042][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.247165][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.571610][T19985] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 2960.805290][T19985] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2960.830867][T19985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2960.934859][T19985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2960.999558][T19985] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2961.029405][T19985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.052666][T19985] usb 6-1: config 0 descriptor?? [ 2961.064260][T28465] overlayfs: failed to clone upperpath [ 2961.291635][T19985] usbhid 6-1:0.0: can't add hid device: -71 [ 2961.307713][T19985] usbhid: probe of 6-1:0.0 failed with error -71 [ 2961.342940][T19985] usb 6-1: USB disconnect, device number 6 [ 2967.004902][ T5811] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 2967.477412][ T5811] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2967.630075][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2967.935938][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2967.956048][ T5811] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2967.966724][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.987203][ T5811] usb 6-1: config 0 descriptor?? [ 2968.180922][T27246] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2968.234409][ T5811] usbhid 6-1:0.0: can't add hid device: -71 [ 2968.247628][ T5811] usbhid: probe of 6-1:0.0 failed with error -71 [ 2968.267271][ T5811] usb 6-1: USB disconnect, device number 7 [ 2968.317629][T28536] overlayfs: failed to clone upperpath [ 2968.387720][T27246] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2968.401431][T27246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2968.419135][T27246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2968.439966][T27246] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2968.449518][T27246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.470379][T27246] usb 3-1: config 0 descriptor?? [ 2968.697432][T27246] usbhid 3-1:0.0: can't add hid device: -71 [ 2968.710799][T27246] usbhid: probe of 3-1:0.0 failed with error -71 [ 2968.730213][T27246] usb 3-1: USB disconnect, device number 18 [ 2970.499635][T28556] binder: 28555:28556 ioctl 4018620d 0 returned -22 [ 2970.515714][T28556] binder: 28555:28556 ioctl 4018620d 0 returned -22 [ 2972.424732][T28579] binder: 28578:28579 ioctl 4018620d 0 returned -22 [ 2972.449840][T28579] binder: 28578:28579 ioctl 4018620d 0 returned -22 [ 2979.570995][ T5809] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 2979.796788][ T5809] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2979.819941][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2979.849713][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2979.869912][ T5809] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2979.879054][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2979.922542][ T5809] usb 4-1: config 0 descriptor?? [ 2980.144159][ T5809] usbhid 4-1:0.0: can't add hid device: -71 [ 2980.164384][ T5809] usbhid: probe of 4-1:0.0 failed with error -71 [ 2980.193247][ T5809] usb 4-1: USB disconnect, device number 18 [ 2983.291556][T25369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2983.304660][T25369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2983.315261][T25369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2983.325222][T25369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2983.337764][T25369] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2983.346844][T25369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2983.399825][T27974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2983.418060][T27974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2983.430848][T27974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2983.440939][T19367] bridge0: port 3(syz_tun) entered disabled state [ 2983.462524][T27974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2983.492373][T27974] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2983.501808][T27974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2983.528891][T19367] syz_tun (unregistering): left allmulticast mode [ 2983.536562][T19367] syz_tun (unregistering): left promiscuous mode [ 2983.543186][T19367] bridge0: port 3(syz_tun) entered disabled state [ 2983.805900][ T1139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2983.995446][ T1139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2984.028792][T28682] lo speed is unknown, defaulting to 1000 [ 2984.102533][ T1139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2984.267908][ T1139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2985.655259][T25369] Bluetooth: hci1: command tx timeout [ 2986.076544][T28682] chnl_net:caif_netlink_parms(): no params data found [ 2986.242172][T28728] binder: BINDER_SET_CONTEXT_MGR already set [ 2986.258573][T28728] binder: 28726:28728 ioctl 4018620d 0 returned -16 [ 2986.624913][T28682] bridge0: port 1(bridge_slave_0) entered blocking state [ 2986.632672][T28682] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.640403][T28682] bridge_slave_0: entered allmulticast mode [ 2986.648437][T28682] bridge_slave_0: entered promiscuous mode [ 2986.660915][T28682] bridge0: port 2(bridge_slave_1) entered blocking state [ 2986.671814][T28682] bridge0: port 2(bridge_slave_1) entered disabled state [ 2986.680859][T28682] bridge_slave_1: entered allmulticast mode [ 2986.688702][T28682] bridge_slave_1: entered promiscuous mode [ 2986.997244][T28682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2987.032545][T28682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2987.949546][T23171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2987.960274][T25369] Bluetooth: hci1: command tx timeout [ 2988.044740][T28682] team0: Port device team_slave_0 added [ 2988.073639][T28682] team0: Port device team_slave_1 added [ 2988.234321][T28757] binder: BINDER_SET_CONTEXT_MGR already set [ 2988.249423][T28757] binder: 28754:28757 ioctl 4018620d 0 returned -16 [ 2988.296283][T28682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2988.319083][T28682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2988.389372][T28682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2988.579579][T28682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2988.586569][T28682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2988.637147][T28682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2988.950412][T17385] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 2988.963951][T28682] hsr_slave_0: entered promiscuous mode [ 2989.034614][T28682] hsr_slave_1: entered promiscuous mode [ 2989.062883][T28682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2989.096666][T28682] Cannot create hsr debugfs directory [ 2989.865376][T17385] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2989.894787][T17385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2989.930736][T17385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2989.999348][T17385] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2990.008436][T17385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2990.032995][T25369] Bluetooth: hci1: command tx timeout [ 2991.692882][T17385] usb 4-1: config 0 descriptor?? [ 2991.773719][T17385] usb 4-1: can't set config #0, error -71 [ 2991.828257][T17385] usb 4-1: USB disconnect, device number 19 [ 2992.108757][T25369] Bluetooth: hci1: command tx timeout [ 2992.248450][T28794] gadgetfs: bound to dummy_udc driver [ 2992.314848][ T1139] hsr_slave_0: left promiscuous mode [ 2992.330024][ T1139] hsr_slave_1: left promiscuous mode [ 2992.336520][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2992.355944][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2992.369654][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2992.387832][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2992.396727][ T1139] bridge_slave_1: left allmulticast mode [ 2992.403113][ T1139] bridge_slave_1: left promiscuous mode [ 2992.419136][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 2992.443193][ T1139] bridge_slave_0: left allmulticast mode [ 2992.449228][ T1139] bridge_slave_0: left promiscuous mode [ 2992.454994][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2992.547207][ T1139] veth1_macvtap: left promiscuous mode [ 2992.553906][ T5847] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2992.562405][ C1] gadgetfs: connected [ 2992.571351][ T5847] gadgetfs: disconnected [ 2992.572615][ T1139] veth0_macvtap: left promiscuous mode [ 2992.585974][ T1139] veth1_vlan: left promiscuous mode [ 2992.592296][ T1139] veth0_vlan: left promiscuous mode [ 2992.755000][ C1] gadgetfs: connected [ 2992.767677][ T5847] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2992.787703][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 2992.806786][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2992.830921][ C1] gadgetfs: configuration #1 [ 2992.990238][T28801] binder: BINDER_SET_CONTEXT_MGR already set [ 2992.997014][T28801] binder: 28800:28801 ioctl 4018620d 0 returned -16 [ 2993.067065][T28794] gadgetfs: suspended from state 3 [ 2993.074408][T28794] gadgetfs: disconnected [ 2993.082395][ T5847] usb 2-1: USB disconnect, device number 8 [ 2996.128541][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 2996.227713][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 2996.308387][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2996.397322][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2997.120990][ T1139] bond0 (unregistering): Released all slaves [ 2997.172768][ T5847] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 2997.382840][ T5847] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2997.408338][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2997.469581][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2997.516903][ T5847] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 2997.539130][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2997.559236][ T5847] usb 4-1: config 0 descriptor?? [ 2997.817857][ T5847] usbhid 4-1:0.0: can't add hid device: -71 [ 2997.847554][ T5847] usbhid: probe of 4-1:0.0 failed with error -71 [ 2997.880460][ T5847] usb 4-1: USB disconnect, device number 20 [ 2998.120539][ T1139] IPVS: stop unused estimator thread 0... [ 2998.658860][T28682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2998.671825][T28682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2998.703714][T28682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2998.724376][T28682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2998.957282][T28682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2999.045366][T28682] 8021q: adding VLAN 0 to HW filter on device team0 [ 2999.130301][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2999.137478][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2999.204487][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2999.211770][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3000.204583][T28682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3000.214385][T28823] syz.2.6052 (28823): drop_caches: 2 [ 3002.738336][T17385] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 3002.770378][T28682] veth0_vlan: entered promiscuous mode [ 3002.810215][T28682] veth1_vlan: entered promiscuous mode [ 3002.895966][T28682] veth0_macvtap: entered promiscuous mode [ 3002.925628][T28682] veth1_macvtap: entered promiscuous mode [ 3002.954778][T17385] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3002.991967][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3002.995322][T17385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3003.017387][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.048290][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3003.063538][T17385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3003.076950][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.077034][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3003.077051][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.077067][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3003.077079][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.078726][T28682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3003.146945][T17385] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3003.193820][T17385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.225112][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6063'. [ 3003.236319][T17385] usb 4-1: config 0 descriptor?? [ 3003.242892][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3003.267676][T28897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6063'. [ 3003.274098][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.307448][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3003.331493][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.362140][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3003.373474][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.384448][T28682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3003.395572][T28682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3003.416930][T28682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3003.474963][T28682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3003.486453][T17385] usbhid 4-1:0.0: can't add hid device: -71 [ 3003.487067][T28682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3003.504594][T17385] usbhid: probe of 4-1:0.0 failed with error -71 [ 3003.508159][T28682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3003.534742][T28682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3003.538029][T17385] usb 4-1: USB disconnect, device number 21 [ 3003.722783][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3003.754399][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3003.812721][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3003.831120][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3006.294352][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 3006.326104][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6071'. [ 3010.536846][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 3010.567406][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'. [ 3013.259737][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'. [ 3013.280282][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'. [ 3014.951846][T29065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6100'. [ 3016.653887][T29070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.762014][T29070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.804384][T29070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3018.081780][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6103'. [ 3018.104955][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6103'. [ 3018.215293][T29091] netlink: 'syz.5.6108': attribute type 2 has an invalid length. [ 3019.903335][T29100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3019.975843][T29100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3020.009968][T29100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3021.617567][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.623889][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.919827][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6116'. [ 3021.946362][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6116'. [ 3024.669687][T29121] netlink: 'syz.4.6121': attribute type 2 has an invalid length. [ 3027.009595][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.106782][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.158952][T29134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.205169][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6126'. [ 3027.247181][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6126'. [ 3029.405748][T27246] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 3029.451245][T29154] netlink: 'syz.2.6130': attribute type 2 has an invalid length. [ 3029.619553][T27246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3029.651956][T27246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3029.675531][T27246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3029.706521][T27246] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3029.740626][T27246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.758016][T27246] usb 5-1: config 0 descriptor?? [ 3029.980351][T29142] NFSD: attempt to initialize umh client tracking in a container ignored. [ 3030.019142][T29142] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 3030.035663][T27246] usbhid 5-1:0.0: can't add hid device: -71 [ 3030.044379][T27246] usbhid: probe of 5-1:0.0 failed with error -71 [ 3030.051625][T29142] NFSD: Unable to initialize client recovery tracking! (-22) [ 3030.070049][T29142] NFSD: starting 90-second grace period (net f000045c) [ 3030.085171][T27246] usb 5-1: USB disconnect, device number 11 [ 3032.101587][T29181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.174069][T29181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.209796][T29181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.697791][T29193] kAFS: No cell specified [ 3034.430569][T29205] gadgetfs: bound to dummy_udc driver [ 3034.475282][ T5811] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 3034.679875][ T5811] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3034.700995][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3034.726487][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3034.754638][ T5811] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3034.775677][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3034.800882][ T5811] usb 6-1: config 0 descriptor?? [ 3035.041221][ T5811] usbhid 6-1:0.0: can't add hid device: -71 [ 3035.057908][ T5811] usbhid: probe of 6-1:0.0 failed with error -71 [ 3035.090876][ T5811] usb 6-1: USB disconnect, device number 8 [ 3035.212896][T29217] kAFS: No cell specified [ 3035.289087][T29221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.358224][T29221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.082860][T29252] kAFS: No cell specified [ 3038.355008][T17385] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 3038.448216][T29273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.459572][T29275] kAFS: No cell specified [ 3038.541505][T29273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.577548][T29273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.595808][T17385] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3038.630214][T17385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3038.660673][T17385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3038.695138][T17385] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3038.715082][T17385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3038.742904][T17385] usb 4-1: config 0 descriptor?? [ 3039.061272][T17385] usbhid 4-1:0.0: can't add hid device: -71 [ 3039.092124][T17385] usbhid: probe of 4-1:0.0 failed with error -71 [ 3039.133467][T17385] usb 4-1: USB disconnect, device number 22 [ 3041.099361][T29299] kAFS: No cell specified [ 3041.277890][T29305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.126779][T29305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.167320][T29305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.473527][T27246] IPVS: starting estimator thread 0... [ 3042.564670][T29317] IPVS: using max 10 ests per chain, 24000 per kthread [ 3042.839735][T29327] kAFS: No cell specified [ 3044.691354][T29346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.778316][T29346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.797506][T29346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3048.229849][T29395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3048.301241][T29395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3048.336539][T29395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3051.928624][T29435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3051.997922][T29435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3052.039431][T29435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3057.001049][T29472] gadgetfs: bound to dummy_udc driver [ 3057.037670][T29472] 9pnet_fd: Insufficient options for proto=fd [ 3057.793864][T29488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.334135][T29495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3060.714289][T20904] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 3062.346264][T20904] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3062.388578][T20904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3062.431263][T20904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3062.467180][T20904] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3062.497878][T20904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3062.518754][T20904] usb 5-1: config 0 descriptor?? [ 3062.673980][T20904] usbhid 5-1:0.0: can't add hid device: -71 [ 3062.680265][T20904] usbhid: probe of 5-1:0.0 failed with error -71 [ 3062.736671][T20904] usb 5-1: USB disconnect, device number 12 [ 3064.511573][T29539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3065.394190][T29539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3065.431979][T29539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3067.893026][T19985] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 3067.983632][T29575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.055179][T29578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.090058][T29575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.099330][T19985] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3068.131634][T19985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3068.163786][T19985] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3068.198199][T19985] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3068.222769][T19985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3068.244060][T19985] usb 5-1: config 0 descriptor?? [ 3068.458622][T19985] usbhid 5-1:0.0: can't add hid device: -71 [ 3068.488335][T19985] usbhid: probe of 5-1:0.0 failed with error -71 [ 3068.502843][T19985] usb 5-1: USB disconnect, device number 13 [ 3072.323062][T29616] fuse: Bad value for 'fd' [ 3074.420537][T29634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3074.505065][T29635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3074.527987][T29634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3074.956879][T29645] fuse: Bad value for 'fd' [ 3075.027297][T29648] "syz.2.6322" (29648) uses obsolete ecb(arc4) skcipher [ 3075.226798][T29656] bridge0: port 3(syz_tun) entered blocking state [ 3075.233917][T29656] bridge0: port 3(syz_tun) entered disabled state [ 3075.240983][T29656] syz_tun: entered allmulticast mode [ 3075.249507][T29656] syz_tun: entered promiscuous mode [ 3075.256184][T29656] bridge0: port 3(syz_tun) entered blocking state [ 3075.262846][T29656] bridge0: port 3(syz_tun) entered forwarding state [ 3075.374734][T29660] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 3076.906728][T29663] sctp: [Deprecated]: syz.3.6328 (pid 29663) Use of int in maxseg socket option. [ 3076.906728][T29663] Use struct sctp_assoc_value instead [ 3077.114842][T29668] fuse: Bad value for 'fd' [ 3077.269209][T29673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.344953][T29673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.360558][T29673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3081.542588][T29712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3081.633197][T29712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3081.663810][T29712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3082.106351][T28902] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 3082.106374][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.106422][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.755214][T28902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3083.791173][T28902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3083.847473][T28902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3083.896372][T28902] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3083.927301][T28902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.973833][T28902] usb 4-1: config 0 descriptor?? [ 3084.210270][T28902] usbhid 4-1:0.0: can't add hid device: -71 [ 3084.221708][T28902] usbhid: probe of 4-1:0.0 failed with error -71 [ 3084.246127][T28902] usb 4-1: USB disconnect, device number 23 [ 3084.386627][T27974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3084.400246][T27974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3084.413613][T27974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3084.422467][T27974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3084.438757][T27974] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3084.446355][T27974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3086.277622][T29750] lo speed is unknown, defaulting to 1000 [ 3086.501153][T25369] Bluetooth: hci2: command tx timeout [ 3086.867587][T29750] chnl_net:caif_netlink_parms(): no params data found [ 3086.979002][T29769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.034138][T29750] bridge0: port 1(bridge_slave_0) entered blocking state [ 3087.047324][T29750] bridge0: port 1(bridge_slave_0) entered disabled state [ 3087.055565][T29750] bridge_slave_0: entered allmulticast mode [ 3087.064247][T29750] bridge_slave_0: entered promiscuous mode [ 3087.076890][T29750] bridge0: port 2(bridge_slave_1) entered blocking state [ 3087.086059][T29769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.086280][T29750] bridge0: port 2(bridge_slave_1) entered disabled state [ 3087.117724][T29769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.128100][T29750] bridge_slave_1: entered allmulticast mode [ 3087.136710][T29750] bridge_slave_1: entered promiscuous mode [ 3087.169906][T20551] bridge0: port 3(syz_tun) entered disabled state [ 3087.208669][T20551] syz_tun (unregistering): left allmulticast mode [ 3087.215451][T20551] syz_tun (unregistering): left promiscuous mode [ 3087.224711][T20551] bridge0: port 3(syz_tun) entered disabled state [ 3087.292484][T29750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3087.305085][T29750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3087.380600][T29750] team0: Port device team_slave_0 added [ 3087.408227][T29750] team0: Port device team_slave_1 added [ 3087.460354][T29750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3087.467941][T29750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3087.509618][T29750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3088.347816][T29750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3088.355446][T29750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3088.382462][T29750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3088.478847][T29750] hsr_slave_0: entered promiscuous mode [ 3088.486472][T29750] hsr_slave_1: entered promiscuous mode [ 3088.590725][T25369] Bluetooth: hci2: command tx timeout [ 3088.888113][T29750] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3089.219864][T29750] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3089.433200][T29750] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3089.603647][T29750] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3090.670775][T25369] Bluetooth: hci2: command tx timeout [ 3090.682053][T29750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3090.707452][T29750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3090.718579][T29750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3090.734628][T29750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3090.780989][T29814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.857533][T29814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.867529][T29750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3090.888983][T29750] 8021q: adding VLAN 0 to HW filter on device team0 [ 3090.903490][T29814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3090.912763][T23171] bridge0: port 1(bridge_slave_0) entered blocking state [ 3090.920455][T23171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3090.944886][T15458] bridge0: port 2(bridge_slave_1) entered blocking state [ 3090.953434][T15458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3091.319396][T29750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3092.769501][T25369] Bluetooth: hci2: command tx timeout [ 3093.643641][T29750] veth0_vlan: entered promiscuous mode [ 3093.658210][T29750] veth1_vlan: entered promiscuous mode [ 3095.273543][T29750] veth0_macvtap: entered promiscuous mode [ 3095.304655][T29750] veth1_macvtap: entered promiscuous mode [ 3095.347899][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3095.361392][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.371991][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3095.391197][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.401631][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3095.414019][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.424509][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3095.435898][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.446402][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3095.467426][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.493009][T29750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3095.517316][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3095.540075][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.562508][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3095.605940][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.630099][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3095.653611][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.674887][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3095.702055][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.723562][T29750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3095.740308][T29750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3095.772702][T29750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3095.821401][T29750] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3095.840358][T29750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3095.849096][T29750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3095.870088][T29750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3096.057446][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3096.085874][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3096.184472][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3096.240666][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3096.351348][T29858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.448408][T29858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3096.486573][T29858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3097.310516][ T5809] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 3097.612555][ T5809] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3097.626685][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3097.644165][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3097.663944][ T5809] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3097.675760][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3097.721187][ T5809] usb 4-1: config 0 descriptor?? [ 3098.055498][ T5809] usbhid 4-1:0.0: can't add hid device: -71 [ 3098.064322][ T5809] usbhid: probe of 4-1:0.0 failed with error -71 [ 3098.104269][ T5809] usb 4-1: USB disconnect, device number 24 [ 3100.876420][T29893] binder: BINDER_SET_CONTEXT_MGR already set [ 3101.030671][T29893] binder: 29888:29893 ioctl 4018620d 200000004a80 returned -16 [ 3101.842644][T29896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3101.931043][T29896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3101.972453][T29896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3110.017428][T29941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3110.091491][T29941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3110.116274][T29941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3111.903217][T27974] Bluetooth: hci1: command 0x0406 tx timeout [ 3112.692114][T14810] IPVS: starting estimator thread 0... [ 3112.788863][T29964] IPVS: using max 10 ests per chain, 24000 per kthread [ 3112.933006][T29970] (null): rxe_set_mtu: Set mtu to 1024 [ 3112.969159][T29970] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3117.944306][T30005] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 3117.977059][T30006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3118.061069][T30006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3118.099955][T30006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3120.408306][T30041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3120.490020][T30041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3120.510727][T30041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3120.528117][T19985] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 3120.726355][T19985] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3120.744428][T19985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3120.759385][T19985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3120.774451][T19985] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3120.784328][T19985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3120.796248][T19985] usb 6-1: config 0 descriptor?? [ 3122.060439][T19985] usbhid 6-1:0.0: can't add hid device: -71 [ 3122.076789][T19985] usbhid: probe of 6-1:0.0 failed with error -71 [ 3122.090881][T19985] usb 6-1: USB disconnect, device number 9 [ 3125.258501][T30080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3125.348553][T30080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3125.370203][T30080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3130.531313][T30125] xt_hashlimit: size too large, truncated to 1048576 [ 3132.116466][T30139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3132.199929][T30140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3132.221943][T30139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3132.850657][T30145] sz1: rxe_newlink: already configured on lo [ 3139.927483][T30179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.014530][T30179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3140.035823][T30179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.327021][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3144.333380][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3147.316788][T30232] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 3149.219633][T30240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.304402][T30240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3149.327747][T30240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3151.755755][T17385] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 3151.800225][T30275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3152.555934][T30278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3152.588229][T17385] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3152.615554][T17385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3152.635386][T17385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3152.655873][T17385] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3152.665257][T17385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3152.698064][T17385] usb 4-1: config 0 descriptor?? [ 3152.930084][T17385] usbhid 4-1:0.0: can't add hid device: -71 [ 3152.946886][T17385] usbhid: probe of 4-1:0.0 failed with error -71 [ 3152.971251][T17385] usb 4-1: USB disconnect, device number 25 [ 3170.765544][T25369] Bluetooth: hci2: link tx timeout [ 3170.776284][T25369] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 3173.277491][T25369] Bluetooth: hci2: command 0x0406 tx timeout [ 3177.383719][T30441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6602'. [ 3178.988558][T30460] svc: failed to register nfsdv3 RPC service (errno 111). [ 3179.025633][T30460] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3179.789428][T30472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6611'. [ 3182.731818][T30491] svc: failed to register nfsdv3 RPC service (errno 111). [ 3182.769832][T30491] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3184.443098][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6621'. [ 3185.753023][T30516] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 3191.116454][T30566] xt_hashlimit: size too large, truncated to 1048576 [ 3193.511478][T30603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.602461][T30603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3193.624373][T30603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.969951][T30617] fuse: Unknown parameter 'group_i00000000000000000000' [ 3198.489967][T30640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3198.561688][T30640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3198.613713][T30640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3199.285697][T30647] xt_hashlimit: size too large, truncated to 1048576 [ 3199.615258][T30658] fuse: Unknown parameter 'group_id00000000000000000000' [ 3203.242557][T30687] fuse: Unknown parameter 'group_id00000000000000000000' [ 3203.404662][T30691] gadgetfs: bound to dummy_udc driver [ 3205.053174][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.059490][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3209.099826][T30726] gadgetfs: bound to dummy_udc driver [ 3214.997576][T30776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6709'. [ 3215.123234][T30781] gadgetfs: bound to dummy_udc driver [ 3216.197598][T30788] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 3217.540185][T27246] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 3217.751624][T27246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3217.766120][T27246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3217.794727][T27246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3217.839267][T27246] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3217.872423][T27246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3217.899347][T27246] usb 5-1: config 0 descriptor?? [ 3218.119568][T27246] usbhid 5-1:0.0: can't add hid device: -71 [ 3218.129455][T27246] usbhid: probe of 5-1:0.0 failed with error -71 [ 3218.146424][T27246] usb 5-1: USB disconnect, device number 14 [ 3221.615628][T30828] fuse: Bad value for 'fd' [ 3224.638565][T17385] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 3224.891162][T17385] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3224.911443][T17385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3224.932231][T17385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3224.948614][T17385] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3224.958720][T17385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3224.971277][T17385] usb 4-1: config 0 descriptor?? [ 3225.213568][T17385] usbhid 4-1:0.0: can't add hid device: -71 [ 3225.246889][T17385] usbhid: probe of 4-1:0.0 failed with error -71 [ 3225.276113][T17385] usb 4-1: USB disconnect, device number 26 [ 3228.686819][T30874] gadgetfs: bound to dummy_udc driver [ 3230.159501][T28902] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 3230.381356][T28902] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3230.399267][T28902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3230.439296][T28902] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3230.923835][T30893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6752'. [ 3231.907606][T28902] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3231.917136][T28902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.948200][T28902] usb 6-1: config 0 descriptor?? [ 3232.091481][T28902] usbhid 6-1:0.0: can't add hid device: -71 [ 3232.097551][T28902] usbhid: probe of 6-1:0.0 failed with error -71 [ 3232.136488][T28902] usb 6-1: USB disconnect, device number 10 [ 3232.287070][T30903] gadgetfs: bound to dummy_udc driver [ 3232.381453][T30905] gadgetfs: bound to dummy_udc driver [ 3233.497931][T30921] fuse: Unknown parameter 'grou00000000000000000000' [ 3233.769232][T19985] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 3235.451255][T19985] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3235.479959][T19985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3235.518718][T19985] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3235.585202][T19985] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 3235.623276][T19985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.653340][T19985] usb 6-1: config 0 descriptor?? [ 3235.966499][T19985] usbhid 6-1:0.0: can't add hid device: -71 [ 3235.975268][T19985] usbhid: probe of 6-1:0.0 failed with error -71 [ 3236.012445][T19985] usb 6-1: USB disconnect, device number 11 [ 3236.212765][T22982] bridge0: port 3(syz_tun) entered disabled state [ 3236.285595][T30939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3236.305633][T22982] syz_tun (unregistering): left allmulticast mode [ 3236.325967][T22982] syz_tun (unregistering): left promiscuous mode [ 3236.333042][T30939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3236.342302][T22982] bridge0: port 3(syz_tun) entered disabled state [ 3236.349330][T30939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3236.357921][T30939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3236.369964][T30939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3236.386380][T30939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3237.664123][T30938] lo speed is unknown, defaulting to 1000 [ 3237.702808][T30951] gadgetfs: bound to dummy_udc driver [ 3239.177605][T30939] Bluetooth: hci0: command tx timeout [ 3241.234618][T30939] Bluetooth: hci0: command tx timeout [ 3241.334101][T30938] chnl_net:caif_netlink_parms(): no params data found [ 3241.604258][T30938] bridge0: port 1(bridge_slave_0) entered blocking state [ 3241.625691][T30938] bridge0: port 1(bridge_slave_0) entered disabled state [ 3241.648744][T30938] bridge_slave_0: entered allmulticast mode [ 3241.675862][T30938] bridge_slave_0: entered promiscuous mode [ 3241.699751][T30938] bridge0: port 2(bridge_slave_1) entered blocking state [ 3241.706928][T30938] bridge0: port 2(bridge_slave_1) entered disabled state [ 3241.728359][T30938] bridge_slave_1: entered allmulticast mode [ 3241.735996][T30938] bridge_slave_1: entered promiscuous mode [ 3242.619048][T30938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3242.662053][T30938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3242.812503][T30938] team0: Port device team_slave_0 added [ 3242.834031][T30938] team0: Port device team_slave_1 added [ 3242.907174][T30938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3242.935714][T30938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3243.008409][T30938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3243.050233][T30938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3243.057387][T30938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3243.118030][T30938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3243.241752][T30938] hsr_slave_0: entered promiscuous mode [ 3243.261527][T30938] hsr_slave_1: entered promiscuous mode [ 3244.699967][T30939] Bluetooth: hci0: command tx timeout [ 3244.713959][T30938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3244.729265][T30998] gadgetfs: bound to dummy_udc driver [ 3244.757932][T30938] Cannot create hsr debugfs directory [ 3246.728013][T30939] Bluetooth: hci0: command tx timeout [ 3246.801183][T30938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3247.040216][T30938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3247.243625][T30938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3247.414046][T30938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3247.820232][T30938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3247.850484][T30938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3247.901768][T30938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3247.923180][T30938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3249.419672][T31024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3250.864720][T31024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3251.010006][T30938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3251.054973][T30938] 8021q: adding VLAN 0 to HW filter on device team0 [ 3251.124563][T23171] bridge0: port 1(bridge_slave_0) entered blocking state [ 3251.131919][T23171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3251.179418][T23171] bridge0: port 2(bridge_slave_1) entered blocking state [ 3251.186770][T23171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3251.309003][T30938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3251.348353][T30938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3251.821061][T30938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3251.959708][T30938] veth0_vlan: entered promiscuous mode [ 3252.005256][T30938] veth1_vlan: entered promiscuous mode [ 3252.068885][T31045] fuse: Unknown parameter 'group_id00000000000000000000' [ 3252.098075][T30938] veth0_macvtap: entered promiscuous mode [ 3252.121565][T30938] veth1_macvtap: entered promiscuous mode [ 3252.199531][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3252.231515][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3252.255961][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3252.272311][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3252.286245][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3252.316824][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3252.328450][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3252.340010][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3252.350383][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3252.361319][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3252.380755][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3252.398014][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3252.446439][T30938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3253.938421][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3253.984155][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.004732][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.029707][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.050746][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.071767][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.092090][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.135300][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.165945][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.187122][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.207267][T30938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3254.229485][T30938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.256612][T30938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3254.288686][T30938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3254.313097][T30938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3254.342114][T30938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3254.374079][T30938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3254.641854][T29868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3254.652412][T29868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3254.727530][T24319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3254.747433][T24319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3255.140301][T31062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3255.198021][T31069] fuse: Bad value for 'fd' [ 3255.321427][T31072] fuse: Unknown parameter 'group_id00000000000000000000' [ 3257.269198][T31090] fuse: Bad value for 'fd' [ 3258.182030][T30939] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 3258.267773][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6822'. [ 3262.790624][T31120] fuse: Bad value for 'fd' [ 3262.842168][T31122] fuse: Unknown parameter 'group_id00000000000000000000' [ 3265.567288][T31137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3267.106517][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3267.121378][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.228693][T31152] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 3269.767506][T31178] fuse: Bad value for 'user_id' [ 3270.752245][T31185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3271.959214][T31201] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 3271.967180][T31201] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 3272.006359][T31204] Bluetooth: MGMT ver 1.22 [ 3272.163502][T31208] fuse: Bad value for 'user_id' [ 3272.383756][T31214] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 3272.394479][T31214] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 3273.266724][T31203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3275.020950][T31235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3275.033138][T31232] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 3275.043219][T31232] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 3275.111092][T31237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3275.263098][T31241] fuse: Bad value for 'user_id' [ 3275.648871][T31245] socket: no more sockets [ 3278.385243][T31267] fuse: Bad value for 'fd' [ 3278.509380][T31271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3279.977879][T31274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3280.724604][T31286] syzkaller1: entered allmulticast mode [ 3281.076900][T31295] fuse: Bad value for 'fd' [ 3283.424111][T31306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3283.507686][T31306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3283.538104][T31306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3285.466905][T31333] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 3285.484487][T31333] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 3288.915315][T31361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3288.972884][T31361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3289.011197][T31361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3289.088646][T31368] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 3289.103641][T31368] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 3291.038171][T31390] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 3291.054579][T31390] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 3291.305055][T31396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3291.401331][T31396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3291.434894][T31396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3292.924816][T31407] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 3292.940549][T31407] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 3294.733750][ T5847] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3294.936198][ T5847] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3294.973845][ T5847] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3294.990637][ T5847] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 3295.008385][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3295.025085][ T5847] usb 4-1: Product: syz [ 3295.035934][ T5847] usb 4-1: Manufacturer: syz [ 3295.046692][ T5847] usb 4-1: SerialNumber: syz [ 3295.076184][ T5847] symbolserial 4-1:1.0: symbol converter detected [ 3295.120476][ T5847] usb 4-1: symbol converter now attached to ttyUSB0 [ 3295.985565][ T5847] usb 4-1: USB disconnect, device number 27 [ 3296.011304][ T5847] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 3296.034293][ T5847] symbolserial 4-1:1.0: device disconnected [ 3296.172671][T31441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3296.258366][T31441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3296.295995][T31441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3299.582669][T31486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3299.597112][T31486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3299.618962][T31486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3299.741589][T31491] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 3299.763586][T31491] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 3309.699415][T31546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6985'. [ 3309.708438][T31546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6985'. [ 3310.973208][T31550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3311.006133][T31550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3311.044907][T31550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3316.156371][T31590] fuse: Unknown parameter '0x0000000000000004' [ 3317.529170][T31611] fuse: Unknown parameter '0x0000000000000004' [ 3319.289524][T31625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3319.309751][T31625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3319.323182][T31625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3319.715050][T31639] fuse: Unknown parameter '0x0000000000000004' [ 3323.290754][T31670] fuse: Invalid rootmode [ 3323.499714][T31673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3323.613199][T31672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3325.670797][T31699] fuse: Invalid rootmode [ 3327.586129][T31713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3327.683949][T31712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3327.849626][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.856472][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.873041][T31723] fuse: Bad value for 'rootmode' [ 3329.943531][T31745] fuse: Bad value for 'rootmode' [ 3331.691358][T31756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3331.764247][T31755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3335.760463][T25369] Bluetooth: hci2: command 0x0406 tx timeout [ 3337.343967][T31797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3337.427686][T31797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3337.459824][T31797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3341.430480][T31832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3341.519536][T31834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3341.554481][T31832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3345.612282][T31873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3345.711524][T31873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3345.754700][T31873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3349.241438][T31902] ------------[ cut here ]------------ [ 3349.246989][T31902] SVC: permsocks remain for nfsd [ 3349.275986][T31902] WARNING: CPU: 0 PID: 31902 at net/sunrpc/svc.c:583 svc_destroy+0x2ed/0x390 [ 3349.285337][T31902] Modules linked in: [ 3349.289934][T31902] CPU: 0 PID: 31902 Comm: syz.5.7122 Not tainted syzkaller #0 [ 3349.297884][T31902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3349.308536][T31902] RIP: 0010:svc_destroy+0x2ed/0x390 [ 3349.313936][T31902] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 62 a7 35 f8 49 8b 37 48 c7 c7 a0 20 d9 8b e8 93 f2 a6 f7 <0f> 0b e9 78 fd ff ff e8 d7 24 dd f7 c6 05 f6 b7 cc 04 01 4c 89 e0 [ 3349.333805][T31902] RSP: 0018:ffffc90004e1fae0 EFLAGS: 00010246 [ 3349.340586][T31902] RAX: 79dbd6fb76653700 RBX: ffff88805f8f3850 RCX: 0000000000080000 [ 3349.348595][T31902] RDX: ffffc90013154000 RSI: 000000000002a863 RDI: 000000000002a864 [ 3349.357080][T31902] RBP: ffffc90004e1fcb8 R08: ffffc90004e1f6e7 R09: 1ffff920009c3edc [ 3349.365877][T31902] R10: dffffc0000000000 R11: fffff520009c3edd R12: ffff88805f8f3800 [ 3349.374036][T31902] R13: dffffc0000000000 R14: ffff88805f8f3850 R15: ffffffff8d3e18e0 [ 3349.382162][T31902] FS: 00007fb0cb2956c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3349.391234][T31902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3349.397849][T31902] CR2: 00007fb0ca3eb700 CR3: 0000000060637000 CR4: 00000000003506f0 [ 3349.406107][T31902] Call Trace: [ 3349.409512][T31902] [ 3349.412486][T31902] write_ports+0xb1a/0xfa0 [ 3349.416982][T31902] ? write_versions+0xe00/0xe00 [ 3349.421967][T31902] ? __might_fault+0xaa/0x120 [ 3349.426725][T31902] ? __virt_addr_valid+0x10c/0x380 [ 3349.431936][T31902] ? __might_fault+0xaa/0x120 [ 3349.436653][T31902] ? __might_fault+0xc6/0x120 [ 3349.441436][T31902] ? __might_fault+0xaa/0x120 [ 3349.446155][T31902] ? simple_transaction_get+0x11d/0x140 [ 3349.451874][T31902] nfsctl_transaction_write+0x10c/0x150 [ 3349.457464][T31902] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 3349.463439][T31902] vfs_write+0x299/0x9a0 [ 3349.467759][T31902] ? file_end_write+0x250/0x250 [ 3349.472807][T31902] ? __fget_files+0x28/0x460 [ 3349.477458][T31902] ? __fget_files+0x3fc/0x460 [ 3349.482302][T31902] ? __fdget_pos+0x2a3/0x330 [ 3349.488255][T31902] ? ksys_write+0x74/0x260 [ 3349.493579][T31902] ksys_write+0x151/0x260 [ 3349.497963][T31902] ? __ia32_sys_read+0x90/0x90 [ 3349.502940][T31902] ? lockdep_hardirqs_on+0x98/0x150 [ 3349.508409][T31902] do_syscall_64+0x55/0xb0 [ 3349.513032][T31902] ? clear_bhb_loop+0x40/0x90 [ 3349.517882][T31902] ? clear_bhb_loop+0x40/0x90 [ 3349.522760][T31902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3349.528702][T31902] RIP: 0033:0x7fb0ca39e019 [ 3349.533266][T31902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3349.553050][T31902] RSP: 002b:00007fb0cb295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3349.561651][T31902] RAX: ffffffffffffffda RBX: 00007fb0ca626090 RCX: 00007fb0ca39e019 [ 3349.570063][T31902] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 3349.578083][T31902] RBP: 00007fb0ca43500c R08: 0000000000000000 R09: 0000000000000000 [ 3349.586176][T31902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3349.594275][T31902] R13: 00007fb0ca626128 R14: 00007fb0ca626090 R15: 00007ffce8696a98 [ 3349.602752][T31902] [ 3349.605808][T31902] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3349.613109][T31902] CPU: 0 PID: 31902 Comm: syz.5.7122 Not tainted syzkaller #0 [ 3349.620678][T31902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3349.630732][T31902] Call Trace: [ 3349.634005][T31902] [ 3349.636931][T31902] dump_stack_lvl+0x18c/0x250 [ 3349.641612][T31902] ? show_regs_print_info+0x20/0x20 [ 3349.646806][T31902] ? load_image+0x420/0x420 [ 3349.651324][T31902] panic+0x2ca/0x720 [ 3349.655225][T31902] ? bpf_jit_dump+0xd0/0xd0 [ 3349.659740][T31902] __warn+0x2e0/0x470 [ 3349.663725][T31902] ? svc_destroy+0x2ed/0x390 [ 3349.668316][T31902] ? svc_destroy+0x2ed/0x390 [ 3349.672902][T31902] report_bug+0x2be/0x4f0 [ 3349.677231][T31902] ? svc_destroy+0x2ed/0x390 [ 3349.681927][T31902] ? svc_destroy+0x2ed/0x390 [ 3349.686522][T31902] ? svc_destroy+0x2ef/0x390 [ 3349.691129][T31902] handle_bug+0xcf/0x120 [ 3349.695377][T31902] exc_invalid_op+0x1a/0x50 [ 3349.699873][T31902] asm_exc_invalid_op+0x1a/0x20 [ 3349.704715][T31902] RIP: 0010:svc_destroy+0x2ed/0x390 [ 3349.709907][T31902] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 62 a7 35 f8 49 8b 37 48 c7 c7 a0 20 d9 8b e8 93 f2 a6 f7 <0f> 0b e9 78 fd ff ff e8 d7 24 dd f7 c6 05 f6 b7 cc 04 01 4c 89 e0 [ 3349.729507][T31902] RSP: 0018:ffffc90004e1fae0 EFLAGS: 00010246 [ 3349.735569][T31902] RAX: 79dbd6fb76653700 RBX: ffff88805f8f3850 RCX: 0000000000080000 [ 3349.743572][T31902] RDX: ffffc90013154000 RSI: 000000000002a863 RDI: 000000000002a864 [ 3349.751543][T31902] RBP: ffffc90004e1fcb8 R08: ffffc90004e1f6e7 R09: 1ffff920009c3edc [ 3349.759513][T31902] R10: dffffc0000000000 R11: fffff520009c3edd R12: ffff88805f8f3800 [ 3349.767492][T31902] R13: dffffc0000000000 R14: ffff88805f8f3850 R15: ffffffff8d3e18e0 [ 3349.775482][T31902] write_ports+0xb1a/0xfa0 [ 3349.779905][T31902] ? write_versions+0xe00/0xe00 [ 3349.784750][T31902] ? __might_fault+0xaa/0x120 [ 3349.789424][T31902] ? __virt_addr_valid+0x10c/0x380 [ 3349.794537][T31902] ? __might_fault+0xaa/0x120 [ 3349.799208][T31902] ? __might_fault+0xc6/0x120 [ 3349.803880][T31902] ? __might_fault+0xaa/0x120 [ 3349.808561][T31902] ? simple_transaction_get+0x11d/0x140 [ 3349.814102][T31902] nfsctl_transaction_write+0x10c/0x150 [ 3349.819670][T31902] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 3349.825301][T31902] vfs_write+0x299/0x9a0 [ 3349.829553][T31902] ? file_end_write+0x250/0x250 [ 3349.834414][T31902] ? __fget_files+0x28/0x460 [ 3349.839006][T31902] ? __fget_files+0x3fc/0x460 [ 3349.843709][T31902] ? __fdget_pos+0x2a3/0x330 [ 3349.848308][T31902] ? ksys_write+0x74/0x260 [ 3349.852727][T31902] ksys_write+0x151/0x260 [ 3349.857057][T31902] ? __ia32_sys_read+0x90/0x90 [ 3349.861823][T31902] ? lockdep_hardirqs_on+0x98/0x150 [ 3349.867024][T31902] do_syscall_64+0x55/0xb0 [ 3349.871437][T31902] ? clear_bhb_loop+0x40/0x90 [ 3349.876111][T31902] ? clear_bhb_loop+0x40/0x90 [ 3349.880789][T31902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3349.886677][T31902] RIP: 0033:0x7fb0ca39e019 [ 3349.891088][T31902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3349.910693][T31902] RSP: 002b:00007fb0cb295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3349.919107][T31902] RAX: ffffffffffffffda RBX: 00007fb0ca626090 RCX: 00007fb0ca39e019 [ 3349.927086][T31902] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 3349.935053][T31902] RBP: 00007fb0ca43500c R08: 0000000000000000 R09: 0000000000000000 [ 3349.943019][T31902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3349.951005][T31902] R13: 00007fb0ca626128 R14: 00007fb0ca626090 R15: 00007ffce8696a98 [ 3349.959004][T31902] [ 3349.962274][T31902] Kernel Offset: disabled [ 3349.966696][T31902] Rebooting in 86400 seconds..