last executing test programs: 2m28.745754735s ago: executing program 3 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r2, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0x774}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 2m28.636483509s ago: executing program 3 (id=313): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) 2m28.449482925s ago: executing program 3 (id=316): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x28, 0x3, &(0x7f0000000140)="680ed42293"}, {0x0, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2m28.202976466s ago: executing program 3 (id=322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) 2m28.007917425s ago: executing program 3 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m27.653638716s ago: executing program 3 (id=334): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) write(r2, 0x0, 0x0) 2m27.365660018s ago: executing program 32 (id=334): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) write(r2, 0x0, 0x0) 3.545747077s ago: executing program 0 (id=2297): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xe4}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 3.47312735s ago: executing program 0 (id=2298): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 3.408300082s ago: executing program 0 (id=2299): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback, 0x2}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) accept(r2, 0x0, 0x0) 3.023347516s ago: executing program 1 (id=2303): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7}, @sack_perm, @mss, @window={0x3, 0x0, 0x401}, @window, @window={0x3, 0x1, 0x9f}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2.871286213s ago: executing program 1 (id=2304): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x41, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd553") 2.494891719s ago: executing program 0 (id=2305): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {@in=@local, 0xfffffffe, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0xe}, {}, {}, 0x100, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'crc32c-generic\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 2.421421131s ago: executing program 0 (id=2306): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.25385057s ago: executing program 0 (id=2307): unshare(0x6020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 945.478451ms ago: executing program 1 (id=2316): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 945.255361ms ago: executing program 4 (id=2317): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x84000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000004c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 944.147643ms ago: executing program 2 (id=2318): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc"], 0x1fc}}, 0x0) 914.084608ms ago: executing program 4 (id=2319): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 856.175033ms ago: executing program 4 (id=2320): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) 697.765837ms ago: executing program 1 (id=2321): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) 695.97354ms ago: executing program 2 (id=2322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x2000001a}) 683.751929ms ago: executing program 4 (id=2323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 620.260976ms ago: executing program 2 (id=2324): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 501.579344ms ago: executing program 2 (id=2325): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0xb, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 457.762385ms ago: executing program 4 (id=2326): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 426.078397ms ago: executing program 1 (id=2327): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 183.532964ms ago: executing program 4 (id=2328): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) socket$unix(0x1, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 182.861126ms ago: executing program 1 (id=2329): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 77.772881ms ago: executing program 2 (id=2330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x6c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) 0s ago: executing program 2 (id=2331): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 82.566381][ T5811] cgroup: Unknown subsys name 'net' [ 82.722057][ T5811] cgroup: Unknown subsys name 'cpuset' [ 82.731214][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.417820][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.990977][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.000201][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.009226][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.017224][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.024844][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.050261][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.053173][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.059705][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.067019][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.073348][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.081309][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.086587][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.093555][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.099994][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.107218][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.120852][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.134586][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.142133][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.151606][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.159518][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.843992][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 87.873019][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.938049][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 88.027144][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.197592][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.204909][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.212542][ T5821] bridge_slave_0: entered allmulticast mode [ 88.220070][ T5821] bridge_slave_0: entered promiscuous mode [ 88.228876][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.236055][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.243397][ T5822] bridge_slave_0: entered allmulticast mode [ 88.250778][ T5822] bridge_slave_0: entered promiscuous mode [ 88.264516][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.271943][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.279244][ T5820] bridge_slave_0: entered allmulticast mode [ 88.286657][ T5820] bridge_slave_0: entered promiscuous mode [ 88.294988][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.302246][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.309491][ T5820] bridge_slave_1: entered allmulticast mode [ 88.317653][ T5820] bridge_slave_1: entered promiscuous mode [ 88.325521][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.332772][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.340061][ T5821] bridge_slave_1: entered allmulticast mode [ 88.347375][ T5821] bridge_slave_1: entered promiscuous mode [ 88.354759][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.362108][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.369429][ T5822] bridge_slave_1: entered allmulticast mode [ 88.376991][ T5822] bridge_slave_1: entered promiscuous mode [ 88.451454][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.458757][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.465897][ T5823] bridge_slave_0: entered allmulticast mode [ 88.473855][ T5823] bridge_slave_0: entered promiscuous mode [ 88.521852][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.529170][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.536355][ T5823] bridge_slave_1: entered allmulticast mode [ 88.543804][ T5823] bridge_slave_1: entered promiscuous mode [ 88.554615][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.567244][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.579974][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.604186][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.616163][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.628628][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.691937][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.747475][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.759020][ T5820] team0: Port device team_slave_0 added [ 88.766723][ T5821] team0: Port device team_slave_0 added [ 88.775140][ T5822] team0: Port device team_slave_0 added [ 88.795538][ T5820] team0: Port device team_slave_1 added [ 88.803583][ T5821] team0: Port device team_slave_1 added [ 88.811845][ T5822] team0: Port device team_slave_1 added [ 88.883891][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.890998][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.917289][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.931860][ T5823] team0: Port device team_slave_0 added [ 88.964796][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.971965][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.998120][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.011326][ T5823] team0: Port device team_slave_1 added [ 89.025078][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.032102][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.058189][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.071143][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.078760][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.104979][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.117756][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.124786][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.151560][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.151640][ T5826] Bluetooth: hci0: command tx timeout [ 89.190515][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.197491][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.223617][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.234628][ T5826] Bluetooth: hci3: command tx timeout [ 89.234857][ T5826] Bluetooth: hci1: command tx timeout [ 89.240646][ T5829] Bluetooth: hci2: command tx timeout [ 89.264538][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.271554][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.297479][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.310641][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.317606][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.343574][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.448436][ T5820] hsr_slave_0: entered promiscuous mode [ 89.455257][ T5820] hsr_slave_1: entered promiscuous mode [ 89.467250][ T5822] hsr_slave_0: entered promiscuous mode [ 89.474185][ T5822] hsr_slave_1: entered promiscuous mode [ 89.480708][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 89.487286][ T5822] Cannot create hsr debugfs directory [ 89.498514][ T5821] hsr_slave_0: entered promiscuous mode [ 89.505000][ T5821] hsr_slave_1: entered promiscuous mode [ 89.511826][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 89.517732][ T5821] Cannot create hsr debugfs directory [ 89.574019][ T5823] hsr_slave_0: entered promiscuous mode [ 89.581266][ T5823] hsr_slave_1: entered promiscuous mode [ 89.587652][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.593455][ T5823] Cannot create hsr debugfs directory [ 90.072773][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.085755][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.097061][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.114295][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.190804][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.210954][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.225823][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.237669][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.333187][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.359679][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.371776][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.401158][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.496848][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.509808][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.522404][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.540932][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.568184][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.594720][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.610089][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.648254][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.655681][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.684631][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.691861][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.720372][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.744764][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.752054][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.765449][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.772652][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.820665][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.914479][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.957624][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.964849][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.022967][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.030262][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.133710][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.211933][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.230688][ T5829] Bluetooth: hci0: command tx timeout [ 91.256666][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.263955][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.281447][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.305355][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.312591][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.319325][ T5829] Bluetooth: hci1: command tx timeout [ 91.325415][ T5145] Bluetooth: hci3: command tx timeout [ 91.337056][ T5826] Bluetooth: hci2: command tx timeout [ 91.491130][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.508679][ T5822] veth0_vlan: entered promiscuous mode [ 91.542630][ T5822] veth1_vlan: entered promiscuous mode [ 91.654768][ T5822] veth0_macvtap: entered promiscuous mode [ 91.701747][ T5822] veth1_macvtap: entered promiscuous mode [ 91.756049][ T5821] veth0_vlan: entered promiscuous mode [ 91.766551][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.798777][ T5821] veth1_vlan: entered promiscuous mode [ 91.812677][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.841598][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.876627][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886811][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913662][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.921282][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.930177][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.993903][ T5821] veth0_macvtap: entered promiscuous mode [ 92.004458][ T5823] veth0_vlan: entered promiscuous mode [ 92.025004][ T5821] veth1_macvtap: entered promiscuous mode [ 92.033667][ T10] cfg80211: failed to load regulatory.db [ 92.070939][ T5823] veth1_vlan: entered promiscuous mode [ 92.093911][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.099880][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.109490][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.139409][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.185727][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.195813][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.226931][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.228689][ T5820] veth0_vlan: entered promiscuous mode [ 92.241011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.245055][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.257530][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.316452][ T5820] veth1_vlan: entered promiscuous mode [ 92.331086][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.363942][ T5823] veth0_macvtap: entered promiscuous mode [ 92.376011][ T5823] veth1_macvtap: entered promiscuous mode [ 92.483095][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.501407][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.510521][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.517541][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.542848][ T5820] veth0_macvtap: entered promiscuous mode [ 92.557145][ T5820] veth1_macvtap: entered promiscuous mode [ 92.575415][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.587675][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.616993][ T5915] syz.1.2 (5915) used greatest stack depth: 17864 bytes left [ 92.663458][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.673121][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699336][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.716991][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.731734][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.762155][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.786225][ T5919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6'. [ 92.803146][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.824599][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.838770][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.875605][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.923635][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.943497][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.071324][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.082490][ T5924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 93.100022][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.137155][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.156854][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.247578][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.273502][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.311948][ T5826] Bluetooth: hci0: command tx timeout [ 93.389125][ T5826] Bluetooth: hci2: command tx timeout [ 93.394587][ T5826] Bluetooth: hci1: command tx timeout [ 93.400696][ T5829] Bluetooth: hci3: command tx timeout [ 93.612427][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.627951][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.779318][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.825009][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.894067][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 94.365488][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27'. [ 94.519784][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 94.933883][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 95.114332][ T6000] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 95.390563][ T5826] Bluetooth: hci0: command tx timeout [ 95.470829][ T5145] Bluetooth: hci3: command tx timeout [ 95.476351][ T5829] Bluetooth: hci2: command tx timeout [ 95.481953][ T5826] Bluetooth: hci1: command tx timeout [ 95.581444][ T6019] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 95.691404][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 95.972673][ T6033] tipc: Started in network mode [ 95.998485][ T6033] tipc: Node identity ac14142f, cluster identity 4711 [ 96.006047][ T6033] tipc: New replicast peer: 0.0.0.0 [ 96.037259][ T6033] tipc: Enabled bearer , priority 10 [ 96.110333][ T6040] netlink: 'syz.0.61': attribute type 2 has an invalid length. [ 96.553019][ T6058] tipc: Started in network mode [ 96.558096][ T6058] tipc: Node identity ac14142f, cluster identity 4711 [ 96.575320][ T6058] tipc: New replicast peer: 0.0.0.0 [ 96.620178][ T6058] tipc: Enabled bearer , priority 10 [ 97.149459][ T24] tipc: Node number set to 2886997039 [ 97.220276][ T6082] tipc: Started in network mode [ 97.225230][ T6082] tipc: Node identity ac14142f, cluster identity 4711 [ 97.239237][ T6082] tipc: New replicast peer: 0.0.0.0 [ 97.245436][ T6082] tipc: Enabled bearer , priority 10 [ 97.739042][ T5831] tipc: Node number set to 2886997039 [ 98.064792][ T6112] __nla_validate_parse: 8 callbacks suppressed [ 98.064811][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'. [ 98.296121][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 98.369838][ T5832] tipc: Node number set to 2886997039 [ 98.811500][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 98.960486][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 99.511328][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.125'. [ 99.609316][ T6173] tipc: New replicast peer: 172.30.1.4 [ 99.989963][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 100.003849][ T6190] netlink: 'syz.0.134': attribute type 4 has an invalid length. [ 100.193788][ T6200] Zero length message leads to an empty skb [ 100.226999][ T3510] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.493878][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.146'. [ 101.046264][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 101.072866][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 101.082755][ T6241] bridge_slave_1: left allmulticast mode [ 101.090661][ T6241] bridge_slave_1: left promiscuous mode [ 101.097412][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.143257][ T6241] bridge_slave_0: left allmulticast mode [ 101.150235][ T6241] bridge_slave_0: left promiscuous mode [ 101.171548][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.644256][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 102.219303][ T977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.271176][ T6202] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 102.279468][ T5145] Bluetooth: hci0: command 0x0401 tx timeout [ 102.280466][ T5829] Bluetooth: hci4: command 0x1003 tx timeout [ 102.292295][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.396175][ T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.438001][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.459305][ T977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.478633][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.486695][ T977] usb 2-1: SerialNumber: syz [ 102.769924][ T977] usb 2-1: 0:2 : does not exist [ 102.868473][ T977] usb 2-1: USB disconnect, device number 2 [ 102.986156][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.153382][ T6320] __nla_validate_parse: 2 callbacks suppressed [ 103.153403][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 103.430503][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 103.704337][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 103.988704][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 104.012402][ T6350] evm: overlay not supported [ 104.374460][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 104.570992][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 104.931550][ T6392] ======================================================= [ 104.931550][ T6392] WARNING: The mand mount option has been deprecated and [ 104.931550][ T6392] and is ignored by this kernel. Remove the mand [ 104.931550][ T6392] option from the mount to silence this warning. [ 104.931550][ T6392] ======================================================= [ 105.013121][ T6392] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.027190][ T6392] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.109220][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 105.235198][ T6401] binder: Unknown parameter 'context' [ 105.240033][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.238'. [ 105.521239][ T6415] syz.1.244 uses obsolete (PF_INET,SOCK_PACKET) [ 105.619440][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 105.881656][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 106.168424][ T977] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 106.371432][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 106.404356][ T977] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 106.422128][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.436779][ T977] usb 3-1: config 0 descriptor?? [ 106.444052][ T6431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.490917][ T6449] mmap: syz.0.261 (6449) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.661142][ T977] usbhid 3-1:0.0: can't add hid device: -71 [ 106.687181][ T977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 106.730596][ T977] usb 3-1: USB disconnect, device number 2 [ 107.091422][ T6469] netlink: 'syz.0.271': attribute type 32 has an invalid length. [ 107.466179][ T6481] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 107.830437][ T6499] overlayfs: failed to resolve './file1': -2 [ 108.395361][ T6519] __nla_validate_parse: 14 callbacks suppressed [ 108.395384][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 108.429633][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 108.600283][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 108.610590][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 108.842161][ T6534] 9p: Bad value for 'source' [ 109.041946][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 109.073166][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 109.266782][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 109.300876][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 109.507697][ T6564] TCP: TCP_TX_DELAY enabled [ 109.638505][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.319'. [ 109.679993][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.319'. [ 110.226313][ T3510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.343918][ T3510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.418611][ T3510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.486917][ T3510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.762453][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.774189][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.809640][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.838214][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.849067][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.949801][ T3510] bridge_slave_1: left allmulticast mode [ 110.955603][ T3510] bridge_slave_1: left promiscuous mode [ 111.009329][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.049603][ T3510] bridge_slave_0: left allmulticast mode [ 111.055333][ T3510] bridge_slave_0: left promiscuous mode [ 111.121065][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.666327][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.685920][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.699904][ T3510] bond0 (unregistering): Released all slaves [ 111.932680][ T3510] tipc: Disabling bearer [ 111.944772][ T3510] tipc: Left network mode [ 112.655097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.655521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.757472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.760487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.859709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 112.859874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.908000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.961966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 113.064716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.064891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 114.248868][ T5826] Bluetooth: hci2: command tx timeout [ 114.383570][ T6666] __nla_validate_parse: 13 callbacks suppressed [ 114.383592][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 114.818063][ T3510] hsr_slave_0: left promiscuous mode [ 114.835179][ T3510] hsr_slave_1: left promiscuous mode [ 114.852736][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.868748][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.883213][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.891896][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.917807][ T3510] veth1_macvtap: left promiscuous mode [ 114.938198][ T3510] veth0_macvtap: left promiscuous mode [ 114.944002][ T3510] veth1_vlan: left promiscuous mode [ 114.958309][ T3510] veth0_vlan: left promiscuous mode [ 115.078110][ T5832] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.247965][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 115.265261][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.298072][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.339055][ T5832] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.367940][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.383858][ T5832] usb 1-1: config 0 descriptor?? [ 115.615404][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 115.654629][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 116.039896][ T6608] chnl_net:caif_netlink_parms(): no params data found [ 116.163388][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 116.173190][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 116.203538][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 116.273470][ T5826] Bluetooth: hci2: command tx timeout [ 116.477838][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.496127][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.507413][ T6608] bridge_slave_0: entered allmulticast mode [ 116.517339][ T6608] bridge_slave_0: entered promiscuous mode [ 116.536965][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.570521][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.578215][ T6608] bridge_slave_1: entered allmulticast mode [ 116.594596][ T6608] bridge_slave_1: entered promiscuous mode [ 116.734489][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.776273][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.900261][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 116.910326][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 116.949032][ T6608] team0: Port device team_slave_0 added [ 116.972808][ T6608] team0: Port device team_slave_1 added [ 117.066381][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 117.133483][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.153420][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.204438][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.272429][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.291293][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.348024][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.480405][ T6608] hsr_slave_0: entered promiscuous mode [ 117.487392][ T6608] hsr_slave_1: entered promiscuous mode [ 117.506796][ T6608] debugfs: 'hsr0' already exists in 'hsr' [ 117.513603][ T6608] Cannot create hsr debugfs directory [ 117.883919][ T5832] usbhid 1-1:0.0: can't add hid device: -71 [ 117.910341][ T5832] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.948249][ T5832] usb 1-1: USB disconnect, device number 2 [ 118.041409][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 118.050079][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 118.088500][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 118.135624][ T6608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.293976][ T6608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.347962][ T5826] Bluetooth: hci2: command tx timeout [ 118.376306][ T6608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.405410][ T6608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.775629][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.852360][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.880422][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.887652][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.974160][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.981399][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.175605][ T6798] netlink: 'syz.0.404': attribute type 2 has an invalid length. [ 119.223048][ T6798] !: entered promiscuous mode [ 119.653466][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.724285][ T6824] __nla_validate_parse: 1 callbacks suppressed [ 119.724305][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 120.052841][ T6840] netlink: 'syz.2.415': attribute type 2 has an invalid length. [ 120.101288][ T6840] !: entered promiscuous mode [ 120.416162][ T6608] veth0_vlan: entered promiscuous mode [ 120.429259][ T5826] Bluetooth: hci2: command tx timeout [ 120.503666][ T6608] veth1_vlan: entered promiscuous mode [ 120.525963][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.421'. [ 120.621964][ T6608] veth0_macvtap: entered promiscuous mode [ 120.651659][ T6608] veth1_macvtap: entered promiscuous mode [ 120.713901][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.760101][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.802892][ T3510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.837733][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.876893][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.896868][ T6872] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 120.929453][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.130703][ T6880] netlink: 'syz.0.430': attribute type 4 has an invalid length. [ 121.244285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.268821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.355387][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.380943][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.438023][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.433'. [ 121.715970][ T6900] netlink: 'syz.4.437': attribute type 2 has an invalid length. [ 121.735501][ T6900] !: entered promiscuous mode [ 122.092318][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'. [ 122.229335][ T6921] binder: 6920:6921 ioctl 400c620e 200000000100 returned -22 [ 122.425034][ T6931] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 123.023141][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.457'. [ 123.119034][ T6953] netlink: 'syz.1.460': attribute type 2 has an invalid length. [ 123.176737][ T6953] !: entered promiscuous mode [ 123.328084][ T6961] netlink: 68 bytes leftover after parsing attributes in process `syz.1.464'. [ 123.536361][ T6966] PM: Enabling pm_trace changes system date and time during resume. [ 123.536361][ T6966] PM: Correct system time has to be restored manually after resume. [ 123.693517][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.470'. [ 123.956781][ T6981] netlink: 'syz.0.472': attribute type 2 has an invalid length. [ 124.193417][ T6990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.476'. [ 124.506913][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 124.683264][ T7005] netlink: 'syz.1.483': attribute type 2 has an invalid length. [ 124.870060][ T7013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.487'. [ 124.967964][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.180080][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.210288][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.227311][ T5927] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.249370][ T5927] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.267965][ T5927] usb 5-1: Manufacturer: syz [ 125.288052][ T5927] usb 5-1: config 0 descriptor?? [ 125.405197][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.492'. [ 125.422264][ T7027] netlink: 'syz.0.494': attribute type 2 has an invalid length. [ 125.602774][ T7029] netlink: 148 bytes leftover after parsing attributes in process `syz.0.495'. [ 125.811681][ T7035] netlink: 68 bytes leftover after parsing attributes in process `syz.1.498'. [ 126.178203][ T7045] netlink: 'syz.0.503': attribute type 2 has an invalid length. [ 126.209891][ T7045] netlink: 'syz.0.503': attribute type 2 has an invalid length. [ 126.393845][ T5927] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input8 [ 126.418218][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 126.529241][ T5927] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0001/input/input9 [ 126.583126][ T5927] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 126.648560][ T5927] usb 5-1: USB disconnect, device number 2 [ 126.887671][ T7056] fido_id[7056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 127.053660][ T7064] netlink: 68 bytes leftover after parsing attributes in process `syz.2.509'. [ 127.285225][ T7069] tmpfs: Unknown parameter 'nr_bloc' [ 127.352406][ T7072] netlink: 'syz.2.513': attribute type 2 has an invalid length. [ 127.389712][ T7072] netlink: 'syz.2.513': attribute type 2 has an invalid length. [ 127.451506][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 128.102891][ T7093] netlink: 68 bytes leftover after parsing attributes in process `syz.4.522'. [ 128.273596][ T7097] netlink: 'syz.2.524': attribute type 2 has an invalid length. [ 128.308529][ T7097] netlink: 'syz.2.524': attribute type 2 has an invalid length. [ 128.443614][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.525'. [ 128.467579][ T7100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.888123][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.931109][ T7118] netlink: 68 bytes leftover after parsing attributes in process `syz.0.534'. [ 129.059379][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 129.080332][ T5832] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 129.098004][ T5832] usb 3-1: config 0 has no interface number 0 [ 129.121722][ T5832] usb 3-1: config 0 interface 184 has no altsetting 0 [ 129.130897][ T7122] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 129.151198][ T5832] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 129.167551][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.176418][ T7122] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 129.198008][ T5832] usb 3-1: Product: syz [ 129.202207][ T5832] usb 3-1: Manufacturer: syz [ 129.227266][ T5832] usb 3-1: SerialNumber: syz [ 129.261474][ T5832] usb 3-1: config 0 descriptor?? [ 129.272428][ T5832] smsc75xx v1.0.0 [ 129.878487][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 129.895395][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.066133][ T7143] __nla_validate_parse: 1 callbacks suppressed [ 130.066152][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 130.101714][ T7145] netlink: 68 bytes leftover after parsing attributes in process `syz.0.545'. [ 130.119270][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 130.158052][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 130.178339][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 130.199030][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 130.216508][ T5832] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 130.247495][ T5832] usb 3-1: USB disconnect, device number 3 [ 130.439204][ T7152] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 130.469972][ T7152] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 131.001346][ T7169] netlink: 68 bytes leftover after parsing attributes in process `syz.1.557'. [ 131.238269][ T7177] netlink: 'syz.1.560': attribute type 2 has an invalid length. [ 131.286795][ T7177] netlink: 'syz.1.560': attribute type 2 has an invalid length. [ 131.957158][ T7206] netlink: 68 bytes leftover after parsing attributes in process `syz.0.570'. [ 131.992496][ T7208] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 132.039957][ T7208] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 132.671866][ T7221] capability: warning: `syz.2.575' uses deprecated v2 capabilities in a way that may be insecure [ 133.821269][ T7249] netlink: 68 bytes leftover after parsing attributes in process `syz.4.585'. [ 133.862515][ T7251] netlink: 'syz.0.583': attribute type 2 has an invalid length. [ 133.900830][ T7251] netlink: 'syz.0.583': attribute type 2 has an invalid length. [ 134.605035][ T7286] netlink: 68 bytes leftover after parsing attributes in process `syz.0.598'. [ 134.723567][ T7293] netlink: 'syz.4.602': attribute type 2 has an invalid length. [ 134.751433][ T7293] netlink: 'syz.4.602': attribute type 2 has an invalid length. [ 135.665474][ T7333] netlink: 'syz.0.614': attribute type 2 has an invalid length. [ 135.742551][ T7333] netlink: 'syz.0.614': attribute type 2 has an invalid length. [ 136.301199][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.623'. [ 136.550684][ T7373] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 136.605373][ T7375] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 136.745563][ T7378] netlink: 'syz.4.630': attribute type 29 has an invalid length. [ 136.927264][ T7386] overlayfs: failed to clone upperpath [ 137.105553][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.636'. [ 137.276453][ T7402] raw_sendmsg: syz.4.640 forgot to set AF_INET. Fix it! [ 137.388147][ T7404] netlink: 'syz.1.641': attribute type 2 has an invalid length. [ 137.431401][ T7404] netlink: 'syz.1.641': attribute type 2 has an invalid length. [ 137.461536][ T7406] tmpfs: Unknown parameter 'h' [ 137.531207][ T7410] binder: Bad value for 'stats' [ 137.648389][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'. [ 137.933607][ T7432] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 137.949966][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.959869][ T7432] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 138.059269][ T7438] binder: 7437:7438 ioctl c0306201 0 returned -14 [ 138.095308][ T7440] capability: warning: `syz.1.659' uses 32-bit capabilities (legacy support in use) [ 138.114858][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.121689][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.127546][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 138.160724][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.177394][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.188203][ T5832] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 138.197293][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.212263][ T5832] usb 5-1: config 0 descriptor?? [ 138.507218][ T7456] netlink: 'syz.1.667': attribute type 2 has an invalid length. [ 138.657798][ T5832] hid-picolcd 0003:04D8:C002.0002: unbalanced collection at end of report description [ 138.658532][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 138.681533][ T5832] hid-picolcd 0003:04D8:C002.0002: device report parse failed [ 138.697288][ T5832] hid-picolcd 0003:04D8:C002.0002: probe with driver hid-picolcd failed with error -22 [ 138.854999][ T977] usb 5-1: USB disconnect, device number 3 [ 139.148462][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 139.160438][ T7482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.681'. [ 139.232701][ T7487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 140.853257][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 141.587944][ T5832] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 141.770238][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.787920][ T5832] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 141.807185][ T5832] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.817275][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.843871][ T5832] usb 1-1: config 0 descriptor?? [ 142.062179][ T7593] binder: 7592:7593 ioctl c0306201 0 returned -14 [ 142.071278][ T7593] binder: 7592:7593 ioctl c0306201 0 returned -14 [ 142.080739][ T5831] usb 1-1: USB disconnect, device number 3 [ 142.614603][ T7643] validate_nla: 9 callbacks suppressed [ 142.614621][ T7643] netlink: 'syz.1.755': attribute type 4 has an invalid length. [ 142.844042][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.761'. [ 143.125481][ T7667] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 143.285980][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.772'. [ 143.388019][ T5829] Bluetooth: hci4: command 0x1003 tx timeout [ 143.394918][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 143.893195][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.783'. [ 144.187697][ T7717] netlink: 68 bytes leftover after parsing attributes in process `syz.1.790'. [ 144.372664][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 144.709325][ T7738] netlink: 68 bytes leftover after parsing attributes in process `syz.0.802'. [ 145.210106][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 145.523398][ T7761] netlink: 68 bytes leftover after parsing attributes in process `syz.0.813'. [ 145.708281][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 145.823678][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.816'. [ 145.860046][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.872206][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 145.882615][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.898879][ T24] usb 5-1: config 0 descriptor?? [ 145.909328][ T7759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.937156][ T7774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.059767][ T7778] kvm: user requested TSC rate below hardware speed [ 146.127078][ T7778] kvm: kvm [7777]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 146.138759][ T7778] kvm: kvm [7777]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 146.324174][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 146.342714][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 146.379512][ T24] usb 5-1: USB disconnect, device number 4 [ 146.416859][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.826'. [ 147.849856][ T7866] __nla_validate_parse: 2 callbacks suppressed [ 147.849875][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'. [ 147.937752][ T7872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.256588][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 148.724184][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.883'. [ 149.352593][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 149.382666][ T7933] netlink: 68 bytes leftover after parsing attributes in process `syz.4.894'. [ 149.879721][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 150.023212][ T7963] netlink: 68 bytes leftover after parsing attributes in process `syz.0.908'. [ 150.068036][ T5831] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.263994][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.297986][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.330697][ T5831] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.356197][ T5831] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 150.364861][ T5831] usb 3-1: Manufacturer: syz [ 150.374837][ T5831] usb 3-1: config 0 descriptor?? [ 150.401432][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 150.638911][ T7987] 9p: Could not find request transport: fd.rfdno=79M0A[@}- [ 150.638911][ T7987] [ 150.795337][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.926'. [ 150.899423][ T8004] netlink: 44 bytes leftover after parsing attributes in process `syz.0.928'. [ 151.135318][ T8018] overlayfs: failed to resolve './file0': -2 [ 151.223277][ T5831] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input11 [ 151.321682][ T5831] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input12 [ 151.351470][ T5831] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input13 [ 151.382408][ T5831] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0003/input/input14 [ 151.429854][ T5831] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 151.459115][ T5831] usb 3-1: USB disconnect, device number 4 [ 151.785853][ T8035] fido_id[8035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 152.958628][ T8064] __nla_validate_parse: 2 callbacks suppressed [ 152.958646][ T8064] netlink: 104 bytes leftover after parsing attributes in process `syz.2.953'. [ 153.221036][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.974'. [ 153.328674][ T8099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.969'. [ 154.339751][ T8131] netlink: 68 bytes leftover after parsing attributes in process `syz.1.981'. [ 155.027503][ T8122] netlink: 104 bytes leftover after parsing attributes in process `syz.4.977'. [ 155.738881][ T5927] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.814668][ T8172] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1001'. [ 155.848038][ T5832] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.910986][ T5927] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 155.924665][ T5927] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.934477][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.948821][ T5927] usb 1-1: Product: syz [ 155.953055][ T5927] usb 1-1: Manufacturer: syz [ 155.968766][ T5927] usb 1-1: SerialNumber: syz [ 156.035884][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.069274][ T5832] usb 3-1: config 7 has an invalid interface number: 205 but max is 0 [ 156.088919][ T5832] usb 3-1: config 7 has no interface number 0 [ 156.100266][ T5832] usb 3-1: New USB device found, idVendor=0499, idProduct=1037, bcdDevice=29.5d [ 156.127462][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.147766][ T5832] usb 3-1: Product: syz [ 156.152062][ T5832] usb 3-1: Manufacturer: syz [ 156.156684][ T5832] usb 3-1: SerialNumber: syz [ 156.199226][ T8164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.414324][ T8174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1002'. [ 156.423953][ T5832] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.475200][ T5832] snd-usb-audio 3-1:7.205: probe with driver snd-usb-audio failed with error -2 [ 156.511056][ T5832] usb 3-1: USB disconnect, device number 5 [ 156.592515][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.205/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.835855][ T8164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.052339][ T5927] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 157.059971][ T5927] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 157.067518][ T5927] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 157.222082][ T8196] process 'syz.1.1012' launched '/dev/fd/5' with NULL argv: empty string added [ 157.262052][ T5927] cdc_ncm 1-1:1.0: setting tx_max = 136 [ 157.315870][ T5927] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 157.471125][ T5927] usb 1-1: USB disconnect, device number 4 [ 157.481902][ T5927] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 158.133681][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1027'. [ 158.491228][ T8257] netlink: 'syz.1.1036': attribute type 4 has an invalid length. [ 159.043592][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 159.129311][ T8295] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 159.638008][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.791718][ T5927] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.809431][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.821516][ T5927] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.872684][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.888414][ T5927] usb 1-1: SerialNumber: syz [ 159.936435][ T8333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1066'. [ 160.122615][ T5927] usb 1-1: 0:2 : does not exist [ 160.164508][ T5927] usb 1-1: USB disconnect, device number 5 [ 160.231499][ T8036] udevd[8036]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.355666][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 160.525232][ T8361] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1080'. [ 160.741264][ T8373] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1084'. [ 161.923410][ T8436] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3786755299/3786755301 [ 162.228973][ T8455] binder: 8453:8455 ioctl 4018620d 0 returned -22 [ 163.565655][ T8514] netlink: 'syz.0.1152': attribute type 4 has an invalid length. [ 163.613708][ T8514] netlink: 'syz.0.1152': attribute type 17 has an invalid length. [ 164.432811][ T8537] binder: BINDER_SET_CONTEXT_MGR already set [ 164.439211][ T8537] binder: 8536:8537 ioctl 40046207 0 returned -16 [ 165.007900][ T8560] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.179372][ T8562] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 165.190355][ T8562] netlink: 'syz.1.1176': attribute type 17 has an invalid length. [ 167.074172][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.415886][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1225'. [ 170.507446][ T5829] Bluetooth: hci4: command 0x1003 tx timeout [ 170.514986][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.754003][ T8735] ptrace attach of "./syz-executor exec"[8736] was attempted by "./syz-executor exec"[8735] [ 170.821204][ T8738] netlink: 'syz.1.1258': attribute type 2 has an invalid length. [ 170.861436][ T8738] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1258'. [ 171.571856][ T8766] syz.1.1271 (8766): attempted to duplicate a private mapping with mremap. This is not supported. [ 171.702280][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1274'. [ 173.663965][ T8861] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1316'. [ 174.349138][ T8892] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1330'. [ 174.475817][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 175.069493][ T793] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.249739][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.264214][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.276013][ T793] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.288226][ T793] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 175.296617][ T793] usb 5-1: Manufacturer: syz [ 175.312623][ T793] usb 5-1: config 0 descriptor?? [ 176.145640][ T793] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 176.164287][ T793] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 176.174705][ T793] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 176.185959][ T793] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 176.194383][ T793] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 176.208491][ T8978] 9p: Bad value for 'rfdno' [ 176.212702][ T793] usb 5-1: USB disconnect, device number 5 [ 176.445153][ T8990] veth1_macvtap: left promiscuous mode [ 176.452915][ T8990] macsec0: entered promiscuous mode [ 176.459516][ T8990] macsec0: entered allmulticast mode [ 177.579746][ T9038] netlink: 'syz.1.1400': attribute type 298 has an invalid length. [ 179.166343][ T9077] netlink: 'syz.0.1408': attribute type 15 has an invalid length. [ 180.830212][ T9101] tmpfs: Unknown parameter 'nosw' [ 183.923156][ T9179] netlink: 'syz.4.1462': attribute type 4 has an invalid length. [ 186.347775][ T9276] tmpfs: Bad value for 'nr_inodes' [ 192.749819][ T30] audit: type=1326 audit(1763076067.953:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 192.807122][ T30] audit: type=1326 audit(1763076067.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 192.867101][ T30] audit: type=1326 audit(1763076067.953:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 192.907319][ T30] audit: type=1326 audit(1763076067.953:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 192.964697][ T30] audit: type=1326 audit(1763076067.973:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 193.017387][ T30] audit: type=1326 audit(1763076067.973:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 193.087914][ T30] audit: type=1326 audit(1763076067.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 193.128380][ T30] audit: type=1326 audit(1763076067.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 193.214483][ T30] audit: type=1326 audit(1763076067.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 193.276758][ T30] audit: type=1326 audit(1763076067.983:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.0.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd90f8f6c9 code=0x7ffc0000 [ 193.395369][ T9417] binder: 9415:9417 ioctl c0306201 0 returned -14 [ 193.823178][ T9431] 9p: Bad value for 'wfdno' [ 194.053812][ T9439] overlayfs: missing 'lowerdir' [ 194.415968][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 194.448348][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 195.375755][ T9480] veth0_to_team: entered promiscuous mode [ 195.381764][ T9480] veth0_to_team: entered allmulticast mode [ 199.555447][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.562118][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.355985][ T9670] syz.1.1680: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.394307][ T9670] CPU: 0 UID: 0 PID: 9670 Comm: syz.1.1680 Not tainted syzkaller #0 PREEMPT(full) [ 200.394336][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.394356][ T9670] Call Trace: [ 200.394367][ T9670] [ 200.394376][ T9670] dump_stack_lvl+0x189/0x250 [ 200.394411][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.394436][ T9670] ? __pfx__printk+0x10/0x10 [ 200.394460][ T9670] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.394483][ T9670] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.394507][ T9670] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 200.394532][ T9670] warn_alloc+0x214/0x310 [ 200.394569][ T9670] ? __pfx_warn_alloc+0x10/0x10 [ 200.394606][ T9670] ? kasan_save_track+0x4f/0x80 [ 200.394633][ T9670] ? kasan_save_track+0x3e/0x80 [ 200.394659][ T9670] ? __kasan_kmalloc+0x93/0xb0 [ 200.394674][ T9670] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 200.394701][ T9670] ? xskq_create+0x56/0x170 [ 200.394721][ T9670] ? xsk_setsockopt+0x4dc/0x8d0 [ 200.394749][ T9670] ? do_sock_setsockopt+0x17c/0x1b0 [ 200.394778][ T9670] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 200.394806][ T9670] ? do_syscall_64+0xfa/0xfa0 [ 200.394831][ T9670] __vmalloc_node_range_noprof+0x134/0x1640 [ 200.394894][ T9670] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.394958][ T9670] ? __kasan_kmalloc+0x93/0xb0 [ 200.394983][ T9670] vmalloc_user_noprof+0xad/0xf0 [ 200.395013][ T9670] ? xskq_create+0xbf/0x170 [ 200.395035][ T9670] xskq_create+0xbf/0x170 [ 200.395060][ T9670] xsk_init_queue+0xb0/0x110 [ 200.395083][ T9670] xsk_setsockopt+0x4dc/0x8d0 [ 200.395118][ T9670] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.395153][ T9670] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.395190][ T9670] ? aa_sock_opt_perm+0xff/0x1b0 [ 200.395218][ T9670] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 200.395265][ T9670] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.395312][ T9670] do_sock_setsockopt+0x17c/0x1b0 [ 200.395348][ T9670] __x64_sys_setsockopt+0x13f/0x1b0 [ 200.395388][ T9670] do_syscall_64+0xfa/0xfa0 [ 200.395412][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.395431][ T9670] ? clear_bhb_loop+0x60/0xb0 [ 200.395456][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.395475][ T9670] RIP: 0033:0x7f9ab2f8f6c9 [ 200.395499][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.395514][ T9670] RSP: 002b:00007f9ab3e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.395535][ T9670] RAX: ffffffffffffffda RBX: 00007f9ab31e5fa0 RCX: 00007f9ab2f8f6c9 [ 200.395549][ T9670] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 200.395561][ T9670] RBP: 00007f9ab3011f91 R08: 0000000000000004 R09: 0000000000000000 [ 200.395573][ T9670] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.395585][ T9670] R13: 00007f9ab31e6038 R14: 00007f9ab31e5fa0 R15: 00007ffea77aed58 [ 200.395618][ T9670] [ 200.695067][ T9670] Mem-Info: [ 200.698418][ T9670] active_anon:66707 inactive_anon:0 isolated_anon:0 [ 200.698418][ T9670] active_file:18245 inactive_file:39950 isolated_file:0 [ 200.698418][ T9670] unevictable:17164 dirty:66 writeback:0 [ 200.698418][ T9670] slab_reclaimable:11361 slab_unreclaimable:91735 [ 200.698418][ T9670] mapped:31539 shmem:62361 pagetables:1346 [ 200.698418][ T9670] sec_pagetables:0 bounce:0 [ 200.698418][ T9670] kernel_misc_reclaimable:0 [ 200.698418][ T9670] free:1246941 free_pcp:16032 free_cma:0 [ 200.744851][ T9670] Node 0 active_anon:269428kB inactive_anon:0kB active_file:72980kB inactive_file:159600kB unevictable:67120kB isolated(anon):0kB isolated(file):0kB mapped:128656kB dirty:260kB writeback:0kB shmem:250508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11704kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.897384][ T9670] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.011479][ T9670] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.160717][ T9670] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 201.227172][ T9670] Node 0 DMA32 free:1056744kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:301596kB inactive_anon:0kB active_file:72980kB inactive_file:159600kB unevictable:67120kB writepending:340kB zspages:0kB present:3129332kB managed:2551560kB mlocked:0kB bounce:0kB free_pcp:35596kB local_pcp:21552kB free_cma:0kB [ 201.276601][ T9670] lowmem_reserve[]: 0 0 0 0 0 [ 201.281413][ T9670] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.504418][ T9670] lowmem_reserve[]: 0 0 0 0 0 [ 201.524724][ T9670] Node 1 Normal free:3891404kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18720kB local_pcp:7552kB free_cma:0kB [ 201.666579][ T9670] lowmem_reserve[]: 0 0 0 0 0 [ 201.682477][ T9670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.725339][ T9670] Node 0 DMA32: 39*4kB (UME) 77*8kB (U) 23*16kB (UE) 1*32kB (E) 140*64kB (ME) 201*128kB (M) 62*256kB (UM) 10*512kB (UME) 8*1024kB (UME) 3*2048kB (U) 236*4096kB (M) = 1037844kB [ 201.816981][ T9670] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.846799][ T9670] Node 1 Normal: 217*4kB (UME) 51*8kB (UME) 45*16kB (UME) 86*32kB (UME) 25*64kB (UME) 10*128kB (UME) 3*256kB (ME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891404kB [ 201.906702][ T9670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.916406][ T9670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.953573][ T9670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.996678][ T9670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.006059][ T9670] 151199 total pagecache pages [ 202.037579][ T9670] 1340 pages in swap cache [ 202.042060][ T9670] Free swap = 114324kB [ 202.071335][ T9670] Total swap = 124996kB [ 202.075557][ T9670] 2097051 pages RAM [ 202.110289][ T9670] 0 pages HighMem/MovableOnly [ 202.115072][ T9670] 427391 pages reserved [ 202.139387][ T9670] 0 pages cma reserved [ 203.187559][ T9732] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1708'. [ 204.556205][ T9774] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 207.177826][ T9848] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 207.612208][ T9864] netlink: 'syz.2.1771': attribute type 4 has an invalid length. [ 209.100213][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 209.776151][ T5927] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.956101][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 209.970078][ T5927] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 209.988537][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.026434][ T5927] usb 5-1: config 0 has no interface number 0 [ 210.032609][ T5927] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 210.076140][ T5927] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 210.099811][ T5927] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 210.120786][ T5927] usb 5-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 210.150703][ T5927] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 210.178985][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.207688][ T5927] usb 5-1: config 0 descriptor?? [ 210.218190][ T9912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.275748][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.399623][ T9333] udevd[9333]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.455895][ T5927] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 210.500980][ T5927] usb 5-1: USB disconnect, device number 6 [ 210.905540][ T9952] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.023977][ T9954] overlayfs: failed to clone lowerpath [ 211.368223][ T9975] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.789422][ T9996] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.871671][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.878036][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 211.887127][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 211.971816][T10001] netlink: 'syz.0.1835': attribute type 6 has an invalid length. [ 212.720968][T10021] binder: Unknown parameter 'context' [ 214.305842][ T5927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 214.467882][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 214.490515][ T5927] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 214.506868][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.537276][ T5927] usb 1-1: config 0 descriptor?? [ 214.984456][ T5927] logitech 0003:046D:C626.0005: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.0-1/input0 [ 215.165614][ T5927] usb 1-1: USB disconnect, device number 6 [ 223.936162][T10300] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 224.434697][T10320] tipc: Failed to remove unknown binding: 66,1,1/2886997039:4189523752/4189523754 [ 224.454705][T10320] tipc: Failed to remove unknown binding: 66,1,1/2886997039:4189523752/4189523754 [ 225.074991][T10337] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.774931][T10387] binder_alloc: 10386: pid 10386 spamming oneway? 1 buffers allocated for a total size of 4096 [ 227.422141][T10408] tmpfs: Unknown parameter 'nosw' [ 230.970163][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 233.049623][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 237.465219][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 237.768755][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.779419][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.789513][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.815271][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.823290][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.259184][T10642] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2127'. [ 238.284236][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.476059][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.542711][T10633] chnl_net:caif_netlink_parms(): no params data found [ 238.649084][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.795916][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.990190][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.030252][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.085254][T10633] bridge_slave_0: entered allmulticast mode [ 239.110081][T10633] bridge_slave_0: entered promiscuous mode [ 239.144411][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.153243][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.174810][T10633] bridge_slave_1: entered allmulticast mode [ 239.182901][T10633] bridge_slave_1: entered promiscuous mode [ 239.376063][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.408738][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.600725][T10633] team0: Port device team_slave_0 added [ 239.638523][T10633] team0: Port device team_slave_1 added [ 239.775816][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.782865][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.865178][ T5829] Bluetooth: hci4: command tx timeout [ 239.898085][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.909918][ T60] bridge_slave_1: left allmulticast mode [ 239.937478][ T60] bridge_slave_1: left promiscuous mode [ 239.949164][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.982758][ T60] bridge_slave_0: left allmulticast mode [ 239.998838][ T60] bridge_slave_0: left promiscuous mode [ 240.015220][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.760364][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.772454][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.784480][ T60] bond0 (unregistering): Released all slaves [ 240.838782][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.872793][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.906236][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.945554][ T60] !: left promiscuous mode [ 241.122355][T10633] hsr_slave_0: entered promiscuous mode [ 241.145819][T10633] hsr_slave_1: entered promiscuous mode [ 241.156137][T10633] debugfs: 'hsr0' already exists in 'hsr' [ 241.166906][T10633] Cannot create hsr debugfs directory [ 241.256857][T10708] IPv6: A: Disabled Multicast RS [ 241.564979][T10717] binder_alloc: 10716: binder_alloc_buf, no vma [ 241.605978][ T60] hsr_slave_0: left promiscuous mode [ 241.624305][ T60] hsr_slave_1: left promiscuous mode [ 241.632709][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.654278][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.680795][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.689799][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.795043][ T60] veth1_macvtap: left promiscuous mode [ 241.811878][ T60] veth0_macvtap: left promiscuous mode [ 241.823296][ T60] veth1_vlan: left promiscuous mode [ 241.835848][ T60] veth0_vlan: left promiscuous mode [ 241.944489][ T5829] Bluetooth: hci4: command tx timeout [ 242.064316][ T5832] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 242.255954][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.284983][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.314323][ T5832] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 242.323439][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.343167][ T5832] usb 5-1: config 0 descriptor?? [ 242.690378][ T60] team0 (unregistering): Port device team_slave_1 removed [ 242.737181][ T60] team0 (unregistering): Port device team_slave_0 removed [ 242.791436][ T5832] glorious 0003:258A:0036.0006: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 242.849051][T10742] netlink: 'syz.2.2157': attribute type 13 has an invalid length. [ 242.979133][ T5832] usb 5-1: USB disconnect, device number 7 [ 244.027857][ T5829] Bluetooth: hci4: command tx timeout [ 244.439101][T10793] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2176'. [ 244.491593][T10633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.540659][T10633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.560117][T10633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.600338][T10633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.858542][T10818] cgroup: Unknown subsys name 'cpuset' [ 244.908067][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.970145][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.003955][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.011238][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.038110][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.045401][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.587922][T10633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.737678][T10633] veth0_vlan: entered promiscuous mode [ 245.781420][T10633] veth1_vlan: entered promiscuous mode [ 245.892399][T10633] veth0_macvtap: entered promiscuous mode [ 245.920897][T10633] veth1_macvtap: entered promiscuous mode [ 245.990534][T10633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.031047][T10633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.068704][ T1026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.100451][ T1026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.114372][ T5829] Bluetooth: hci4: command tx timeout [ 246.132185][ T1026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.172418][ T1026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.447313][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.474854][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.549686][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.559809][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.455616][T10992] 9p: Bad value for 'wfdno' [ 249.962566][T11017] tipc: Enabled bearer , priority 0 [ 249.978107][T11015] tipc: Disabling bearer [ 251.078908][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.089372][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.099867][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.108139][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.116569][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.231623][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 251.231640][ T30] audit: type=1326 audit(1763076126.436:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95578f6c9 code=0x7fc00000 [ 251.762373][T11046] chnl_net:caif_netlink_parms(): no params data found [ 252.832340][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.843025][T11046] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.851049][T11046] bridge_slave_0: entered allmulticast mode [ 252.864800][T11046] bridge_slave_0: entered promiscuous mode [ 252.875086][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.884009][T11046] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.891317][T11046] bridge_slave_1: entered allmulticast mode [ 252.926273][T11046] bridge_slave_1: entered promiscuous mode [ 253.110288][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.145213][ T5826] Bluetooth: hci1: command tx timeout [ 253.148799][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.337431][T11046] team0: Port device team_slave_0 added [ 253.360804][T11096] fuse: Bad value for 'group_id' [ 253.363375][T11046] team0: Port device team_slave_1 added [ 253.374041][T11096] fuse: Bad value for 'group_id' [ 253.437875][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.454282][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.523830][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.542120][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.551090][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.579276][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.700363][T11046] hsr_slave_0: entered promiscuous mode [ 253.718317][T11046] hsr_slave_1: entered promiscuous mode [ 253.725694][T11046] debugfs: 'hsr0' already exists in 'hsr' [ 253.731508][T11046] Cannot create hsr debugfs directory [ 254.195156][T11046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.284481][ T977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.321833][T11046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.408058][T11046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.468176][ T977] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 254.487209][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.512154][ T977] usb 5-1: config 0 descriptor?? [ 254.534881][T11046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.754014][T11046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.771527][T11046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.785542][T11046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.799633][T11046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.939818][ T977] nintendo 0003:057E:2009.0007: unknown main item tag 0x0 [ 254.956077][T11046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.964230][ T977] nintendo 0003:057E:2009.0007: unknown main item tag 0x0 [ 254.982690][ T977] nintendo 0003:057E:2009.0007: unknown main item tag 0x0 [ 255.005201][T11046] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.015627][ T977] nintendo 0003:057E:2009.0007: unknown main item tag 0x0 [ 255.023393][ T977] nintendo 0003:057E:2009.0007: unknown main item tag 0x0 [ 255.036942][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.039466][ T977] nintendo 0003:057E:2009.0007: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 255.044230][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.075417][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.082711][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.131484][ T977] nintendo 0003:057E:2009.0007: Failed to get joycon info; ret=-38 [ 255.158974][ T977] nintendo 0003:057E:2009.0007: Failed to retrieve controller info; ret=-38 [ 255.187034][ T977] nintendo 0003:057E:2009.0007: Failed to initialize controller; ret=-38 [ 255.219012][ T977] nintendo 0003:057E:2009.0007: probe - fail = -38 [ 255.224904][ T5826] Bluetooth: hci1: command tx timeout [ 255.226927][ T977] nintendo 0003:057E:2009.0007: probe with driver nintendo failed with error -38 [ 255.252567][ T977] usb 5-1: USB disconnect, device number 8 [ 255.274145][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 255.426618][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.437796][ T5922] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.445064][T11046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.457798][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.475018][ T5922] usb 2-1: config 0 descriptor?? [ 255.535408][T11046] veth0_vlan: entered promiscuous mode [ 255.557160][T11046] veth1_vlan: entered promiscuous mode [ 255.612026][T11046] veth0_macvtap: entered promiscuous mode [ 255.627912][T11046] veth1_macvtap: entered promiscuous mode [ 255.676493][T11046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.708338][T11046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.746159][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.764528][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.811656][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.831468][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.928815][ T5922] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 255.962263][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.980890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.983867][ T5922] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input16 [ 256.069496][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.087205][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.196753][ T5922] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 256.326439][ T10] usb 2-1: USB disconnect, device number 3 [ 256.392577][T11174] fido_id[11174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 256.712560][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.721728][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.734380][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.749695][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.758695][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.304107][ T5826] Bluetooth: hci1: command tx timeout [ 257.632713][T11187] chnl_net:caif_netlink_parms(): no params data found [ 257.861136][T11221] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 257.873189][T11221] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 257.881757][T11221] CPU: 0 UID: 0 PID: 11221 Comm: syz.4.2328 Not tainted syzkaller #0 PREEMPT(full) [ 257.891259][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.901353][T11221] RIP: 0010:put_mnt_ns+0x34/0x2f0 [ 257.906432][T11221] Code: 55 41 54 53 48 89 fb e8 9a 3c 7e ff 48 85 db 0f 84 df 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d 73 20 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 8c 95 e4 ff 4d 8b 3e 31 ff 4c [ 257.926078][T11221] RSP: 0018:ffffc9000aab7960 EFLAGS: 00010203 [ 257.932209][T11221] RAX: ffffffff8243a3b6 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 257.940231][T11221] RDX: ffffc9000b2f9000 RSI: 0000000000042acd RDI: 0000000000042ace [ 257.948257][T11221] RBP: fffffffffffffff4 R08: ffff88802f595b87 R09: 1ffff11005eb2b70 [ 257.956281][T11221] R10: dffffc0000000000 R11: ffffed1005eb2b71 R12: dffffc0000000000 [ 257.964470][T11221] R13: 0000000000000002 R14: 0000000000000014 R15: ffff88802b828958 [ 257.972484][T11221] FS: 00007ff95654c6c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 257.981462][T11221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.988080][T11221] CR2: 00007ff956518710 CR3: 0000000077660000 CR4: 00000000003526f0 [ 257.996098][T11221] Call Trace: [ 257.999424][T11221] [ 258.002396][T11221] nsproxy_free+0x3c/0x7c0 [ 258.006858][T11221] create_new_namespaces+0x47a/0x540 [ 258.012215][T11221] ? copy_namespaces+0x5c/0x4b0 [ 258.017124][T11221] copy_namespaces+0x438/0x4b0 [ 258.021918][T11221] copy_process+0x168f/0x3930 [ 258.026627][T11221] ? copy_process+0x915/0x3930 [ 258.031452][T11221] ? __pfx_copy_process+0x10/0x10 [ 258.036499][T11221] kernel_clone+0x21e/0x850 [ 258.041020][T11221] ? __seccomp_filter+0x3c6/0x1e10 [ 258.046140][T11221] ? __pfx_kernel_clone+0x10/0x10 [ 258.051203][T11221] ? do_futex+0x333/0x420 [ 258.055571][T11221] __x64_sys_clone+0x18b/0x1e0 [ 258.060379][T11221] ? __pfx___x64_sys_clone+0x10/0x10 [ 258.065705][T11221] ? __secure_computing+0xe2/0x2a0 [ 258.070837][T11221] do_syscall_64+0xfa/0xfa0 [ 258.075362][T11221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.081525][T11221] ? clear_bhb_loop+0x60/0xb0 [ 258.086212][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.092114][T11221] RIP: 0033:0x7ff95578f6c9 [ 258.096541][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.116167][T11221] RSP: 002b:00007ff95654bfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 258.124601][T11221] RAX: ffffffffffffffda RBX: 00007ff9559e5fa0 RCX: 00007ff95578f6c9 [ 258.132589][T11221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000b21e0000 [ 258.140564][T11221] RBP: 00007ff955811f91 R08: 0000000000000000 R09: 0000000000000000 [ 258.148550][T11221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 258.156547][T11221] R13: 00007ff9559e6038 R14: 00007ff9559e5fa0 R15: 00007fffe1158ac8 [ 258.164536][T11221] [ 258.167581][T11221] Modules linked in: [ 258.173334][T11221] ---[ end trace 0000000000000000 ]--- [ 258.195317][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.202501][T11187] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.209942][T11187] bridge_slave_0: entered allmulticast mode [ 258.231711][T11221] RIP: 0010:put_mnt_ns+0x34/0x2f0 [ 258.237218][T11221] Code: 55 41 54 53 48 89 fb e8 9a 3c 7e ff 48 85 db 0f 84 df 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d 73 20 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 8c 95 e4 ff 4d 8b 3e 31 ff 4c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 258.258837][T11187] bridge_slave_0: entered promiscuous mode [ 258.279259][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.353570][T11187] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.361017][T11187] bridge_slave_1: entered allmulticast mode [ 258.385968][T11221] RSP: 0018:ffffc9000aab7960 EFLAGS: 00010203 [ 258.402118][T11187] bridge_slave_1: entered promiscuous mode [ 258.434043][T11221] RAX: ffffffff8243a3b6 RBX: fffffffffffffff4 RCX: 0000000000080000 [ 258.442190][T11221] RDX: ffffc9000b2f9000 RSI: 0000000000042acd RDI: 0000000000042ace [ 258.503462][T11221] RBP: fffffffffffffff4 R08: ffff88802f595b87 R09: 1ffff11005eb2b70 [ 258.554354][T11221] R10: dffffc0000000000 R11: ffffed1005eb2b71 R12: dffffc0000000000 [ 258.562409][T11221] R13: 0000000000000002 R14: 0000000000000014 R15: ffff88802b828958 [ 258.686637][T11221] FS: 00007ff95654c6c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 258.748813][T11221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.762380][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.778093][T11221] CR2: 000056205e331000 CR3: 0000000077660000 CR4: 00000000003526f0 [ 258.793580][T11221] Kernel panic - not syncing: Fatal exception [ 258.800057][T11221] Kernel Offset: disabled [ 258.804430][T11221] Rebooting in 86400 seconds..