last executing test programs: 4.118086252s ago: executing program 1 (id=20): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) accept$packet(r1, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.235024857s ago: executing program 1 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 3.18395713s ago: executing program 1 (id=40): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x1, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.686960541s ago: executing program 0 (id=57): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 1.677742641s ago: executing program 0 (id=59): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) accept$packet(r1, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.623536899s ago: executing program 3 (id=60): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.583423104s ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 1.499018496s ago: executing program 3 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x44, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}]}, 0x44}}, 0x4804) 1.4988993s ago: executing program 3 (id=63): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 1.429383672s ago: executing program 3 (id=64): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000340)={0x0, 0xe, 0x5, "a2eff9d99c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 814.239321ms ago: executing program 0 (id=65): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 727.08926ms ago: executing program 0 (id=66): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/101, 0x65}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 710.022046ms ago: executing program 0 (id=67): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 665.680653ms ago: executing program 0 (id=68): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000000)=[{0x3, 0x6000, 0x0, 0x0}, {0x9, 0x1800, 0x0, 0x0}, {0x6, 0x801, 0x0, 0x0}], 0x3}) 381.933897ms ago: executing program 2 (id=73): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 340.546676ms ago: executing program 2 (id=74): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 262.965042ms ago: executing program 2 (id=75): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/101, 0x65}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 262.807128ms ago: executing program 2 (id=76): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)=[{0x0, 0x1000}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) 213.397625ms ago: executing program 2 (id=77): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r1, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 172.45129ms ago: executing program 2 (id=78): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)={0x40, 0x11, 0xa, "7144a39994855c9207b8"}, 0x0, 0x0}) 129.526544ms ago: executing program 1 (id=79): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 88.559296ms ago: executing program 1 (id=80): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) fadvise64(r0, 0x9, 0x6, 0x4) 11.034741ms ago: executing program 1 (id=81): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 3 (id=82): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d37573cc57f4bec3afa91f0b84c91673a2bcdcd3e557cf20fecd685e93c0bc1d318c2ed56d1796", 0x7c}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54bedbb3ed6d56b12c88dfd97cca4043efd9cc56ed65429e609e6df87544cd6486c2c74e84799c1fbc811fe1fbf14c3d474c2baa1e7c86427d235110101be23c696a1ed2b506d8e84086ade5b56e6da5e8fbb88006e52187a0aac3c407725beecfdac80b216d755ae306072dd806b89ecb01fc0063b273eefcdfe2bdff1ebed035beb21", 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000014c0)="44b896818dd13e040b09e9ff5327615afa549fe545b6e79585e067af4328bcc41f778fcecf104cf2318418907de2bda01878a558af061d15e45bfcba7610e1717120c4cd89550ca5069f6a023247437795a1028586291e3ff5ae2d9cd5d53032ac1d8e3f03fda2", 0x67}], 0x1}}], 0x3, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 72.512194][ T5848] cgroup: Unknown subsys name 'net' [ 72.625086][ T5848] cgroup: Unknown subsys name 'cpuset' [ 72.633360][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.007916][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.254622][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.263956][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.275169][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.283259][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.291572][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.300996][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.312612][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.319915][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.327729][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.336770][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.344883][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.346967][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.353796][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.366579][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.382272][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.392422][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.392752][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.410684][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.417304][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.417866][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.433276][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.440406][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.765224][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.809096][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 77.839544][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 77.894116][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 77.977102][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.984573][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.992106][ T5862] bridge_slave_0: entered allmulticast mode [ 77.999031][ T5862] bridge_slave_0: entered promiscuous mode [ 78.022949][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.030251][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.037916][ T5862] bridge_slave_1: entered allmulticast mode [ 78.045241][ T5862] bridge_slave_1: entered promiscuous mode [ 78.084399][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.091585][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.099033][ T5858] bridge_slave_0: entered allmulticast mode [ 78.106290][ T5858] bridge_slave_0: entered promiscuous mode [ 78.135025][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.142424][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.149691][ T5858] bridge_slave_1: entered allmulticast mode [ 78.156776][ T5858] bridge_slave_1: entered promiscuous mode [ 78.173535][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.184973][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.194198][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.201378][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.208747][ T5863] bridge_slave_0: entered allmulticast mode [ 78.215592][ T5863] bridge_slave_0: entered promiscuous mode [ 78.223205][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.230320][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.237865][ T5863] bridge_slave_1: entered allmulticast mode [ 78.244938][ T5863] bridge_slave_1: entered promiscuous mode [ 78.258761][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.266047][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.273592][ T5869] bridge_slave_0: entered allmulticast mode [ 78.280435][ T5869] bridge_slave_0: entered promiscuous mode [ 78.317974][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.325666][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.333382][ T5869] bridge_slave_1: entered allmulticast mode [ 78.340621][ T5869] bridge_slave_1: entered promiscuous mode [ 78.365441][ T5862] team0: Port device team_slave_0 added [ 78.381087][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.392991][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.404382][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.415978][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.426254][ T5862] team0: Port device team_slave_1 added [ 78.441762][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.453416][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.498270][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.505343][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.532459][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.544480][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.551455][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.577564][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.606387][ T5869] team0: Port device team_slave_0 added [ 78.617384][ T5863] team0: Port device team_slave_0 added [ 78.625730][ T5858] team0: Port device team_slave_0 added [ 78.633488][ T5869] team0: Port device team_slave_1 added [ 78.649247][ T5863] team0: Port device team_slave_1 added [ 78.656300][ T5858] team0: Port device team_slave_1 added [ 78.677874][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.684892][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.711263][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.750429][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.757475][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.783992][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.802883][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.809858][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.836431][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.860220][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.867617][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.894135][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.906202][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.913291][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.940035][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.951604][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.958829][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.984855][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.998836][ T5862] hsr_slave_0: entered promiscuous mode [ 79.005276][ T5862] hsr_slave_1: entered promiscuous mode [ 79.048743][ T5869] hsr_slave_0: entered promiscuous mode [ 79.055227][ T5869] hsr_slave_1: entered promiscuous mode [ 79.061153][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 79.066962][ T5869] Cannot create hsr debugfs directory [ 79.105118][ T5863] hsr_slave_0: entered promiscuous mode [ 79.111510][ T5863] hsr_slave_1: entered promiscuous mode [ 79.118376][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 79.124255][ T5863] Cannot create hsr debugfs directory [ 79.196583][ T5858] hsr_slave_0: entered promiscuous mode [ 79.204321][ T5858] hsr_slave_1: entered promiscuous mode [ 79.210590][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 79.216555][ T5858] Cannot create hsr debugfs directory [ 79.402149][ T5874] Bluetooth: hci0: command tx timeout [ 79.459253][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.469411][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.479741][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.487010][ T5874] Bluetooth: hci3: command tx timeout [ 79.487024][ T5186] Bluetooth: hci1: command tx timeout [ 79.492626][ T5186] Bluetooth: hci2: command tx timeout [ 79.509939][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.545690][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.557658][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.567590][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.585299][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.636064][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.647956][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.659403][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.670035][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.724362][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.740359][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.756641][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.770762][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.860384][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.891222][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.911779][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.919107][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.933675][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.959620][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.966798][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.995067][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.008428][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.015669][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.028522][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.038950][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.060758][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.068110][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.120782][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.145855][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.163477][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.170598][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.180428][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.187729][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.199069][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.206261][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.233270][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.240425][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.464715][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.521375][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.575446][ T5862] veth0_vlan: entered promiscuous mode [ 80.608106][ T5862] veth1_vlan: entered promiscuous mode [ 80.625927][ T5869] veth0_vlan: entered promiscuous mode [ 80.657065][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.667924][ T5869] veth1_vlan: entered promiscuous mode [ 80.679487][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.720445][ T5869] veth0_macvtap: entered promiscuous mode [ 80.741816][ T5862] veth0_macvtap: entered promiscuous mode [ 80.751662][ T5862] veth1_macvtap: entered promiscuous mode [ 80.775014][ T5858] veth0_vlan: entered promiscuous mode [ 80.780800][ T5863] veth0_vlan: entered promiscuous mode [ 80.787404][ T5869] veth1_macvtap: entered promiscuous mode [ 80.814621][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.824255][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.832716][ T5863] veth1_vlan: entered promiscuous mode [ 80.847735][ T5858] veth1_vlan: entered promiscuous mode [ 80.857053][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.870346][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.900320][ T1047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.909258][ T1047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.930842][ T1047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.940090][ T1047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.964335][ T1047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.973752][ T1047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.985611][ T5863] veth0_macvtap: entered promiscuous mode [ 81.005205][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.016854][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.028952][ T5863] veth1_macvtap: entered promiscuous mode [ 81.050277][ T5858] veth0_macvtap: entered promiscuous mode [ 81.088679][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.099683][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.105687][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.116902][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.117088][ T5858] veth1_macvtap: entered promiscuous mode [ 81.128585][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.146471][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.169643][ T1334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.188054][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.200764][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.201065][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.215503][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.224986][ T1334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.233881][ T1334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.250798][ T1334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.284955][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.312705][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.345537][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.361540][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.379480][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.422766][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.431497][ T1047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.442863][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.450420][ T1047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.474373][ T1047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.491450][ T5874] Bluetooth: hci0: command tx timeout [ 81.511409][ T1047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.563450][ T5874] Bluetooth: hci3: command tx timeout [ 81.564972][ T5186] Bluetooth: hci2: command tx timeout [ 81.568891][ T5874] Bluetooth: hci1: command tx timeout [ 81.703290][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.711330][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.774200][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.790177][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.982446][ T981] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.131971][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 82.138480][ T981] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 82.146987][ T981] usb 4-1: config 0 has no interface number 0 [ 82.153850][ T981] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 82.164963][ T981] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 82.175658][ T981] usb 4-1: config 0 interface 41 has no altsetting 0 [ 82.184585][ T981] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 82.194541][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.203198][ T981] usb 4-1: Product: syz [ 82.207451][ T981] usb 4-1: Manufacturer: syz [ 82.213206][ T981] usb 4-1: SerialNumber: syz [ 82.219949][ T981] usb 4-1: config 0 descriptor?? [ 82.225877][ T5965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.233457][ T5965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.445216][ T5965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.452694][ T5965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.530384][ T5977] batadv_slave_1: entered promiscuous mode [ 82.538210][ T5976] batadv_slave_1: left promiscuous mode [ 82.861676][ T981] Error reading MAC address [ 82.873576][ T5965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.881101][ T5965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.309173][ T981] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 83.334914][ T981] usb 4-1: USB disconnect, device number 2 [ 83.503345][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 83.512599][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.32'. [ 83.562218][ T5874] Bluetooth: hci0: command tx timeout [ 83.642814][ T5874] Bluetooth: hci1: command tx timeout [ 83.648378][ T5874] Bluetooth: hci2: command tx timeout [ 83.655839][ T5865] Bluetooth: hci3: command tx timeout [ 83.866862][ T6037] binder: 6036:6037 ioctl c0306201 0 returned -14 [ 84.022200][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.068888][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.182432][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 84.191194][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.202930][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.215687][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 84.225260][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.237080][ T10] usb 1-1: config 0 descriptor?? [ 84.244520][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 84.264565][ T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 84.273732][ T24] usb 2-1: config 0 has no interface number 0 [ 84.280090][ T24] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.290836][ T24] usb 2-1: config 0 interface 41 has no altsetting 0 [ 84.301204][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 84.316341][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.328256][ T24] usb 2-1: Product: syz [ 84.336542][ T24] usb 2-1: Manufacturer: syz [ 84.341292][ T24] usb 2-1: SerialNumber: syz [ 84.351347][ T24] usb 2-1: config 0 descriptor?? [ 84.357739][ T6035] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 84.368109][ T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 84.572031][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.656983][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 84.664212][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 84.674344][ T10] usb 1-1: USB disconnect, device number 2 [ 84.731978][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 84.740025][ T5902] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 84.749606][ T5902] usb 3-1: config 0 has no interface number 0 [ 84.756065][ T5902] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.766586][ T5902] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.778072][ T5902] usb 3-1: config 0 interface 41 has no altsetting 0 [ 84.787134][ T5902] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 84.796434][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.804744][ T5902] usb 3-1: Product: syz [ 84.808948][ T5902] usb 3-1: Manufacturer: syz [ 84.813846][ T5902] usb 3-1: SerialNumber: syz [ 84.820212][ T5902] usb 3-1: config 0 descriptor?? [ 84.827040][ T6056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.834701][ T6056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.056594][ T6056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.066351][ T6056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.429365][ T6081] afs: Unexpected value for 'dyn' [ 85.478285][ T5902] Error reading MAC address [ 85.493209][ T6056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.512104][ T6056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 85.525564][ T30] audit: type=1800 audit(1756847458.974:2): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="bus" dev="overlay" ino=127 res=0 errno=0 [ 85.545895][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.642484][ T5874] Bluetooth: hci0: command tx timeout [ 85.722774][ T5865] Bluetooth: hci3: command tx timeout [ 85.723726][ T5186] Bluetooth: hci1: command tx timeout [ 85.728709][ T5874] Bluetooth: hci2: command tx timeout [ 85.821968][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.921441][ T5902] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 85.934472][ T5902] usb 3-1: USB disconnect, device number 2 [ 85.974474][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 85.981979][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.992996][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.003561][ T5928] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 86.013480][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.024046][ T5928] usb 4-1: config 0 descriptor?? [ 86.438583][ T5928] usbhid 4-1:0.0: can't add hid device: -32 [ 86.448007][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 86.459549][ T5928] usb 4-1: USB disconnect, device number 3 [ 86.572422][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.732006][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 86.747118][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.757445][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 86.765994][ T24] usb 1-1: can't read configurations, error -71 [ 86.862593][ T5929] usb 2-1: USB disconnect, device number 2 [ 86.956144][ T6125] ------------[ cut here ]------------ [ 86.961792][ T6125] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 86.971315][ T6125] shift exponent 32 is too large for 32-bit type 'int' [ 86.981486][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.1.81 Not tainted syzkaller #0 PREEMPT(full) [ 86.981516][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.981531][ T6125] Call Trace: [ 86.981538][ T6125] [ 86.981546][ T6125] dump_stack_lvl+0x189/0x250 [ 86.981592][ T6125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.981623][ T6125] ? __pfx__printk+0x10/0x10 [ 86.981658][ T6125] ubsan_epilogue+0xa/0x40 [ 86.981682][ T6125] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 86.981714][ T6125] ? __pfx_v9fs_set_super+0x10/0x10 [ 86.981741][ T6125] v9fs_get_tree+0x957/0xa90 [ 86.981768][ T6125] ? __pfx_v9fs_get_tree+0x10/0x10 [ 86.981796][ T6125] vfs_get_tree+0x8f/0x2b0 [ 86.981819][ T6125] do_new_mount+0x2a2/0xa30 [ 86.981857][ T6125] ? ns_capable+0x8a/0xf0 [ 86.981881][ T6125] ? __pfx_do_new_mount+0x10/0x10 [ 86.981904][ T6125] ? path_mount+0x61c/0xfe0 [ 86.981925][ T6125] ? user_path_at+0x44/0x60 [ 86.981958][ T6125] __se_sys_mount+0x317/0x410 [ 86.981983][ T6125] ? __pfx___se_sys_mount+0x10/0x10 [ 86.982009][ T6125] ? rcu_is_watching+0x15/0xb0 [ 86.982030][ T6125] ? __x64_sys_mount+0x20/0xc0 [ 86.982053][ T6125] do_syscall_64+0xfa/0xfa0 [ 86.982083][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.982103][ T6125] ? clear_bhb_loop+0x60/0xb0 [ 86.982124][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.982144][ T6125] RIP: 0033:0x7f919718ebe9 [ 86.982175][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.982192][ T6125] RSP: 002b:00007f9198015038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.982219][ T6125] RAX: ffffffffffffffda RBX: 00007f91973c5fa0 RCX: 00007f919718ebe9 [ 86.982234][ T6125] RDX: 0000200000002340 RSI: 00002000000025c0 RDI: 0000000000000000 [ 86.982247][ T6125] RBP: 00007f9197211e19 R08: 0000200000000280 R09: 0000000000000000 [ 86.982260][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.982273][ T6125] R13: 00007f91973c6038 R14: 00007f91973c5fa0 R15: 00007fffe6643ef8 [ 86.982296][ T6125] [ 87.198136][ T6125] ---[ end trace ]--- [ 87.206909][ T6125] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 87.214164][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.1.81 Not tainted syzkaller #0 PREEMPT(full) [ 87.223313][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.233484][ T6125] Call Trace: [ 87.236786][ T6125] [ 87.239749][ T6125] dump_stack_lvl+0x99/0x250 [ 87.244367][ T6125] ? __asan_memcpy+0x40/0x70 [ 87.248975][ T6125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.254192][ T6125] ? __pfx__printk+0x10/0x10 [ 87.258807][ T6125] vpanic+0x281/0x750 [ 87.262813][ T6125] ? __pfx_vpanic+0x10/0x10 [ 87.267332][ T6125] panic+0xb9/0xc0 [ 87.271060][ T6125] ? __pfx_panic+0x10/0x10 [ 87.275613][ T6125] ? __pfx__printk+0x10/0x10 [ 87.280222][ T6125] check_panic_on_warn+0x89/0xb0 [ 87.285178][ T6125] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 87.291609][ T6125] ? __pfx_v9fs_set_super+0x10/0x10 [ 87.296829][ T6125] v9fs_get_tree+0x957/0xa90 [ 87.301481][ T6125] ? __pfx_v9fs_get_tree+0x10/0x10 [ 87.306604][ T6125] vfs_get_tree+0x8f/0x2b0 [ 87.311032][ T6125] do_new_mount+0x2a2/0xa30 [ 87.315564][ T6125] ? ns_capable+0x8a/0xf0 [ 87.320006][ T6125] ? __pfx_do_new_mount+0x10/0x10 [ 87.325130][ T6125] ? path_mount+0x61c/0xfe0 [ 87.329650][ T6125] ? user_path_at+0x44/0x60 [ 87.334181][ T6125] __se_sys_mount+0x317/0x410 [ 87.338881][ T6125] ? __pfx___se_sys_mount+0x10/0x10 [ 87.344096][ T6125] ? rcu_is_watching+0x15/0xb0 [ 87.348880][ T6125] ? __x64_sys_mount+0x20/0xc0 [ 87.353658][ T6125] do_syscall_64+0xfa/0xfa0 [ 87.358243][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.364353][ T6125] ? clear_bhb_loop+0x60/0xb0 [ 87.369037][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.375052][ T6125] RIP: 0033:0x7f919718ebe9 [ 87.379567][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.399325][ T6125] RSP: 002b:00007f9198015038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.407858][ T6125] RAX: ffffffffffffffda RBX: 00007f91973c5fa0 RCX: 00007f919718ebe9 [ 87.415849][ T6125] RDX: 0000200000002340 RSI: 00002000000025c0 RDI: 0000000000000000 [ 87.423852][ T6125] RBP: 00007f9197211e19 R08: 0000200000000280 R09: 0000000000000000 [ 87.431862][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.439885][ T6125] R13: 00007f91973c6038 R14: 00007f91973c5fa0 R15: 00007fffe6643ef8 [ 87.448229][ T6125] [ 87.452093][ T6125] Kernel Offset: disabled [ 87.456881][ T6125] Rebooting in 86400 seconds..