last executing test programs: 2.242101047s ago: executing program 2 (id=3): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 2.151369718s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) 2.082309093s ago: executing program 1 (id=13): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 2.082109899s ago: executing program 3 (id=14): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) 2.032838271s ago: executing program 1 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) 1.966164043s ago: executing program 3 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) 1.965850376s ago: executing program 2 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) 1.872876499s ago: executing program 2 (id=19): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0xff, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x21, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, '!4'}, @main=@item_4={0x3, 0x0, 0x9, "988fdbb0"}]}}, 0x0}, 0x0) 1.775489261s ago: executing program 1 (id=20): openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.141606527s ago: executing program 0 (id=22): r0 = socket$netlink(0x10, 0x3, 0x7) getpeername$netlink(r0, 0x0, &(0x7f0000000340)) 1.038693226s ago: executing program 0 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') pipe2$9p(0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 990.180124ms ago: executing program 3 (id=24): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 984.594864ms ago: executing program 1 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') 942.102998ms ago: executing program 0 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x28) 866.23257ms ago: executing program 1 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x38, r1, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040) 822.089504ms ago: executing program 3 (id=28): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @multicast}, 0x14) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000600)=""/222, 0xde}], 0x1, 0x1a, 0x0) 803.750885ms ago: executing program 1 (id=29): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201100100000010771424100000000000010902240001000000000904000001030002000921000000012206f20805"], 0x0) 801.329477ms ago: executing program 0 (id=30): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486"], 0xfdef) 686.143629ms ago: executing program 3 (id=31): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0x10000}}, 0x120) 644.837655ms ago: executing program 3 (id=32): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0x0, 0x23, "a953373dce4448adfbf53dac392331906c1368c74101a4d5be074734b10b02f812efe2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 526.935558ms ago: executing program 0 (id=33): r0 = socket$inet6(0xa, 0x3, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801000000000000"], 0x108}}], 0x2, 0xc040) 418.076311ms ago: executing program 0 (id=34): syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8003, 0xff}, [@processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xed, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xb61, 0xeed, 0x40}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x14, 0x4, 0xcd, {0x7, 0x25, 0x1, 0x1, 0x7f, 0xe6d1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xd}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. [ 67.267040][ T5849] cgroup: Unknown subsys name 'net' [ 67.430342][ T5849] cgroup: Unknown subsys name 'cpuset' [ 67.438242][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.829840][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.787582][ T5187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.795226][ T5187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.802946][ T5187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.810998][ T5187] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.818815][ T5187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.826801][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.861151][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.872952][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.888639][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.896255][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.963492][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.970889][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.978442][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.996343][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.004053][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.015021][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.022441][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.029802][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.037558][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.046569][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.198938][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 72.262927][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 72.375295][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.382656][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.390228][ T5858] bridge_slave_0: entered allmulticast mode [ 72.397071][ T5858] bridge_slave_0: entered promiscuous mode [ 72.416236][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.423650][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.431235][ T5858] bridge_slave_1: entered allmulticast mode [ 72.438154][ T5858] bridge_slave_1: entered promiscuous mode [ 72.480101][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 72.492130][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.524068][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.533391][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.540874][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.548347][ T5862] bridge_slave_0: entered allmulticast mode [ 72.555050][ T5862] bridge_slave_0: entered promiscuous mode [ 72.582795][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.590176][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.597549][ T5862] bridge_slave_1: entered allmulticast mode [ 72.604938][ T5862] bridge_slave_1: entered promiscuous mode [ 72.632012][ T5858] team0: Port device team_slave_0 added [ 72.650436][ T5858] team0: Port device team_slave_1 added [ 72.656525][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 72.690903][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.702886][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.728692][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.735694][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.761772][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.794591][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.801771][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.827874][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.867105][ T5862] team0: Port device team_slave_0 added [ 72.873742][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.881004][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.888886][ T5868] bridge_slave_0: entered allmulticast mode [ 72.895605][ T5868] bridge_slave_0: entered promiscuous mode [ 72.903776][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.911643][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.919614][ T5868] bridge_slave_1: entered allmulticast mode [ 72.926524][ T5868] bridge_slave_1: entered promiscuous mode [ 72.938742][ T5862] team0: Port device team_slave_1 added [ 73.006004][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.013269][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.040013][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.053275][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.064992][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.074509][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.082201][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.089499][ T5871] bridge_slave_0: entered allmulticast mode [ 73.096765][ T5871] bridge_slave_0: entered promiscuous mode [ 73.106822][ T5858] hsr_slave_0: entered promiscuous mode [ 73.113817][ T5858] hsr_slave_1: entered promiscuous mode [ 73.120809][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.128119][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.154474][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.176570][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.183884][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.191833][ T5871] bridge_slave_1: entered allmulticast mode [ 73.199101][ T5871] bridge_slave_1: entered promiscuous mode [ 73.237265][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.248432][ T5868] team0: Port device team_slave_0 added [ 73.275791][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.293689][ T5868] team0: Port device team_slave_1 added [ 73.319389][ T5862] hsr_slave_0: entered promiscuous mode [ 73.325560][ T5862] hsr_slave_1: entered promiscuous mode [ 73.331946][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 73.337710][ T5862] Cannot create hsr debugfs directory [ 73.374861][ T5871] team0: Port device team_slave_0 added [ 73.382776][ T5871] team0: Port device team_slave_1 added [ 73.389894][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.396886][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.423152][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.435187][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.442246][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.468297][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.515698][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.522883][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.548936][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.583431][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.590574][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.617496][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.655172][ T5868] hsr_slave_0: entered promiscuous mode [ 73.661775][ T5868] hsr_slave_1: entered promiscuous mode [ 73.668538][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 73.674481][ T5868] Cannot create hsr debugfs directory [ 73.730038][ T5871] hsr_slave_0: entered promiscuous mode [ 73.736304][ T5871] hsr_slave_1: entered promiscuous mode [ 73.743490][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 73.749422][ T5871] Cannot create hsr debugfs directory [ 73.872009][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.888157][ T5863] Bluetooth: hci0: command tx timeout [ 73.894965][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.916364][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.945032][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.968012][ T5863] Bluetooth: hci1: command tx timeout [ 74.008594][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.018771][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.028804][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.038708][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.048321][ T5863] Bluetooth: hci2: command tx timeout [ 74.085248][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.095388][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.105237][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.117982][ T5863] Bluetooth: hci3: command tx timeout [ 74.127526][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.178531][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.201233][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.225846][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.235927][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.261874][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.300035][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.317605][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.324855][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.342463][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.349708][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.380046][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.421863][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.436247][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.457436][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.464675][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.484933][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.492121][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.505721][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.524184][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.531473][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.562660][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.569828][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.589198][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.652897][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.677750][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.684962][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.718951][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.726128][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.837193][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.941040][ T5858] veth0_vlan: entered promiscuous mode [ 74.967674][ T5858] veth1_vlan: entered promiscuous mode [ 75.006565][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.026169][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.041650][ T5858] veth0_macvtap: entered promiscuous mode [ 75.071192][ T5858] veth1_macvtap: entered promiscuous mode [ 75.107489][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.120125][ T5862] veth0_vlan: entered promiscuous mode [ 75.126045][ T5868] veth0_vlan: entered promiscuous mode [ 75.142582][ T5868] veth1_vlan: entered promiscuous mode [ 75.154015][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.167240][ T5862] veth1_vlan: entered promiscuous mode [ 75.181778][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.211013][ T4550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.221473][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.231572][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.252778][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.290703][ T5871] veth0_vlan: entered promiscuous mode [ 75.311538][ T5868] veth0_macvtap: entered promiscuous mode [ 75.321494][ T5862] veth0_macvtap: entered promiscuous mode [ 75.331108][ T5862] veth1_macvtap: entered promiscuous mode [ 75.347547][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.358780][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.367113][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.386977][ T5868] veth1_macvtap: entered promiscuous mode [ 75.394891][ T5871] veth1_vlan: entered promiscuous mode [ 75.409081][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.417727][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.426999][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.445623][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.453713][ T4427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.462831][ T4427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.485900][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.500419][ T4427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.500814][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.509673][ T4427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.587789][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.605182][ T5871] veth0_macvtap: entered promiscuous mode [ 75.615821][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.627020][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.643979][ T5871] veth1_macvtap: entered promiscuous mode [ 75.665701][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.692534][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.705841][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.711492][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.755020][ T5947] binder: 5946:5947 ioctl c018620c 200000001fc0 returned -1 [ 75.767559][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.803220][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.818277][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.829103][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.845859][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.888715][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.897672][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.927084][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.944050][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.965309][ T5863] Bluetooth: hci0: command tx timeout [ 75.985421][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.012736][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.038541][ T5863] Bluetooth: hci1: command tx timeout [ 76.038759][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.061430][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.093883][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.112332][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.120808][ T5863] Bluetooth: hci2: command tx timeout [ 76.136902][ T5957] input: syz1 as /devices/virtual/input/input5 [ 76.198797][ T5863] Bluetooth: hci3: command tx timeout [ 76.261325][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.484391][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.761015][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.786699][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.948253][ T5948] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.153955][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 77.176669][ T5948] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 77.209316][ T5948] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.231855][ T5948] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 77.265528][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.282251][ T5948] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 77.296814][ T5990] binder: 5988:5990 ioctl c0306201 200000000040 returned -22 [ 77.304615][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.319588][ T5948] usb 3-1: config 0 descriptor?? [ 77.477035][ T5995] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.772487][ T5948] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 77.781751][ T5948] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 77.791418][ T5948] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 77.803185][ T5948] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 77.912148][ T6014] fido_id[6014]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.940503][ T5924] usb 3-1: USB disconnect, device number 2 [ 77.949164][ T5948] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.039611][ T5863] Bluetooth: hci0: command tx timeout [ 78.118198][ T5863] Bluetooth: hci1: command tx timeout [ 78.119153][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 78.130854][ T5948] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 78.138387][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.150012][ T5948] usb 2-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00 [ 78.159410][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.173516][ T5948] usb 2-1: config 0 descriptor?? [ 78.179607][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.194718][ T5948] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 78.198602][ T5863] Bluetooth: hci2: command tx timeout [ 78.278200][ T5863] Bluetooth: hci3: command tx timeout [ 78.278277][ T6018] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.348707][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 78.357344][ T44] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.367483][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.375703][ T44] usb 4-1: Product: syz [ 78.380725][ T44] usb 4-1: Manufacturer: syz [ 78.385898][ T44] usb 4-1: SerialNumber: syz [ 78.395296][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 78.404921][ T44] r8152-cfgselector 4-1: config 0 descriptor?? [ 78.407087][ T5869] usb 2-1: USB disconnect, device number 2 [ 78.441445][ T6018] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.450228][ T6018] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.461061][ T6018] usb 1-1: config 1 has no interface number 1 [ 78.470362][ T6018] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 78.500180][ T6018] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.509433][ T6018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.517506][ T6018] usb 1-1: Product: syz [ 78.524292][ T6018] usb 1-1: Manufacturer: syz [ 78.530084][ T6018] usb 1-1: SerialNumber: syz [ 78.535484][ T6028] ------------[ cut here ]------------ [ 78.541109][ T6028] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 78.548234][ T6028] shift exponent 32 is too large for 32-bit type 'int' [ 78.555315][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 78.555342][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.555355][ T6028] Call Trace: [ 78.555363][ T6028] [ 78.555371][ T6028] dump_stack_lvl+0x189/0x250 [ 78.555411][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.555441][ T6028] ? __pfx__printk+0x10/0x10 [ 78.555475][ T6028] ubsan_epilogue+0xa/0x40 [ 78.555493][ T6028] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 78.555517][ T6028] ? __pfx_v9fs_set_super+0x10/0x10 [ 78.555544][ T6028] v9fs_get_tree+0x957/0xa90 [ 78.555570][ T6028] ? __pfx_v9fs_get_tree+0x10/0x10 [ 78.555597][ T6028] vfs_get_tree+0x8f/0x2b0 [ 78.555620][ T6028] do_new_mount+0x2a2/0xa30 [ 78.555637][ T6028] ? ns_capable+0x8a/0xf0 [ 78.555653][ T6028] ? __pfx_do_new_mount+0x10/0x10 [ 78.555669][ T6028] ? path_mount+0x61c/0xfe0 [ 78.555693][ T6028] ? user_path_at+0x44/0x60 [ 78.555734][ T6028] __se_sys_mount+0x317/0x410 [ 78.555759][ T6028] ? __pfx___se_sys_mount+0x10/0x10 [ 78.555782][ T6028] ? rcu_is_watching+0x15/0xb0 [ 78.555797][ T6028] ? __x64_sys_mount+0x20/0xc0 [ 78.555815][ T6028] do_syscall_64+0xfa/0xfa0 [ 78.555844][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.555865][ T6028] ? clear_bhb_loop+0x60/0xb0 [ 78.555886][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.555905][ T6028] RIP: 0033:0x7efc2538ebe9 [ 78.555934][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.555947][ T6028] RSP: 002b:00007efc26256038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.555963][ T6028] RAX: ffffffffffffffda RBX: 00007efc255b5fa0 RCX: 00007efc2538ebe9 [ 78.555975][ T6028] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 78.555991][ T6028] RBP: 00007efc25411e19 R08: 0000200000000580 R09: 0000000000000000 [ 78.556005][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.556017][ T6028] R13: 00007efc255b6038 R14: 00007efc255b5fa0 R15: 00007fff3a966508 [ 78.556039][ T6028] [ 78.556046][ T6028] ---[ end trace ]--- [ 78.621896][ T44] r8152-cfgselector 4-1: Unknown version 0x3c30 [ 78.625664][ T6028] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 78.625683][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 78.625706][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.625720][ T6028] Call Trace: [ 78.625729][ T6028] [ 78.625739][ T6028] dump_stack_lvl+0x99/0x250 [ 78.625778][ T6028] ? __asan_memcpy+0x40/0x70 [ 78.625811][ T6028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.625849][ T6028] ? __pfx__printk+0x10/0x10 [ 78.625890][ T6028] vpanic+0x281/0x750 [ 78.625922][ T6028] ? __pfx_vpanic+0x10/0x10 [ 78.625958][ T6028] panic+0xb9/0xc0 [ 78.625985][ T6028] ? __pfx_panic+0x10/0x10 [ 78.626014][ T6028] ? __pfx__printk+0x10/0x10 [ 78.626051][ T6028] check_panic_on_warn+0x89/0xb0 [ 78.626085][ T6028] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 78.626120][ T6028] ? __pfx_v9fs_set_super+0x10/0x10 [ 78.626149][ T6028] v9fs_get_tree+0x957/0xa90 [ 78.626179][ T6028] ? __pfx_v9fs_get_tree+0x10/0x10 [ 78.626213][ T6028] vfs_get_tree+0x8f/0x2b0 [ 78.626240][ T6028] do_new_mount+0x2a2/0xa30 [ 78.626269][ T6028] ? ns_capable+0x8a/0xf0 [ 78.626294][ T6028] ? __pfx_do_new_mount+0x10/0x10 [ 78.626319][ T6028] ? path_mount+0x61c/0xfe0 [ 78.626344][ T6028] ? user_path_at+0x44/0x60 [ 78.626385][ T6028] __se_sys_mount+0x317/0x410 [ 78.626427][ T6028] ? __pfx___se_sys_mount+0x10/0x10 [ 78.626460][ T6028] ? rcu_is_watching+0x15/0xb0 [ 78.626486][ T6028] ? __x64_sys_mount+0x20/0xc0 [ 78.626515][ T6028] do_syscall_64+0xfa/0xfa0 [ 78.626548][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.626572][ T6028] ? clear_bhb_loop+0x60/0xb0 [ 78.626599][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.626622][ T6028] RIP: 0033:0x7efc2538ebe9 [ 78.626646][ T6028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.626665][ T6028] RSP: 002b:00007efc26256038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.626692][ T6028] RAX: ffffffffffffffda RBX: 00007efc255b5fa0 RCX: 00007efc2538ebe9 [ 78.626710][ T6028] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 78.626728][ T6028] RBP: 00007efc25411e19 R08: 0000200000000580 R09: 0000000000000000 [ 78.626745][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.626758][ T6028] R13: 00007efc255b6038 R14: 00007efc255b5fa0 R15: 00007fff3a966508 [ 78.626787][ T6028] [ 78.630462][ T6028] Kernel Offset: disabled