last executing test programs: 5m39.177383995s ago: executing program 2 (id=1607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={0x0, 0x2b08}}, 0x4004006) 5m37.828684692s ago: executing program 2 (id=1614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 5m37.48973973s ago: executing program 32 (id=1614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 5m16.534551058s ago: executing program 4 (id=1716): getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5m16.328986932s ago: executing program 4 (id=1719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5m15.612751197s ago: executing program 4 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, r1, {0x7, 0x4, 0xff, 0x3}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 5m14.464952987s ago: executing program 4 (id=1730): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 5m13.79369726s ago: executing program 4 (id=1733): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x3, 0x10) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 5m12.394731349s ago: executing program 4 (id=1737): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd(0x5) write$eventfd(r1, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) 5m11.739212723s ago: executing program 33 (id=1737): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd(0x5) write$eventfd(r1, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) 2m43.461820705s ago: executing program 3 (id=2737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.441882713s ago: executing program 3 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100000020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2m41.136159236s ago: executing program 3 (id=2749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001a40)=""/4096}], 0x56}, 0x80001}], 0x1, 0x2100, 0x0) sendto$unix(r1, &(0x7f00000000c0)="091a8cc09894741896", 0x9, 0x41, 0x0, 0x0) 2m40.897665128s ago: executing program 3 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28a100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 2m40.739389504s ago: executing program 3 (id=2756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd03, r0, &(0x7f0000000000)='HS', 0x2, 0x8000000000000000}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.815217607s ago: executing program 3 (id=2759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 2m39.039282533s ago: executing program 34 (id=2759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 2m4.88612063s ago: executing program 6 (id=2940): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008080}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2m4.348667702s ago: executing program 6 (id=2948): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20001) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x1, 0xffffffff, 0x200006, 0xa, 0x4, 0x0, 0x4, 0x1, 0xfffffffe, 0xa7, 0xfffffffe, 0x8, 0x7d5b528e, 0x1000}) 2m2.990479263s ago: executing program 7 (id=2966): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x17, 0xffe0}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m2.678536024s ago: executing program 7 (id=2968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000540)={0x14, 0x11, 0x2, {0x81, 0x0, 0x2}}, 0x14) 2m2.630703149s ago: executing program 6 (id=2969): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) 2m2.437164988s ago: executing program 6 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 2m1.988249902s ago: executing program 6 (id=2972): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 2m0.768950379s ago: executing program 6 (id=2978): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 2m0.397723165s ago: executing program 35 (id=2978): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) creat(&(0x7f0000000200)='./file5\x00', 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 2m0.32849699s ago: executing program 7 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m59.872313702s ago: executing program 7 (id=2988): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m59.589932237s ago: executing program 7 (id=2990): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m58.431719994s ago: executing program 7 (id=3001): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 1m57.977469442s ago: executing program 36 (id=3001): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 14.396764171s ago: executing program 1 (id=3643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 14.185046883s ago: executing program 1 (id=3646): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e", 0x25}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.123358123s ago: executing program 1 (id=3649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a56000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x28, &(0x7f0000000100)=[@cr0={0x0, 0x4005000f}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffb}], 0x2) 13.605772885s ago: executing program 1 (id=3655): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_fuse_handle_req(r0, &(0x7f0000013800)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2000000, 0x461410, 0x0, 0x0, 0x10000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.334611094s ago: executing program 1 (id=3657): pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 12.773720865s ago: executing program 1 (id=3664): r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0xc, 0x0, 0x0, 0x0, {0x1003}, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 12.290134782s ago: executing program 37 (id=3664): r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0xc, 0x0, 0x0, 0x0, {0x1003}, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.943516866s ago: executing program 9 (id=3733): ioperm(0x0, 0x8, 0x8000000000004) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 2.952224998s ago: executing program 9 (id=3740): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) sendfile(r2, r1, 0x0, 0x5) 2.473247094s ago: executing program 8 (id=3746): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.866426802s ago: executing program 8 (id=3750): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) 1.865693012s ago: executing program 5 (id=3751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.678123783s ago: executing program 5 (id=3752): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x1, 0x200000000, 0xd, 0x4, 0x6, 0x0, {0x3, 0x10001, 0x2, 0xd, 0xfffffffffffffffd, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 1.596447148s ago: executing program 9 (id=3753): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}]}) 1.59588971s ago: executing program 8 (id=3754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 1.430626026s ago: executing program 5 (id=3755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 1.306860777s ago: executing program 8 (id=3756): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x1, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.305311116s ago: executing program 0 (id=3757): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) r1 = timerfd_create(0x8, 0x0) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) timerfd_settime(r1, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000000100, 0x0, 0xfffffffffffffffd}) 1.284458981s ago: executing program 2 (id=3666): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 1.280637743s ago: executing program 9 (id=3758): userfaultfd(0x80801) r0 = fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) 1.154971914s ago: executing program 2 (id=3759): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.052452055s ago: executing program 0 (id=3760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.051197173s ago: executing program 8 (id=3770): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 938.18098ms ago: executing program 2 (id=3761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 904.436921ms ago: executing program 5 (id=3762): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 778.395707ms ago: executing program 0 (id=3763): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x18c, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 778.133204ms ago: executing program 9 (id=3764): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 661.327597ms ago: executing program 0 (id=3765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r4, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 598.144029ms ago: executing program 8 (id=3766): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80080) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707b, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x300, 0x0, 0x0, 0x0) 597.217557ms ago: executing program 5 (id=3767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000380)=0x4, 0x8) 507.164224ms ago: executing program 2 (id=3768): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x69}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f5, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 436.638963ms ago: executing program 0 (id=3769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 436.345308ms ago: executing program 9 (id=3771): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) sendfile(r1, r0, 0x0, 0x1000000000000a) 616.366µs ago: executing program 0 (id=3772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000123, 0x12022, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd80e, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=3773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7d}, {0x2, 0x0, 0x1}}}, @TCF_EM_META={0x8, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x1}}}]}}]}]}]}}]}, 0x6c}}, 0x20040054) kernel console output (not intermixed with test programs): led state 5 -11 0 [ 446.611202][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611281][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611344][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611406][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611470][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611531][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611743][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611805][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611867][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.611954][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612016][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612079][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612140][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612201][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612390][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612453][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612514][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612575][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612636][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612691][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612762][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612823][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.612978][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613039][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613100][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613191][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613253][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613314][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613379][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613440][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613627][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613691][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613759][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613821][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613882][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.613944][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614004][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614066][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614259][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614320][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614382][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614467][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614529][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614590][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614652][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614736][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614894][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.614979][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615040][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615102][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615163][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615225][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615286][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615347][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615534][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615596][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615657][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615749][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615811][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615873][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.615938][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.646567][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.646814][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.646878][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.646940][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647002][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647078][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647140][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647202][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647263][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647422][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647484][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647550][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647611][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647673][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647741][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647806][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.647868][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648059][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648147][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648212][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648273][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648335][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648396][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648458][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648520][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648714][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648783][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648845][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648907][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.648968][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649029][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649091][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649152][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649306][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649393][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649454][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649515][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649576][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649637][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649699][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.649774][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.729949][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730028][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730092][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730154][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730215][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730278][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730339][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730400][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730598][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730686][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730755][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730816][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730878][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.730941][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731002][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731065][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731219][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731284][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731346][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731408][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731469][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731531][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731592][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731654][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731845][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731932][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.731993][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732054][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732116][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732177][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732239][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732300][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732494][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732556][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732619][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732680][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732750][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732812][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732898][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.732959][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733105][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733191][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733252][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733313][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733374][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733436][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733498][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733559][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733758][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733821][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733883][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.733944][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734008][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734072][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734133][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734198][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734391][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734477][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734539][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734599][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734661][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734746][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734808][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.734869][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735016][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735078][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735139][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735201][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735263][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735324][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735385][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735450][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735644][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735736][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735798][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735860][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.735921][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818226][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818306][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818371][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818592][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818658][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818732][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818795][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818860][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818923][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.818985][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819074][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819217][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819279][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819366][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819430][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819492][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819553][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819615][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819677][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819878][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.819940][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820002][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820064][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820126][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820187][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820249][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820335][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820532][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820594][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820655][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820726][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820789][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820850][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820912][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.820970][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821116][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821178][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821240][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821302][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821363][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821425][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821490][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821576][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821776][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821838][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821900][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.821961][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822022][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822083][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822145][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822207][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822401][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822463][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822525][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822587][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822648][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822776][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822839][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.822926][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823072][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823133][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823194][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823256][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823318][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823378][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823440][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823501][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823699][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823778][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823840][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823902][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.823962][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824024][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824085][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824171][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824359][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824421][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824482][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824544][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824605][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824667][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824735][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824797][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.824953][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825015][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825077][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825139][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825200][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825262][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825347][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825433][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825630][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825692][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825759][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825821][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825882][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.825943][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.913895][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.913963][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914185][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914248][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914311][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914372][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914433][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914495][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914560][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914622][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914801][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914864][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914928][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.914989][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915053][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915145][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915207][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915269][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915462][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915524][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915586][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915647][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915715][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915777][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915839][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 446.915900][T12375] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 448.510226][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 448.510437][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 448.514687][T12395] ceph: No mds server is up or the cluster is laggy [ 448.515183][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 448.515382][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 450.884311][T12433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.437141][T12450] syz.3.2528 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 452.822398][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 453.008404][T12458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 453.613080][ T10] IPVS: starting estimator thread 0... [ 453.706449][T12475] IPVS: using max 7 ests per chain, 16800 per kthread [ 453.766355][ T1245] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 453.949412][ T1245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.949442][ T1245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.949477][ T1245] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 453.949502][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.998045][ T1245] usb 1-1: config 0 descriptor?? [ 454.198683][T12481] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96 [ 454.227476][ T1245] usbhid 1-1:0.0: can't add hid device: -71 [ 454.227602][ T1245] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 454.250760][ T1245] usb 1-1: USB disconnect, device number 27 [ 454.947861][T12500] binder: 12498:12500 ioctl 4018620d 0 returned -22 [ 455.004749][T12503] binder: 12498:12503 ioctl c018620c 0 returned -14 [ 455.706119][ T5925] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 455.876087][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 455.881968][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.882015][ T5925] usb 7-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 455.882035][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.943892][ T5925] usb 7-1: config 0 descriptor?? [ 456.174386][T12533] bond_slave_1: entered promiscuous mode [ 456.175624][T12533] veth0_to_bridge: entered promiscuous mode [ 456.176943][T12532] veth0_to_bridge: left promiscuous mode [ 456.177139][T12532] bond_slave_1: left promiscuous mode [ 456.395631][ T5925] logitech-hidpp-device 0003:046D:C091.0020: hidraw0: USB HID v0.05 Device [HID 046d:c091] on usb-dummy_hcd.6-1/input0 [ 456.581241][ T5925] usb 7-1: USB disconnect, device number 6 [ 459.121799][T12568] loop2: detected capacity change from 0 to 7 [ 459.125657][T12568] Dev loop2: unable to read RDB block 7 [ 459.125687][T12568] loop2: unable to read partition table [ 459.125823][T12568] loop2: partition table beyond EOD, truncated [ 459.125833][T12568] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.014717][T12584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.378960][T12645] loop3: detected capacity change from 0 to 1 [ 462.395922][T12645] Dev loop3: unable to read RDB block 1 [ 462.398747][T12645] loop3: unable to read partition table [ 462.399004][T12645] loop3: partition table beyond EOD, truncated [ 462.399021][T12645] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 462.427529][T12645] Dev loop3: unable to read RDB block 1 [ 462.427574][T12645] loop3: unable to read partition table [ 462.427825][T12645] loop3: partition table beyond EOD, truncated [ 462.776097][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 462.879920][T12659] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 462.955000][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.955026][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.955036][ T10] usb 4-1: Product: syz [ 462.955043][ T10] usb 4-1: Manufacturer: syz [ 462.955049][ T10] usb 4-1: SerialNumber: syz [ 464.473922][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 464.474526][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 464.475104][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 464.475171][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 464.538828][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 464.585392][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 464.609532][ T10] usb 4-1: USB disconnect, device number 23 [ 466.016222][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 466.146323][ T5912] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 466.166274][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 466.173980][ T5897] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 466.174006][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.174024][ T5897] usb 1-1: Product: syz [ 466.174036][ T5897] usb 1-1: Manufacturer: syz [ 466.174048][ T5897] usb 1-1: SerialNumber: syz [ 466.238866][ T5897] usb 1-1: config 0 descriptor?? [ 466.245093][ T5897] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 466.298985][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 466.304660][ T5912] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 466.304778][ T5912] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.304799][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.304821][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.304841][ T5912] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.305132][ T5912] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 466.305154][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.672121][ T5912] usb 2-1: usb_control_msg returned -32 [ 466.672386][ T5912] usbtmc 2-1:16.0: can't read capabilities [ 466.822954][T12737] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2649'. [ 466.823682][T12737] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2649'. [ 467.239191][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 467.239227][T12746] netlink: 'syz.3.2652': attribute type 20 has an invalid length. [ 467.239485][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 467.239505][T12746] netlink: 'syz.3.2652': attribute type 20 has an invalid length. [ 467.464297][ T5897] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 467.670255][ T5897] usb 1-1: USB disconnect, device number 28 [ 468.162657][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2659'. [ 468.961631][ T5911] usb 2-1: USB disconnect, device number 27 [ 469.122714][T12794] bond2: entered allmulticast mode [ 469.123316][T12794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.124359][T12794] bridge0: port 3(bond2) entered blocking state [ 469.144571][T12794] bridge0: port 3(bond2) entered disabled state [ 469.177820][T12794] bond2: entered promiscuous mode [ 469.178766][T12794] bridge0: port 3(bond2) entered blocking state [ 469.178919][T12794] bridge0: port 3(bond2) entered forwarding state [ 469.188687][T12801] ubi31: attaching mtd0 [ 469.188714][T12801] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 469.246225][T12124] Bluetooth: hci0: command 0x0406 tx timeout [ 469.308992][ T1320] bridge0: port 3(bond2) entered disabled state [ 470.596483][T12823] sctp: [Deprecated]: syz.1.2680 (pid 12823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.596483][T12823] Use struct sctp_sack_info instead [ 472.443764][T12864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.966192][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 473.136134][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 473.138241][ T10] usb 7-1: config 2 has an invalid interface number: 40 but max is 0 [ 473.138274][ T10] usb 7-1: config 2 has no interface number 0 [ 473.138304][ T10] usb 7-1: config 2 interface 40 has no altsetting 0 [ 473.140699][ T10] usb 7-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=48.22 [ 473.140723][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.140741][ T10] usb 7-1: Product: syz [ 473.140754][ T10] usb 7-1: Manufacturer: syz [ 473.140766][ T10] usb 7-1: SerialNumber: syz [ 473.455111][ T10] usb 7-1: USB disconnect, device number 7 [ 474.054120][T12893] netlink: 'syz.1.2709': attribute type 10 has an invalid length. [ 474.054150][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2709'. [ 474.167789][T12893] geneve0: entered promiscuous mode [ 474.168876][T12893] team0: Port device geneve0 added [ 474.290877][T12899] netem: change failed [ 474.888798][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2714'. [ 477.559897][ T1245] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 477.736314][ T1245] usb 2-1: Using ep0 maxpacket: 16 [ 477.740514][ T1245] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 477.740538][ T1245] usb 2-1: config 0 has no interface number 0 [ 477.740582][ T1245] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 477.740604][ T1245] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 477.740626][ T1245] usb 2-1: config 0 interface 41 has no altsetting 0 [ 477.743957][ T1245] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 477.743982][ T1245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.744000][ T1245] usb 2-1: Product: syz [ 477.744012][ T1245] usb 2-1: Manufacturer: syz [ 477.744025][ T1245] usb 2-1: SerialNumber: syz [ 477.751046][ T1245] usb 2-1: config 0 descriptor?? [ 477.752359][T12952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.752550][T12952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.965160][T12952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.965350][T12952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 478.002257][T12960] loop2: detected capacity change from 0 to 7 [ 478.003304][T12960] Dev loop2: unable to read RDB block 7 [ 478.003348][T12960] loop2: unable to read partition table [ 478.003579][T12960] loop2: partition table beyond EOD, truncated [ 478.003596][T12960] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.572982][ T1245] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 478.666209][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 478.836071][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 478.844680][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 478.844797][ T5925] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 478.844822][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 478.866283][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.866313][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 478.866330][ T5925] usb 4-1: SerialNumber: syz [ 478.919445][T12966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 478.985110][ T1245] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 478.985137][ T1245] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 478.985572][ T1245] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 479.023727][ T1245] usb 2-1: USB disconnect, device number 28 [ 479.483387][ T5925] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 479.498766][ T5925] usb 4-1: USB disconnect, device number 24 [ 479.776742][ T37] kauditd_printk_skb: 143 callbacks suppressed [ 479.776759][ T37] audit: type=1326 audit(1756171530.636:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12986 comm="syz.1.2743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc6bd1ebe9 code=0x0 [ 480.896151][ T1245] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 481.059300][ T1245] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.059326][ T1245] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.061017][ T1245] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 481.061043][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 481.061061][ T1245] usb 1-1: SerialNumber: syz [ 481.361291][ T1245] usb 1-1: 0:2 : does not exist [ 481.426203][ T1245] usb 1-1: USB disconnect, device number 29 [ 483.680963][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.680996][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.989516][T11688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.002186][T11688] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.014005][T11688] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.038061][T11688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.068899][T11688] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.082214][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.082248][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.157776][T13090] netlink: 'syz.5.2777': attribute type 6 has an invalid length. [ 485.428080][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2780'. [ 485.664904][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.664938][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.116182][ T5912] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 486.131544][T12124] Bluetooth: hci3: command tx timeout [ 486.266578][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 486.269326][ T5912] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.269355][ T5912] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.269386][ T5912] usb 7-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 486.269406][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.275104][ T5912] usb 7-1: config 0 descriptor?? [ 486.399126][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.399159][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.929225][T13126] netlink: 'syz.5.2792': attribute type 12 has an invalid length. [ 486.958458][ T5925] usb 7-1: USB disconnect, device number 8 [ 487.285863][ T57] bridge_slave_1: left allmulticast mode [ 487.285895][ T57] bridge_slave_1: left promiscuous mode [ 487.297825][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.395201][ T57] bridge_slave_0: left allmulticast mode [ 487.395234][ T57] bridge_slave_0: left promiscuous mode [ 487.395568][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.411261][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 487.411282][T13137] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2796'. [ 487.671702][T13142] overlayfs: failed to clone upperpath [ 487.906988][T13150] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2802'. [ 487.907509][T13150] unsupported nlmsg_type 40 [ 488.206256][T12124] Bluetooth: hci3: command tx timeout [ 488.978658][ T57] bond1 (unregistering): (slave gretap1): Releasing active interface [ 489.638878][ T57] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 489.638905][ T57] bridge1 (unregistering): left promiscuous mode [ 490.296253][T12124] Bluetooth: hci3: command tx timeout [ 490.666782][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.730562][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.770869][ T57] bond0 (unregistering): Released all slaves [ 491.630770][ T57] bond1 (unregistering): Released all slaves [ 492.366193][T12124] Bluetooth: hci3: command tx timeout [ 492.481719][ T57] bond2 (unregistering): Released all slaves [ 492.559809][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2803'. [ 492.689771][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2803'. [ 492.841737][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2803'. [ 492.856835][T13066] chnl_net:caif_netlink_parms(): no params data found [ 493.542047][T13181] bridge0: entered allmulticast mode [ 493.562946][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2815'. [ 493.605065][T13181] bond2: left promiscuous mode [ 493.605443][T13181] bridge0: port 3(bond2) entered disabled state [ 493.673250][T13189] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 493.673280][T13189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 493.673292][T13189] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 493.709907][T13181] bridge_slave_1: left allmulticast mode [ 493.709939][T13181] bridge_slave_1: left promiscuous mode [ 493.710345][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.776261][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 493.797630][T13181] bridge_slave_0: left allmulticast mode [ 493.797662][T13181] bridge_slave_0: left promiscuous mode [ 493.797947][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.926114][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 493.928948][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 493.928974][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 493.928995][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 493.929015][ T10] usb 1-1: config 1 has no interface number 0 [ 493.929059][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.929084][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 493.929131][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 493.929153][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.002827][T13181] bridge0 (unregistering): left allmulticast mode [ 494.031781][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 494.288003][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 494.615145][T13200] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2823'. [ 494.711976][ T10] usb 1-1: USB disconnect, device number 30 [ 494.714651][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 495.343106][T13066] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.343248][T13066] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.343495][T13066] bridge_slave_0: entered allmulticast mode [ 495.352150][T13066] bridge_slave_0: entered promiscuous mode [ 495.563860][T13218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 495.678625][T13222] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2832'. [ 495.725010][T13066] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.725166][T13066] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.725412][T13066] bridge_slave_1: entered allmulticast mode [ 495.729681][T13066] bridge_slave_1: entered promiscuous mode [ 495.953726][T13218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.025826][T13218] bond0: (slave rose0): Enslaving as an active interface with an up link [ 496.706489][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 496.847442][ T57] hsr_slave_0: left promiscuous mode [ 496.894680][ T57] hsr_slave_1: left promiscuous mode [ 496.895594][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.895621][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.093400][ T57] veth1_macvtap: left promiscuous mode [ 497.093751][ T57] veth1_vlan: left promiscuous mode [ 497.093964][ T57] veth0_vlan: left promiscuous mode [ 499.246314][ T5897] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 499.426360][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 499.444313][ T5897] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 499.444340][ T5897] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 499.444358][ T5897] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 499.444424][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.444443][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 499.444464][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 499.444504][ T5897] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 499.444523][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.452868][ T5897] usb 7-1: config 0 descriptor?? [ 499.743398][T13258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.743814][T13258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.745393][ T5897] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 499.758267][ T5897] usb 7-1: USB disconnect, device number 9 [ 499.820681][ T5897] usblp0: removed [ 500.297933][ T57] team0 (unregistering): Port device team_slave_1 removed [ 500.556703][ T57] team0 (unregistering): Port device team_slave_0 removed [ 501.566175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.574567][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.574643][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.487632][T13066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.659600][T13066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.662167][T13066] team0: Port device team_slave_0 added [ 504.677165][T13066] team0: Port device team_slave_1 added [ 505.273659][T13066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.273675][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.273698][T13066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.281075][T13066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.281092][T13066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.281118][T13066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.166202][ T37] audit: type=1326 audit(1756171556.956:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.166901][ T37] audit: type=1326 audit(1756171557.026:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.166950][ T37] audit: type=1326 audit(1756171557.026:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.166989][ T37] audit: type=1326 audit(1756171557.026:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.176839][ T37] audit: type=1326 audit(1756171557.036:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.176888][ T37] audit: type=1326 audit(1756171557.036:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.176927][ T37] audit: type=1326 audit(1756171557.036:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.183813][ T37] audit: type=1326 audit(1756171557.036:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.183861][ T37] audit: type=1326 audit(1756171557.036:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.183900][ T37] audit: type=1326 audit(1756171557.036:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13333 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35c34ebe9 code=0x7ffc0000 [ 506.280038][T13066] hsr_slave_0: entered promiscuous mode [ 506.289832][T13066] hsr_slave_1: entered promiscuous mode [ 506.293472][T13066] debugfs: 'hsr0' already exists in 'hsr' [ 506.293504][T13066] Cannot create hsr debugfs directory [ 508.813222][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.523295][T13066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 509.637275][T13066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 509.840572][T13066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 509.942843][T13066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 510.369882][T13066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.453777][T13066] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.471441][ T1536] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.471634][ T1536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.493332][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.493725][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.886166][ T5911] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 511.038806][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.038837][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.038874][ T5911] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 511.038894][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.096254][ T5911] usb 7-1: config 0 descriptor?? [ 511.576406][ T5911] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 511.722577][T13066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.551673][ T5911] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 512.551727][ T5911] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 512.555552][ T5911] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -71 [ 512.589741][ T5911] usb 7-1: USB disconnect, device number 10 [ 513.273204][T13066] veth0_vlan: entered promiscuous mode [ 513.349934][T13066] veth1_vlan: entered promiscuous mode [ 513.588149][T13066] veth0_macvtap: entered promiscuous mode [ 513.622799][T13066] veth1_macvtap: entered promiscuous mode [ 513.737614][T13066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.800418][T13066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.866595][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.866867][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.867453][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.867719][ T67] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.528244][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 514.550335][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.550355][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.658586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.658605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.826798][T13476] netlink: 'syz.1.2926': attribute type 20 has an invalid length. [ 514.850911][T13475] loop2: detected capacity change from 0 to 7 [ 514.887477][T13475] Dev loop2: unable to read RDB block 7 [ 514.887530][T13475] loop2: unable to read partition table [ 514.887777][T13475] loop2: partition table beyond EOD, truncated [ 514.887791][T13475] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 515.987630][T13499] netlink: 552 bytes leftover after parsing attributes in process `syz.0.2935'. [ 516.028230][T13499] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 516.995674][T13525] loop2: detected capacity change from 0 to 7 [ 517.010235][T13525] loop2: p1 [ 517.010269][T13525] loop2: partition table partially beyond EOD, truncated [ 517.010383][T13525] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 517.036179][T13526] input: syz0 as /devices/virtual/input/input35 [ 517.436234][ T5911] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 517.586247][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 517.588768][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.588797][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.588832][ T5911] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 517.588853][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.646457][ T5911] usb 7-1: config 0 descriptor?? [ 518.101136][ T5911] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 518.323145][ T5911] usb 7-1: USB disconnect, device number 11 [ 518.341367][T13568] loop6: detected capacity change from 0 to 7 [ 518.361801][T13568] Dev loop6: unable to read RDB block 7 [ 518.361832][T13568] loop6: AHDI p1 p2 [ 518.361860][T13568] loop6: partition table partially beyond EOD, truncated [ 518.361953][T13568] loop6: p1 start 926365495 is beyond EOD, truncated [ 519.754330][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2973'. [ 521.419876][T13615] bond0: (slave bridge_slave_1): Enslaving as a backup interface with an up link [ 522.192286][T11688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.218859][T11688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.222718][T11688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.225504][T11688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.227681][T11688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.337232][T13643] overlayfs: failed to clone upperpath [ 523.885564][T13676] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž [ 524.164804][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.368150][T12124] Bluetooth: hci4: command tx timeout [ 524.373832][T13637] chnl_net:caif_netlink_parms(): no params data found [ 524.551164][T11688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 524.555569][T11688] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 524.565656][T11688] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 524.580109][T11688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 524.583411][T11688] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 524.808189][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.384009][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.767500][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3021'. [ 526.086943][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.132829][T13637] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.133230][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.134101][T13637] bridge_slave_0: entered allmulticast mode [ 526.178495][T13637] bridge_slave_0: entered promiscuous mode [ 526.184793][T13637] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.185500][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.185745][T13637] bridge_slave_1: entered allmulticast mode [ 526.248125][T13637] bridge_slave_1: entered promiscuous mode [ 526.446606][T12124] Bluetooth: hci4: command tx timeout [ 526.556103][ T49] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 526.680503][T13637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.686270][T12124] Bluetooth: hci3: command tx timeout [ 526.714551][T13637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.726083][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 526.732278][ T49] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 526.732301][ T49] usb 1-1: config 0 has no interface number 0 [ 526.732349][ T49] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 526.732371][ T49] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 526.732391][ T49] usb 1-1: config 0 interface 41 has no altsetting 0 [ 526.738665][ T49] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 526.738687][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.738697][ T49] usb 1-1: Product: syz [ 526.738703][ T49] usb 1-1: Manufacturer: syz [ 526.738711][ T49] usb 1-1: SerialNumber: syz [ 526.766547][ T49] usb 1-1: config 0 descriptor?? [ 526.843711][T13729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 526.843821][T13729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.115206][T13729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.115338][T13729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 527.622932][T13637] team0: Port device team_slave_0 added [ 527.664980][T13637] team0: Port device team_slave_1 added [ 527.720802][ T49] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 528.123441][ T49] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 528.123467][ T49] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 528.123713][ T49] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 528.170440][ T49] usb 1-1: USB disconnect, device number 31 [ 528.188565][T13637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.188582][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.188607][T13637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.347851][T13637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.347868][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.347892][T13637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.526167][T12124] Bluetooth: hci4: command tx timeout [ 528.741260][ T57] bridge_slave_1: left allmulticast mode [ 528.741291][ T57] bridge_slave_1: left promiscuous mode [ 528.741543][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.766371][T12124] Bluetooth: hci3: command tx timeout [ 528.867925][ T57] bridge_slave_0: left allmulticast mode [ 528.867957][ T57] bridge_slave_0: left promiscuous mode [ 528.868226][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.496249][ T49] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 529.686151][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 529.688512][ T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 529.693170][ T49] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 529.693199][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.693217][ T49] usb 2-1: Product: syz [ 529.693229][ T49] usb 2-1: Manufacturer: syz [ 529.693242][ T49] usb 2-1: SerialNumber: syz [ 529.730750][ T49] usb 2-1: config 0 descriptor?? [ 529.759890][ T49] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 529.761646][ T49] usb 2-1: Detected FT232R [ 529.968368][ T49] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 530.186472][ T49] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 530.409760][ T990] usb 2-1: USB disconnect, device number 29 [ 530.586412][ T990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 530.586722][ T990] ftdi_sio 2-1:0.0: device disconnected [ 530.634135][T12124] Bluetooth: hci4: command tx timeout [ 530.900911][T12124] Bluetooth: hci3: command tx timeout [ 532.226864][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.305046][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.375999][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.613473][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.726691][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.826253][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.937205][T12124] Bluetooth: hci3: command tx timeout [ 533.327408][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.490051][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.531959][ T57] bond0 (unregistering): Released all slaves [ 533.940123][T13637] hsr_slave_0: entered promiscuous mode [ 533.941280][T13637] hsr_slave_1: entered promiscuous mode [ 533.942106][T13637] debugfs: 'hsr0' already exists in 'hsr' [ 533.942123][T13637] Cannot create hsr debugfs directory [ 534.337111][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.403530][T13821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3059'. [ 535.009781][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.096030][T13468] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 535.279433][T13468] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.279458][T13468] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.281508][T13468] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.281533][T13468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.281550][T13468] usb 2-1: SerialNumber: syz [ 535.372427][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.551173][T13468] usb 2-1: 0:2 : does not exist [ 535.551264][T13468] usb 2-1: unit 255 not found! [ 535.583855][T13468] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 535.617181][T13468] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 535.658119][T13468] usb 2-1: USB disconnect, device number 30 [ 536.076360][ T57] hsr_slave_0: left promiscuous mode [ 536.116797][ T57] hsr_slave_1: left promiscuous mode [ 536.117739][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.117766][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.188659][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.188690][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.189812][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3072'. [ 536.383605][ T57] veth1_macvtap: left promiscuous mode [ 536.383742][ T57] veth0_macvtap: left promiscuous mode [ 536.384013][ T57] veth1_vlan: left promiscuous mode [ 536.384189][ T57] veth0_vlan: left promiscuous mode [ 537.109162][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.197207][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.320804][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.391886][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.609928][ T57] team0 (unregistering): Port device team_slave_1 removed [ 539.835082][ T57] team0 (unregistering): Port device team_slave_0 removed [ 542.704548][T13853] bridge_slave_1: left allmulticast mode [ 542.704581][T13853] bridge_slave_1: left promiscuous mode [ 542.704996][T13853] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.756915][T13853] bridge_slave_0: left allmulticast mode [ 542.756937][T13853] bridge_slave_0: left promiscuous mode [ 542.757143][T13853] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.077067][T13862] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-all": -EINTR [ 543.397393][T13690] chnl_net:caif_netlink_parms(): no params data found [ 543.559212][ T5912] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 543.710793][ T5912] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 543.710825][ T5912] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.710860][ T5912] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 543.723046][ T5912] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.723074][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.723092][ T5912] usb 1-1: Product: syz [ 543.723105][ T5912] usb 1-1: Manufacturer: syz [ 543.723117][ T5912] usb 1-1: SerialNumber: syz [ 544.227756][ T5912] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 544.749593][T13690] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.749905][T13690] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.750314][T13690] bridge_slave_0: entered allmulticast mode [ 544.754965][T13690] bridge_slave_0: entered promiscuous mode [ 544.819038][T13690] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.819181][T13690] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.819417][T13690] bridge_slave_1: entered allmulticast mode [ 544.825840][T13690] bridge_slave_1: entered promiscuous mode [ 544.966119][T13914] overlayfs: failed to clone upperpath [ 545.038052][ T5912] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 545.090229][ T5912] usb 1-1: USB disconnect, device number 32 [ 545.330011][T13690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.335278][T13690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.558659][T13690] team0: Port device team_slave_0 added [ 545.565576][T13690] team0: Port device team_slave_1 added [ 545.673148][T13637] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 546.072469][T13637] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 546.137905][T13690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.137920][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.137944][T13690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.139459][T13637] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 546.230267][T13690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.230284][T13690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.230308][T13690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.557585][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.763610][T13637] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 547.173076][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.244754][T13948] pim6reg: entered allmulticast mode [ 547.280289][T13949] pim6reg: left allmulticast mode [ 547.706436][ T5925] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 547.858815][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.858839][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.861933][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.861957][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.861974][ T5925] usb 2-1: Product: syz [ 547.861986][ T5925] usb 2-1: Manufacturer: syz [ 547.861999][ T5925] usb 2-1: SerialNumber: syz [ 547.936654][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.032936][T13690] hsr_slave_0: entered promiscuous mode [ 548.034147][T13690] hsr_slave_1: entered promiscuous mode [ 548.034972][T13690] debugfs: 'hsr0' already exists in 'hsr' [ 548.034992][T13690] Cannot create hsr debugfs directory [ 548.125439][ T5912] IPVS: starting estimator thread 0... [ 548.133205][ T5925] usb 2-1: 0:2 : does not exist [ 548.151391][ T5925] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 548.180123][ T5925] usb 2-1: USB disconnect, device number 31 [ 548.216271][T13969] IPVS: using max 7 ests per chain, 16800 per kthread [ 548.437111][ T57] bond0: (slave netdevsim0): Releasing backup interface [ 548.534468][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.918465][T13995] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 550.906203][ T5911] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 551.096199][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 551.098167][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.098195][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.098231][ T5911] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.098251][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.103382][ T5911] usb 1-1: config 0 descriptor?? [ 551.157134][ T5911] hub 1-1:0.0: USB hub found [ 551.336123][ T5911] hub 1-1:0.0: 1 port detected [ 551.971059][ T5911] hub 1-1:0.0: activate --> -90 [ 552.381164][ T5911] usb 1-1-port1: config error [ 552.381345][T13468] usb 1-1: USB disconnect, device number 33 [ 553.131192][T12124] Bluetooth: hci0: Unknown advertising packet type: 0x72 [ 553.131227][T12124] Bluetooth: hci0: Malformed LE Event: 0x0d [ 553.888428][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.956466][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.991242][ T57] bond0 (unregistering): Released all slaves [ 555.037121][ T57] bond1 (unregistering): Released all slaves [ 555.928584][ T57] bond2 (unregistering): Released all slaves [ 556.162720][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.942486][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 556.942525][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3154'. [ 557.659939][T13637] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.773958][T13690] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 557.815535][T13690] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 558.098306][ T57] hsr_slave_0: left promiscuous mode [ 558.137650][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 558.142315][ T57] hsr_slave_1: left promiscuous mode [ 558.144522][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.144551][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.210503][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.210533][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.384834][ T57] veth1_macvtap: left promiscuous mode [ 558.384969][ T57] veth0_macvtap: left promiscuous mode [ 558.386537][ T57] veth1_vlan: left promiscuous mode [ 558.394124][ T57] veth0_vlan: left promiscuous mode [ 558.972111][T14088] sctp: [Deprecated]: syz.5.3167 (pid 14088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.972111][T14088] Use struct sctp_sack_info instead [ 559.676115][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 559.826266][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 559.836174][ T31] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 559.836202][ T31] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 559.836222][ T31] usb 2-1: Product: syz [ 559.836235][ T31] usb 2-1: Manufacturer: syz [ 559.836248][ T31] usb 2-1: SerialNumber: syz [ 559.860512][ T31] usb 2-1: config 0 descriptor?? [ 560.119091][ T31] usb 2-1: USB disconnect, device number 32 [ 562.240908][ T57] team0 (unregistering): Port device team_slave_1 removed [ 562.597666][ T57] team0 (unregistering): Port device team_slave_0 removed [ 563.052623][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.052673][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.816294][ T990] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 566.880767][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.881080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.882248][T13690] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 566.963932][T14077] erspan0: entered promiscuous mode [ 566.964067][T14077] macvtap1: entered promiscuous mode [ 566.964169][T14077] macvtap1: entered allmulticast mode [ 566.964177][T14077] erspan0: entered allmulticast mode [ 566.989892][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 566.989921][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 566.992850][ T990] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.992874][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.992891][ T990] usb 2-1: Product: syz [ 566.992903][ T990] usb 2-1: Manufacturer: syz [ 566.992917][ T990] usb 2-1: SerialNumber: syz [ 567.054429][T14119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 567.076934][T14078] erspan0: left allmulticast mode [ 567.077126][T14078] erspan0: left promiscuous mode [ 567.153498][T13690] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 567.262065][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.262247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.346170][T14129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3180'. [ 567.359695][T14128] vlan2: entered promiscuous mode [ 567.359717][T14128] team0: entered promiscuous mode [ 567.359729][T14128] team_slave_0: entered promiscuous mode [ 567.359981][T14128] team_slave_1: entered promiscuous mode [ 567.360418][T14128] vlan2: entered allmulticast mode [ 567.360431][T14128] team0: entered allmulticast mode [ 567.360441][T14128] team_slave_0: entered allmulticast mode [ 567.360460][T14128] team_slave_1: entered allmulticast mode [ 567.380767][T14128] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 567.397566][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3180'. [ 568.014022][T14136] IPv6: addrconf: prefix option has invalid lifetime [ 568.122728][ T990] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 568.122756][ T990] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 568.424270][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.580599][ T990] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 568.603408][ T990] usb 2-1: USB disconnect, device number 33 [ 568.605643][ T990] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 568.801856][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.849086][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.849322][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.879961][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.880217][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.038066][T13637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.763907][T13690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.002948][T13637] veth0_vlan: entered promiscuous mode [ 570.022211][T13637] veth1_vlan: entered promiscuous mode [ 570.214920][T13637] veth0_macvtap: entered promiscuous mode [ 570.231862][T13637] veth1_macvtap: entered promiscuous mode [ 570.310511][T13637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.358341][T13637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.400164][ T67] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.402151][ T67] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.402208][ T67] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.402243][ T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.078007][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.078027][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.081918][T13690] veth0_vlan: entered promiscuous mode [ 571.189528][T13690] veth1_vlan: entered promiscuous mode [ 571.243205][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.243224][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.453103][T13690] veth0_macvtap: entered promiscuous mode [ 571.480949][T13690] veth1_macvtap: entered promiscuous mode [ 571.528637][T13690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.585343][T13690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.633504][ T1536] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.640252][ T1536] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.640299][ T1536] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.640332][ T1536] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.741581][T14207] netlink: 'syz.8.2980': attribute type 4 has an invalid length. [ 571.741602][T14207] netlink: 14345 bytes leftover after parsing attributes in process `syz.8.2980'. [ 571.768826][T14207] netlink: 'syz.8.2980': attribute type 4 has an invalid length. [ 571.768847][T14207] netlink: 14345 bytes leftover after parsing attributes in process `syz.8.2980'. [ 572.168711][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.168768][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.882021][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.882040][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.176401][T13468] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 574.326049][T13468] usb 10-1: Using ep0 maxpacket: 32 [ 574.328511][T13468] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 574.328542][T13468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 574.328565][T13468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 574.328585][T13468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 574.328608][T13468] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 574.331691][T13468] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 574.331717][T13468] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.331735][T13468] usb 10-1: Product: syz [ 574.331747][T13468] usb 10-1: Manufacturer: syz [ 574.331759][T13468] usb 10-1: SerialNumber: syz [ 574.430494][T13468] usb 10-1: config 0 descriptor?? [ 574.684191][T14273] loop2: detected capacity change from 0 to 7 [ 574.734081][T14273] Dev loop2: unable to read RDB block 7 [ 574.734186][T14273] loop2: unable to read partition table [ 574.734537][T14273] loop2: partition table beyond EOD, truncated [ 574.734556][T14273] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 574.859820][T13468] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 574.859870][T13468] input input36: Device does not respond to id packet M [ 574.860558][T13468] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 574.860601][T13468] input input36: Device does not respond to id packet P [ 574.861905][T13468] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 574.861949][T13468] input input36: Device does not respond to id packet B [ 574.862975][T13468] input input36: Device does not respond to id packet N [ 575.064524][T13468] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 575.066988][T13468] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 575.080374][T13468] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 575.080861][T13468] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 575.084253][T13468] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input36 [ 575.147169][T13468] usb 10-1: USB disconnect, device number 2 [ 575.941125][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 576.206552][ T5911] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 576.358789][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 576.371986][ T5911] usb 9-1: config 0 has an invalid interface number: 79 but max is 0 [ 576.372013][ T5911] usb 9-1: config 0 has no interface number 0 [ 576.384834][ T5911] usb 9-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 576.384864][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.384882][ T5911] usb 9-1: Product: syz [ 576.384894][ T5911] usb 9-1: Manufacturer: syz [ 576.384907][ T5911] usb 9-1: SerialNumber: syz [ 576.426832][ T5911] usb 9-1: config 0 descriptor?? [ 576.457914][ T5911] hub 9-1:0.79: bad descriptor, ignoring hub [ 576.457953][ T5911] hub 9-1:0.79: probe with driver hub failed with error -5 [ 576.459270][ T5911] ftdi_sio 9-1:0.79: FTDI USB Serial Device converter detected [ 576.460943][ T5911] ftdi_sio ttyUSB0: unknown device type: 0x676 [ 576.779866][ T5897] usb 9-1: USB disconnect, device number 2 [ 576.782808][ T5897] ftdi_sio 9-1:0.79: device disconnected [ 577.027983][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3242'. [ 577.795240][T14335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 578.199202][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3255'. [ 578.421208][T14351] syz_tun: entered allmulticast mode [ 578.445196][T14350] syz_tun: left allmulticast mode [ 578.779055][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 578.779071][ T37] audit: type=1326 audit(1756171629.636:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14360 comm="syz.1.3261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc6bd1ebe9 code=0x0 [ 579.608313][T14389] vlan2: entered promiscuous mode [ 579.608333][T14389] team0: entered promiscuous mode [ 579.608765][T14389] vlan2: entered allmulticast mode [ 579.610045][T14389] team0: entered allmulticast mode [ 579.610059][T14389] geneve0: entered allmulticast mode [ 579.659638][T14389] : (slave vlan2): Enslaving as an active interface with an up link [ 579.969694][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 580.636148][ T5897] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 580.664443][T14411] veth0_virt_wifi: renamed from veth0_vlan [ 580.786181][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 580.789557][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 580.789581][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 580.789604][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.789627][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.794261][ T5897] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 580.794287][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.794305][ T5897] usb 1-1: Product: syz [ 580.794318][ T5897] usb 1-1: Manufacturer: syz [ 580.794331][ T5897] usb 1-1: SerialNumber: syz [ 580.886648][ T5897] usb 1-1: config 0 descriptor?? [ 581.087299][ T5897] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 581.207619][ T5897] imon:send_packet: packet tx failed (-71) [ 581.226161][ T5897] imon 1-1:0.0: panel buttons/knobs setup failed [ 581.478879][ T5897] rc_core: IR keymap rc-imon-pad not found [ 581.478900][ T5897] Registered IR keymap rc-empty [ 581.479096][ T5897] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 581.479112][ T5897] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 581.483302][ T5897] imon:send_packet: packet tx failed (-71) [ 581.513519][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3287'. [ 581.532286][ T5897] imon 1-1:0.0: remote input dev register failed [ 581.532703][ T5897] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 581.564827][ T1536] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.565190][ T1536] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.565228][ T1536] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.565261][ T1536] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.573539][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3287'. [ 581.849145][ T5897] imon 1-1:0.0: unable to initialize intf0, err 0 [ 581.849165][ T5897] imon:imon_probe: failed to initialize context! [ 581.849177][ T5897] imon 1-1:0.0: unable to register, err -19 [ 581.854696][ T5897] usb 1-1: USB disconnect, device number 34 [ 584.454964][T14476] overlayfs: failed to clone upperpath [ 584.686367][T12124] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 585.026444][T14483] ALSA: seq fatal error: cannot create timer (-16) [ 585.226027][T13468] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 585.386373][T13468] usb 10-1: Using ep0 maxpacket: 8 [ 585.399825][T13468] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 585.399853][T13468] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.399870][T13468] usb 10-1: Product: syz [ 585.399882][T13468] usb 10-1: Manufacturer: syz [ 585.399894][T13468] usb 10-1: SerialNumber: syz [ 585.409303][T13468] usb 10-1: config 0 descriptor?? [ 585.629041][T13468] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 586.440655][T13468] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 586.466974][T13468] usb 10-1: USB disconnect, device number 3 [ 587.806195][T13468] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 587.975611][T13468] usb 1-1: unable to get BOS descriptor or descriptor too short [ 587.976361][T13468] usb 1-1: not running at top speed; connect to a high speed hub [ 587.977501][T13468] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 587.989236][T13468] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.989262][T13468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.989281][T13468] usb 1-1: Product: syz [ 587.989293][T13468] usb 1-1: Manufacturer: syz [ 587.989306][T13468] usb 1-1: SerialNumber: syz [ 588.219574][T14551] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.827584][T13468] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 588.838670][T13468] cdc_ncm 1-1:1.0: bind() failure [ 588.905506][T13468] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 588.905555][T13468] cdc_ncm 1-1:1.1: bind() failure [ 588.966876][T13468] usb 1-1: USB disconnect, device number 35 [ 590.468169][T14581] overlayfs: failed to clone upperpath [ 590.992784][T14603] GUP no longer grows the stack in syz.9.3348 (14603): 200000004000-20000000a000 (200000002000) [ 590.992819][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.9.3348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 590.992848][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.992859][T14603] Call Trace: [ 590.992867][T14603] [ 590.992876][T14603] dump_stack_lvl+0x189/0x250 [ 590.992910][T14603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.992935][T14603] ? __pfx__printk+0x10/0x10 [ 590.992951][T14603] ? find_vma+0xe7/0x160 [ 590.992988][T14603] __get_user_pages+0x237e/0x2b60 [ 590.993050][T14603] get_user_pages_remote+0x2f1/0xad0 [ 590.993073][T14603] ? __pfx_mtree_load+0x10/0x10 [ 590.993102][T14603] ? __pfx_get_user_pages_remote+0x10/0x10 [ 590.993133][T14603] ? __access_remote_vm+0x367/0x7d0 [ 590.993163][T14603] __access_remote_vm+0x211/0x7d0 [ 590.993198][T14603] ? __pfx___access_remote_vm+0x10/0x10 [ 590.993219][T14603] ? set_page_refcounted+0xa0/0x1e0 [ 590.993254][T14603] ? alloc_pages_noprof+0xe4/0x1e0 [ 590.993283][T14603] proc_pid_cmdline_read+0x433/0x810 [ 590.993306][T14603] ? __asan_memset+0x22/0x50 [ 590.993333][T14603] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 590.993362][T14603] ? rw_verify_area+0x2ac/0x4e0 [ 590.993388][T14603] vfs_readv+0x5b3/0x850 [ 590.993412][T14603] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 590.993439][T14603] ? __pfx_vfs_readv+0x10/0x10 [ 590.993480][T14603] ? __fget_files+0x2a/0x420 [ 590.993507][T14603] ? __fget_files+0x3a6/0x420 [ 590.993529][T14603] ? __fget_files+0x2a/0x420 [ 590.993561][T14603] __x64_sys_preadv+0x19a/0x2a0 [ 590.993587][T14603] ? __pfx___x64_sys_preadv+0x10/0x10 [ 590.993607][T14603] ? rcu_is_watching+0x15/0xb0 [ 590.993637][T14603] ? do_syscall_64+0xbe/0x3b0 [ 590.993664][T14603] do_syscall_64+0xfa/0x3b0 [ 590.993685][T14603] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.993712][T14603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.993730][T14603] ? clear_bhb_loop+0x60/0xb0 [ 590.993751][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.993775][T14603] RIP: 0033:0x7fc82b23ebe9 [ 590.993792][T14603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.993809][T14603] RSP: 002b:00007fc82949e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 590.993828][T14603] RAX: ffffffffffffffda RBX: 00007fc82b465fa0 RCX: 00007fc82b23ebe9 [ 590.993842][T14603] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 590.993855][T14603] RBP: 00007fc82b2c1e19 R08: 0000000021000008 R09: 0000000000000000 [ 590.993867][T14603] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 590.993879][T14603] R13: 00007fc82b466038 R14: 00007fc82b465fa0 R15: 00007ffec758bbb8 [ 590.993912][T14603] [ 591.016107][T13468] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 591.404010][T13468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.404042][T13468] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.404079][T13468] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.404100][T13468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.448472][T13468] usb 2-1: config 0 descriptor?? [ 592.736530][T13468] uclogic 0003:256C:006D.0024: interface is invalid, ignoring [ 592.952555][ T5911] usb 2-1: USB disconnect, device number 34 [ 594.186791][T14638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.169266][T14663] Invalid ELF header magic: != ELF [ 595.206657][ T5849] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 595.379438][ T5849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.379464][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.381060][ T5849] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 595.381085][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 595.381102][ T5849] usb 2-1: SerialNumber: syz [ 595.631900][ T5849] usb 2-1: 0:2 : does not exist [ 595.661948][T14670] openvswitch: netlink: IPv4 tun info is not correct [ 595.692951][ T5849] usb 2-1: USB disconnect, device number 35 [ 596.392086][T14682] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 596.392108][T14682] netlink: 'syz.0.3381': attribute type 4 has an invalid length. [ 596.392120][T14682] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3381'. [ 596.724821][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 597.040688][T14697] netlink: 'syz.9.3386': attribute type 10 has an invalid length. [ 597.767233][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 597.781679][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.782857][T14697] bridge_slave_1: left allmulticast mode [ 597.782883][T14697] bridge_slave_1: left promiscuous mode [ 597.783126][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.964251][T14697] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 598.186506][T14721] syzkaller1: entered promiscuous mode [ 598.186534][T14721] syzkaller1: entered allmulticast mode [ 598.488403][ T5911] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 598.636810][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 598.652707][ T5911] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 598.652733][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.652749][ T5911] usb 1-1: Product: syz [ 598.652763][ T5911] usb 1-1: Manufacturer: syz [ 598.652775][ T5911] usb 1-1: SerialNumber: syz [ 598.700454][ T5911] usb 1-1: config 0 descriptor?? [ 598.758478][T14737] netlink: 'syz.9.3402': attribute type 29 has an invalid length. [ 598.759718][T14737] netlink: 'syz.9.3402': attribute type 29 has an invalid length. [ 598.760542][T14737] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3402'. [ 598.903632][ T5911] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 599.117376][ T5911] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 599.123011][ T5911] usb 1-1: USB disconnect, device number 36 [ 599.377237][T14745] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 599.377262][T14745] netlink: 'syz.8.3406': attribute type 3 has an invalid length. [ 599.636227][T14752] capability: warning: `syz.8.3408' uses 32-bit capabilities (legacy support in use) [ 600.087883][T14763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 600.087910][T14763] overlayfs: failed to set xattr on upper [ 600.087916][T14763] overlayfs: ...falling back to redirect_dir=nofollow. [ 600.087924][T14763] overlayfs: ...falling back to uuid=null. [ 601.708021][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3423'. [ 602.426701][ T43] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.426732][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.431651][ T43] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.431681][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.431719][ T43] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.431741][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.431774][ T43] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.431796][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.202191][T14829] netlink: 'syz.8.3439': attribute type 1 has an invalid length. [ 603.326560][ T5849] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 603.361017][T14835] netlink: 'syz.0.3440': attribute type 2 has an invalid length. [ 603.361037][T14835] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3440'. [ 603.361064][T14835] nbd: must specify at least one socket [ 603.394850][T14829] bond1: (slave veth3): Enslaving as an active interface with a down link [ 603.488453][ T5849] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 603.488480][ T5849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.488498][ T5849] usb 2-1: config 0 has no interface number 0 [ 603.488529][ T5849] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 603.488584][ T5849] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 603.492728][ T5849] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 603.492757][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.492775][ T5849] usb 2-1: Product: syz [ 603.492787][ T5849] usb 2-1: Manufacturer: syz [ 603.492800][ T5849] usb 2-1: SerialNumber: syz [ 603.516993][ T5849] usb 2-1: config 0 descriptor?? [ 603.541918][ T5849] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 603.753805][ T5849] usb 2-1: USB disconnect, device number 36 [ 605.916310][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 606.076060][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 606.098010][T14901] input: syz1 as /devices/virtual/input/input39 [ 606.099861][ T31] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 606.099888][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.099906][ T31] usb 2-1: Product: syz [ 606.099918][ T31] usb 2-1: Manufacturer: syz [ 606.099930][ T31] usb 2-1: SerialNumber: syz [ 606.146180][ T31] usb 2-1: config 0 descriptor?? [ 606.151576][ T31] gspca_main: se401-2.14.0 probing 047d:5003 [ 606.569332][ T31] gspca_se401: Too many frame sizes [ 606.706581][ T5912] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 606.781474][ T5925] usb 2-1: USB disconnect, device number 37 [ 606.876087][ T5912] usb 9-1: Using ep0 maxpacket: 32 [ 606.878584][ T5912] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 606.878608][ T5912] usb 9-1: config 0 has no interface number 0 [ 606.881910][ T5912] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 606.881935][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.881953][ T5912] usb 9-1: Product: syz [ 606.881965][ T5912] usb 9-1: Manufacturer: syz [ 606.881977][ T5912] usb 9-1: SerialNumber: syz [ 606.946858][ T5912] usb 9-1: config 0 descriptor?? [ 606.952724][ T5912] smsc95xx v2.0.0 [ 607.133750][T14918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.369953][ T5912] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 607.369982][ T5912] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 608.199862][ T5912] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 608.200180][ T5912] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 608.283161][ T5912] usb 9-1: USB disconnect, device number 3 [ 608.675447][T14954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.986843][T14957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.046910][T14957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.086881][T14957] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 610.111523][T14957] bond0 (unregistering): Released all slaves [ 610.200768][T14965] 8021q: adding VLAN 0 to HW filter on device  [ 610.202661][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.298995][T14965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.005770][T14995] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3498'. [ 611.028575][T14995] batadv1: entered promiscuous mode [ 611.028603][T14995] batadv1: entered allmulticast mode [ 611.084100][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3500'. [ 611.949640][T15000] netlink: 'syz.8.3501': attribute type 4 has an invalid length. [ 612.787521][ T37] audit: type=1326 audit(1756171919.647:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.787563][ T37] audit: type=1326 audit(1756171919.647:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.790334][ T37] audit: type=1326 audit(1756171919.647:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.790380][ T37] audit: type=1326 audit(1756171919.647:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.790419][ T37] audit: type=1326 audit(1756171919.647:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.790459][ T37] audit: type=1326 audit(1756171919.647:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.790567][ T37] audit: type=1326 audit(1756171919.647:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.792792][ T37] audit: type=1326 audit(1756171919.647:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.792822][ T37] audit: type=1326 audit(1756171919.647:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 612.792843][ T37] audit: type=1326 audit(1756171919.647:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15031 comm="syz.8.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f0b52ebe9 code=0x7ffc0000 [ 614.473582][T15052] kvm: apic: phys broadcast and lowest prio [ 615.036750][T15063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.037714][T15063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.039299][T15063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.039922][T15063] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 615.220522][T15063] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 615.311696][T15063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.311791][T15063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 615.447221][T15063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 615.772912][T15097] overlayfs: failed to clone upperpath [ 615.925631][T15106] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 616.742183][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.048569][ T5912] kernel write not supported for file bpf-prog (pid: 5912 comm: kworker/1:5) [ 617.086033][T12124] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.086143][T11688] Bluetooth: hci1: command 0x0c1a tx timeout [ 617.086169][T11688] Bluetooth: hci0: command 0x0406 tx timeout [ 617.326046][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 618.136210][ T5911] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 618.309392][ T5911] usb 10-1: Using ep0 maxpacket: 32 [ 618.311866][ T5911] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 618.311888][ T5911] usb 10-1: config 0 has no interface number 0 [ 618.344478][ T5911] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 618.344507][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.344525][ T5911] usb 10-1: Product: syz [ 618.344537][ T5911] usb 10-1: Manufacturer: syz [ 618.344550][ T5911] usb 10-1: SerialNumber: syz [ 618.387294][ T5911] usb 10-1: config 0 descriptor?? [ 618.404110][ T5911] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 618.840648][ T5911] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 619.035019][ T5911] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 619.120748][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 619.135689][ T5911] usb 10-1: USB disconnect, device number 4 [ 619.153629][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 619.166052][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.177924][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 619.178591][ T5911] quatech2 10-1:0.51: device disconnected [ 619.185543][T15174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.406115][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.833771][T15191] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 620.221048][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.464644][T15210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 620.803478][T15221] netlink: 'syz.8.3585': attribute type 1 has an invalid length. [ 620.928483][T15226] bond2: (slave bridge1): making interface the new active one [ 620.935495][T15226] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 621.176458][T15234] netlink: 'syz.8.3588': attribute type 1 has an invalid length. [ 621.256196][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.323426][T15234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.488528][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 622.370228][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3600'. [ 622.374648][T15265] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3600'. [ 622.666161][ T5849] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 622.819059][ T5849] usb 1-1: config 0 has no interfaces? [ 622.819096][ T5849] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 622.819116][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.830263][ T5849] usb 1-1: config 0 descriptor?? [ 623.242610][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 623.242625][ T37] audit: type=1326 audit(1756171930.097:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15288 comm="syz.5.3610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35c34ebe9 code=0x0 [ 623.836069][ T5849] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 623.995690][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 624.003866][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.003894][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.003927][ T5849] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 624.003947][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.015626][ T5849] usb 2-1: config 0 descriptor?? [ 624.032515][ T5849] hub 2-1:0.0: USB hub found [ 624.235557][ T5849] hub 2-1:0.0: 1 port detected [ 624.455495][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.455564][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.861916][ T5849] hub 2-1:0.0: activate --> -90 [ 624.996122][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 625.149517][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.149549][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.149584][ T31] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 625.149604][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.197809][ T31] usb 10-1: config 0 descriptor?? [ 625.271553][ T5925] usb 2-1: USB disconnect, device number 38 [ 625.486453][ T5849] usb 2-1-port1: config error [ 625.631486][ T990] usb 1-1: USB disconnect, device number 37 [ 625.740787][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3626'. [ 626.443366][ T31] uclogic 0003:256C:006D.0025: v1 frame probing failed: -71 [ 626.443461][ T31] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 626.443573][ T31] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 626.486682][ T31] usb 10-1: USB disconnect, device number 5 [ 626.486884][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3633'. [ 626.486903][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3633'. [ 627.492020][T15384] netlink: 'syz.0.3647': attribute type 10 has an invalid length. [ 627.492046][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3647'. [ 627.697130][T15384] dummy0: entered promiscuous mode [ 627.698092][T15384] bridge0: port 3(dummy0) entered blocking state [ 627.698663][T15384] bridge0: port 3(dummy0) entered disabled state [ 627.698897][T15384] dummy0: entered allmulticast mode [ 627.702708][T15384] bridge0: port 3(dummy0) entered blocking state [ 627.702884][T15384] bridge0: port 3(dummy0) entered forwarding state [ 627.748055][ T5925] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 627.898563][ T5925] usb 10-1: too many configurations: 151, using maximum allowed: 8 [ 627.922075][ T5925] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 627.922108][ T5925] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 627.922126][ T5925] usb 10-1: Product: syz [ 627.922139][ T5925] usb 10-1: Manufacturer: syz [ 627.922151][ T5925] usb 10-1: SerialNumber: syz [ 627.950912][ T5925] usb 10-1: config 0 descriptor?? [ 627.974959][ T5849] kernel write not supported for file bpf-prog (pid: 5849 comm: kworker/0:4) [ 627.987679][ T5925] ims_pcu 10-1:0.0: Zero length descriptor [ 627.987743][ T5925] ims_pcu 10-1:0.0: probe with driver ims_pcu failed with error -22 [ 628.206306][ T5925] usb 10-1: USB disconnect, device number 6 [ 629.342764][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3668'. [ 629.343478][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3668'. [ 629.575451][T15440] overlayfs: failed to clone upperpath [ 629.838748][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.844637][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.851184][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.859736][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.862091][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.016077][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 630.177574][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 630.180203][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.180231][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.180270][ T31] usb 9-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 630.180290][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.213960][ T37] audit: type=1326 audit(1756171937.067:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.214209][ T37] audit: type=1326 audit(1756171937.067:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.214431][ T37] audit: type=1326 audit(1756171937.067:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.214651][ T37] audit: type=1326 audit(1756171937.067:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.214874][ T37] audit: type=1326 audit(1756171937.067:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.215101][ T37] audit: type=1326 audit(1756171937.067:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.215447][ T37] audit: type=1326 audit(1756171937.067:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.215688][ T37] audit: type=1326 audit(1756171937.067:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.218477][ T31] usb 9-1: config 0 descriptor?? [ 630.218971][ T37] audit: type=1326 audit(1756171937.067:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.220192][ T37] audit: type=1326 audit(1756171937.077:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15435 comm="syz.0.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6770cebe9 code=0x7fc00000 [ 630.456806][ T31] usbhid 9-1:0.0: can't add hid device: -71 [ 630.456942][ T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 630.503140][ T31] usb 9-1: USB disconnect, device number 4 [ 630.678786][T15446] chnl_net:caif_netlink_parms(): no params data found [ 631.377533][T15446] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.380754][T15446] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.380999][T15446] bridge_slave_0: entered allmulticast mode [ 631.393324][T15446] bridge_slave_0: entered promiscuous mode [ 631.402884][T15487] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3689'. [ 631.403341][T15487] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3689'. [ 631.406140][T15446] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.408376][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.408710][T15446] bridge_slave_1: entered allmulticast mode [ 631.424379][T15446] bridge_slave_1: entered promiscuous mode [ 631.942469][T15503] netlink: set zone limit has 4 unknown bytes [ 631.966466][T12124] Bluetooth: hci2: command tx timeout [ 632.114325][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.137421][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.581000][T15446] team0: Port device team_slave_0 added [ 632.598167][T15446] team0: Port device team_slave_1 added [ 632.746137][ T5925] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 632.901236][ T5925] usb 9-1: config 0 has no interfaces? [ 632.905031][ T5925] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 632.905053][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.905063][ T5925] usb 9-1: Product: syz [ 632.905070][ T5925] usb 9-1: Manufacturer: syz [ 632.905077][ T5925] usb 9-1: SerialNumber: syz [ 632.955108][ T5925] usb 9-1: config 0 descriptor?? [ 633.021612][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.021624][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.021638][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.032862][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.032878][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.032902][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.678707][T15446] hsr_slave_0: entered promiscuous mode [ 633.680093][T15446] hsr_slave_1: entered promiscuous mode [ 633.800819][T15446] debugfs: 'hsr0' already exists in 'hsr' [ 633.800845][T15446] Cannot create hsr debugfs directory [ 634.047003][T12124] Bluetooth: hci2: command tx timeout [ 634.435032][T15527] ALSA: seq fatal error: cannot create timer (-16) [ 634.831463][ T5911] usb 9-1: USB disconnect, device number 5 [ 635.487006][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 635.487023][ T37] audit: type=1326 audit(1756171942.347:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15544 comm="syz.9.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82b23ebe9 code=0x7fc00000 [ 635.487481][ T37] audit: type=1326 audit(1756171942.347:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15544 comm="syz.9.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82b23ebe9 code=0x7fc00000 [ 636.099415][T15562] overlayfs: failed to clone upperpath [ 636.127593][ T5845] Bluetooth: hci2: command tx timeout [ 636.197721][ T37] audit: type=1326 audit(1756171943.057:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15544 comm="syz.9.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc82b1dade9 code=0x7fc00000 [ 636.630131][T15446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 636.662938][T15446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 636.736038][T15446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 636.808776][T15446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 636.987654][ T37] audit: type=1326 audit(1756171943.837:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15582 comm="syz.9.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82b23ebe9 code=0x7ffc0000 [ 636.987994][ T37] audit: type=1326 audit(1756171943.847:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15582 comm="syz.9.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc82b23ebe9 code=0x7ffc0000 [ 636.988253][ T37] audit: type=1326 audit(1756171943.847:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15582 comm="syz.9.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82b23ebe9 code=0x7ffc0000 [ 637.328818][T15446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.424882][T15446] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.899111][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.899241][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.946681][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.946802][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.216349][ T5845] Bluetooth: hci2: command tx timeout [ 638.243092][ T37] audit: type=1326 audit(1756171945.097:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.8.3735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0b52ebe9 code=0x0 [ 638.749155][T15446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.829387][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3743'. [ 638.870024][T15446] veth0_vlan: entered promiscuous mode [ 638.886680][T15446] veth1_vlan: entered promiscuous mode [ 638.936374][ T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 639.003329][T15446] veth0_macvtap: entered promiscuous mode [ 639.033052][T15446] veth1_macvtap: entered promiscuous mode [ 639.082514][T15446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.100779][ T31] usb 10-1: config 0 has no interfaces? [ 639.100815][ T31] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.100836][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.133419][ T31] usb 10-1: config 0 descriptor?? [ 639.145540][T15446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.172031][ T7582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.187526][ T7582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.190725][ T7582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.191312][ T7582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.347349][ T990] usb 10-1: USB disconnect, device number 7 [ 639.760161][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.760181][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.959995][ T1490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.960015][ T1490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.172751][T15650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 640.172780][T15650] overlayfs: failed to set xattr on upper [ 640.172788][T15650] overlayfs: ...falling back to redirect_dir=nofollow. [ 640.172795][T15650] overlayfs: ...falling back to uuid=null. [ 640.830942][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 641.255085][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255159][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255216][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255271][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255358][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255414][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255470][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255526][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255577][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.255630][T15682] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 641.646769][ C1] ------------[ cut here ]------------ [ 641.646795][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 641.646839][ C1] Modules linked in: [ 641.646860][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.646885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.646899][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 641.646922][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 641.646940][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 641.646958][ C1] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 641.646974][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 641.646987][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 641.647002][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 641.647017][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803bcefa68 [ 641.647032][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 641.647050][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.647065][ C1] CR2: 000000110c4130df CR3: 000000002fb30000 CR4: 00000000003526f0 [ 641.647084][ C1] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 641.647098][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 641.647130][ C1] Call Trace: [ 641.647139][ C1] [ 641.647165][ C1] ? __pfx_est_timer+0x10/0x10 [ 641.647201][ C1] call_timer_fn+0x17b/0x5f0 [ 641.647235][ C1] ? __pfx_est_timer+0x10/0x10 [ 641.647255][ C1] ? call_timer_fn+0xbe/0x5f0 [ 641.647280][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 641.647318][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.647344][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.647367][ C1] ? __pfx_est_timer+0x10/0x10 [ 641.647391][ C1] __run_timer_base+0x648/0x970 [ 641.647435][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 641.647478][ C1] run_timer_softirq+0xb7/0x180 [ 641.647502][ C1] handle_softirqs+0x22c/0x710 [ 641.647541][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 641.647576][ C1] run_ktimerd+0xcf/0x190 [ 641.647600][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 641.647622][ C1] ? schedule+0x91/0x360 [ 641.647654][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 641.647679][ C1] smpboot_thread_fn+0x542/0xa60 [ 641.647706][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 641.647748][ C1] kthread+0x711/0x8a0 [ 641.647781][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 641.647806][ C1] ? __pfx_kthread+0x10/0x10 [ 641.647843][ C1] ? __pfx_kthread+0x10/0x10 [ 641.647874][ C1] ret_from_fork+0x3fc/0x770 [ 641.647904][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 641.647937][ C1] ? __switch_to_asm+0x39/0x70 [ 641.647958][ C1] ? __switch_to_asm+0x33/0x70 [ 641.647976][ C1] ? __pfx_kthread+0x10/0x10 [ 641.648008][ C1] ret_from_fork_asm+0x1a/0x30 [ 641.648047][ C1] [ 641.648057][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 641.648074][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.648098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.648110][ C1] Call Trace: [ 641.648118][ C1] [ 641.648127][ C1] dump_stack_lvl+0x99/0x250 [ 641.648157][ C1] ? __asan_memcpy+0x40/0x70 [ 641.648179][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.648208][ C1] ? __pfx__printk+0x10/0x10 [ 641.648245][ C1] vpanic+0x281/0x750 [ 641.648274][ C1] ? __pfx__printk+0x10/0x10 [ 641.648296][ C1] ? __pfx_vpanic+0x10/0x10 [ 641.648325][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 641.648367][ C1] panic+0xb9/0xc0 [ 641.648395][ C1] ? __pfx_panic+0x10/0x10 [ 641.648442][ C1] __warn+0x31b/0x4b0 [ 641.648469][ C1] ? est_timer+0x6dc/0x9f0 [ 641.648491][ C1] ? est_timer+0x6dc/0x9f0 [ 641.648513][ C1] report_bug+0x2be/0x4f0 [ 641.648538][ C1] ? est_timer+0x6dc/0x9f0 [ 641.648560][ C1] ? est_timer+0x6dc/0x9f0 [ 641.648581][ C1] ? est_timer+0x6de/0x9f0 [ 641.648602][ C1] handle_bug+0x84/0x160 [ 641.648632][ C1] exc_invalid_op+0x1a/0x50 [ 641.648661][ C1] asm_exc_invalid_op+0x1a/0x20 [ 641.648681][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 641.648703][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 641.648721][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 641.648746][ C1] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801c6b1dc0 [ 641.648763][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 641.648777][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 641.648791][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 641.648807][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803bcefa68 [ 641.648832][ C1] ? est_timer+0x6db/0x9f0 [ 641.648879][ C1] ? __pfx_est_timer+0x10/0x10 [ 641.648915][ C1] call_timer_fn+0x17b/0x5f0 [ 641.648941][ C1] ? __pfx_est_timer+0x10/0x10 [ 641.648962][ C1] ? call_timer_fn+0xbe/0x5f0 [ 641.648988][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 641.649026][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.649052][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.649076][ C1] ? __pfx_est_timer+0x10/0x10 [ 641.649100][ C1] __run_timer_base+0x648/0x970 [ 641.649144][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 641.649190][ C1] run_timer_softirq+0xb7/0x180 [ 641.649216][ C1] handle_softirqs+0x22c/0x710 [ 641.649253][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 641.649292][ C1] run_ktimerd+0xcf/0x190 [ 641.649317][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 641.649341][ C1] ? schedule+0x91/0x360 [ 641.649371][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 641.649393][ C1] smpboot_thread_fn+0x542/0xa60 [ 641.649415][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 641.649448][ C1] kthread+0x711/0x8a0 [ 641.649478][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 641.649502][ C1] ? __pfx_kthread+0x10/0x10 [ 641.649537][ C1] ? __pfx_kthread+0x10/0x10 [ 641.649566][ C1] ret_from_fork+0x3fc/0x770 [ 641.649594][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 641.649628][ C1] ? __switch_to_asm+0x39/0x70 [ 641.649646][ C1] ? __switch_to_asm+0x33/0x70 [ 641.649663][ C1] ? __pfx_kthread+0x10/0x10 [ 641.649693][ C1] ret_from_fork_asm+0x1a/0x30 [ 641.649737][ C1] [ 641.649988][ C1] Kernel Offset: disabled