last executing test programs: 13.426954057s ago: executing program 0 (id=505): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 13.158480167s ago: executing program 1 (id=506): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x543, 0x23456}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x16) 10.443215066s ago: executing program 3 (id=511): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) creat(0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.05502182s ago: executing program 4 (id=513): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_setup(0x4a9a, &(0x7f0000000240)={0x0, 0x2c2d, 0x4, 0x3, 0xed}, &(0x7f00000002c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x8, 0x1, {}, 0x80000000, 0xc}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 10.042267566s ago: executing program 1 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 9.935654488s ago: executing program 3 (id=515): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 8.650408585s ago: executing program 0 (id=516): socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x8, 0xa, 0xed, @broadcast, 'geneve0\x00'}) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 8.601103846s ago: executing program 3 (id=517): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 8.399346011s ago: executing program 4 (id=519): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e73", 0xc, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.670612772s ago: executing program 0 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000300)="062586c0d44dc999855a9d3cefd7768dfec21254807243405181000000000000", 0x20}], 0x1) 7.614762473s ago: executing program 3 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffff998, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) 6.357717343s ago: executing program 0 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) 6.356409998s ago: executing program 2 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004043552205000000000001090224000100001000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220b000000ff"], 0x0}, 0x0) 5.866993387s ago: executing program 1 (id=525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r5, r6, 0x4, r2}, 0x10) 5.178327362s ago: executing program 0 (id=526): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4, 0x0, 0xdffffffd}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0xa}, "2ca903eedfd2"}}}}}}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netfilter\x00') fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) getdents(r4, &(0x7f0000000000)=""/50, 0x32) getdents(r4, 0xfffffffffffffffd, 0xbb) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000000d40)=0xfdfdffff) syz_open_dev$admmidi(&(0x7f0000000080), 0x4, 0x511841) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009", @ANYRESDEC=r2], 0x0) 5.176088827s ago: executing program 3 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) lsm_list_modules(0x0, 0x0, 0x0) unshare(0x8000480) shmget$private(0x0, 0x3be4d8b4000, 0x0, &(0x7f0000fff000/0x1000)=nil) 5.099989499s ago: executing program 2 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xca, 0x1, 0x2016}}}, 0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) 5.094413499s ago: executing program 1 (id=529): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2, 0x101}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) write$FUSE_INIT(r4, 0x0, 0x0) 4.832102386s ago: executing program 4 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 3.294661782s ago: executing program 2 (id=531): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r4, 0x12) 3.244361869s ago: executing program 4 (id=532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.884230466s ago: executing program 2 (id=533): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac141400", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e73", 0xc, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504", @ANYBLOB="ebffffffffffffff280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.421909846s ago: executing program 4 (id=534): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000a19000/0x2000)=nil, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 2.284861105s ago: executing program 2 (id=535): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0xe96, {0x7, 0x29, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x5, {0x200000000000000, 0x40200, 0x0, {0x0, 0xffffffffffffffff, 0x1, 0x40000000, 0x3, 0x0, 0x0, 0x5, 0xfffffff8, 0x4000, 0x8, 0x0, 0x0, 0x1000000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.358671577s ago: executing program 0 (id=536): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="650fc7bcbf0880000066b82e010f00d836df270f2065c4c15d72d32ef20f005ef3260f01b3aa09000066b8a2000f00d0c4c2fd0229dfcc", 0x37}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.328555305s ago: executing program 1 (id=537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) 1.123916121s ago: executing program 4 (id=538): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000002100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) listen(r0, 0x3) accept(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB="20199e"], 0x16) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x48040) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 211.915246ms ago: executing program 2 (id=539): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 201.420505ms ago: executing program 3 (id=540): socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20008004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0xdb6972e93d360997, 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 1 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)='^$\x00', r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 81.362743][ T5802] cgroup: Unknown subsys name 'net' [ 81.538261][ T5802] cgroup: Unknown subsys name 'cpuset' [ 81.547995][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.332302][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.084859][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.095568][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.116100][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.123559][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.132795][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.140575][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.149632][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.157561][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.167220][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.175668][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.183626][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.192580][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.204249][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.204670][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.221518][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.243555][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.255869][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.256899][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.264339][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.271170][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.284619][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.298626][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.307721][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.307808][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.323166][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.044143][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 87.105154][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 87.264340][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.342897][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 87.428202][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 87.626386][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.634860][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.642261][ T5814] bridge_slave_0: entered allmulticast mode [ 87.649881][ T5814] bridge_slave_0: entered promiscuous mode [ 87.679079][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.686952][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.694811][ T5813] bridge_slave_0: entered allmulticast mode [ 87.701872][ T5813] bridge_slave_0: entered promiscuous mode [ 87.716104][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.723616][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.731577][ T5814] bridge_slave_1: entered allmulticast mode [ 87.738811][ T5814] bridge_slave_1: entered promiscuous mode [ 87.759101][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.766565][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.773770][ T5813] bridge_slave_1: entered allmulticast mode [ 87.781508][ T5813] bridge_slave_1: entered promiscuous mode [ 87.915546][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.925019][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.932552][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.942819][ T5818] bridge_slave_0: entered allmulticast mode [ 87.950415][ T5818] bridge_slave_0: entered promiscuous mode [ 87.961174][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.972844][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.980080][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.987689][ T5828] bridge_slave_0: entered allmulticast mode [ 87.995692][ T5828] bridge_slave_0: entered promiscuous mode [ 88.021099][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.047047][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.057375][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.065037][ T5818] bridge_slave_1: entered allmulticast mode [ 88.072490][ T5818] bridge_slave_1: entered promiscuous mode [ 88.084352][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.093609][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.101087][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.108418][ T5828] bridge_slave_1: entered allmulticast mode [ 88.116005][ T5828] bridge_slave_1: entered promiscuous mode [ 88.202424][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.210049][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.217767][ T5820] bridge_slave_0: entered allmulticast mode [ 88.225912][ T5820] bridge_slave_0: entered promiscuous mode [ 88.235000][ T5831] Bluetooth: hci1: command tx timeout [ 88.237706][ T5813] team0: Port device team_slave_0 added [ 88.251415][ T5813] team0: Port device team_slave_1 added [ 88.275916][ T5814] team0: Port device team_slave_0 added [ 88.295913][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.303316][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.304677][ T5824] Bluetooth: hci2: command tx timeout [ 88.315574][ T5820] bridge_slave_1: entered allmulticast mode [ 88.316153][ T5831] Bluetooth: hci0: command tx timeout [ 88.324568][ T5820] bridge_slave_1: entered promiscuous mode [ 88.363187][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.375725][ T5814] team0: Port device team_slave_1 added [ 88.384736][ T5824] Bluetooth: hci3: command tx timeout [ 88.390510][ T5831] Bluetooth: hci4: command tx timeout [ 88.397105][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.452927][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.460571][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.487331][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.502626][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.531566][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.559009][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.572775][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.582951][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.592456][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.618977][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.648853][ T5818] team0: Port device team_slave_0 added [ 88.683582][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.691851][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.718198][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.753742][ T5818] team0: Port device team_slave_1 added [ 88.764974][ T5828] team0: Port device team_slave_0 added [ 88.773035][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.780738][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.808303][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.838942][ T5820] team0: Port device team_slave_0 added [ 88.862630][ T5828] team0: Port device team_slave_1 added [ 88.882026][ T5820] team0: Port device team_slave_1 added [ 89.001161][ T5813] hsr_slave_0: entered promiscuous mode [ 89.008068][ T5813] hsr_slave_1: entered promiscuous mode [ 89.016962][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.024494][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.051473][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.063416][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.071013][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.098219][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.124620][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.131625][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.158395][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.171464][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.178718][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.205511][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.230240][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.238117][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.265385][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.282910][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.290881][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.317685][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.335442][ T5814] hsr_slave_0: entered promiscuous mode [ 89.341972][ T5814] hsr_slave_1: entered promiscuous mode [ 89.349399][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.357445][ T5814] Cannot create hsr debugfs directory [ 89.562600][ T5818] hsr_slave_0: entered promiscuous mode [ 89.569536][ T5818] hsr_slave_1: entered promiscuous mode [ 89.576961][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.585021][ T5818] Cannot create hsr debugfs directory [ 89.651984][ T5820] hsr_slave_0: entered promiscuous mode [ 89.658683][ T5820] hsr_slave_1: entered promiscuous mode [ 89.666033][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.673756][ T5820] Cannot create hsr debugfs directory [ 89.707507][ T5828] hsr_slave_0: entered promiscuous mode [ 89.714489][ T5828] hsr_slave_1: entered promiscuous mode [ 89.720809][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.728740][ T5828] Cannot create hsr debugfs directory [ 90.282027][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.304355][ T5831] Bluetooth: hci1: command tx timeout [ 90.308437][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.331407][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.351548][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.394724][ T5831] Bluetooth: hci0: command tx timeout [ 90.399647][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.400313][ T5831] Bluetooth: hci2: command tx timeout [ 90.426881][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.448912][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.459397][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.467308][ T5824] Bluetooth: hci3: command tx timeout [ 90.473339][ T5831] Bluetooth: hci4: command tx timeout [ 90.535382][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.558939][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.572371][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.604483][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.728852][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.747903][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.766693][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.809960][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.899383][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.909271][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.934962][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.947666][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.970565][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.019628][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.066225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.073698][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.092598][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.116353][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.123764][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.180842][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.203093][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.210399][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.239629][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.252728][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.259976][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.380861][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.410012][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.417304][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.480614][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.487942][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.509651][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.633397][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.678761][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.717614][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.724956][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.783768][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.791389][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.951488][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.009390][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.016681][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.077032][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.084382][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.134888][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.147788][ T977] cfg80211: failed to load regulatory.db [ 92.181977][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.394006][ T5831] Bluetooth: hci1: command tx timeout [ 92.464689][ T5831] Bluetooth: hci2: command tx timeout [ 92.470177][ T5831] Bluetooth: hci0: command tx timeout [ 92.490884][ T5814] veth0_vlan: entered promiscuous mode [ 92.545013][ T5831] Bluetooth: hci4: command tx timeout [ 92.550494][ T5831] Bluetooth: hci3: command tx timeout [ 92.620214][ T5814] veth1_vlan: entered promiscuous mode [ 92.707282][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.749016][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.878686][ T5814] veth0_macvtap: entered promiscuous mode [ 92.918442][ T5818] veth0_vlan: entered promiscuous mode [ 92.929141][ T5814] veth1_macvtap: entered promiscuous mode [ 92.963164][ T5818] veth1_vlan: entered promiscuous mode [ 93.012328][ T5828] veth0_vlan: entered promiscuous mode [ 93.068717][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.081751][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.119132][ T5828] veth1_vlan: entered promiscuous mode [ 93.130002][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.147695][ T5813] veth0_vlan: entered promiscuous mode [ 93.163530][ T5813] veth1_vlan: entered promiscuous mode [ 93.194467][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203320][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.213026][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.222023][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254198][ T5818] veth0_macvtap: entered promiscuous mode [ 93.298467][ T5818] veth1_macvtap: entered promiscuous mode [ 93.341207][ T5828] veth0_macvtap: entered promiscuous mode [ 93.375381][ T5820] veth0_vlan: entered promiscuous mode [ 93.383223][ T5828] veth1_macvtap: entered promiscuous mode [ 93.426889][ T5813] veth0_macvtap: entered promiscuous mode [ 93.457319][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.477904][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.502673][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.519358][ T5820] veth1_vlan: entered promiscuous mode [ 93.531848][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.545872][ T5813] veth1_macvtap: entered promiscuous mode [ 93.589384][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.598921][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.609443][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.618259][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638593][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.640849][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.655708][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.668443][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.677666][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.687011][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.773399][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.788178][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.833510][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.861462][ T5820] veth0_macvtap: entered promiscuous mode [ 93.875315][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.893784][ T5820] veth1_macvtap: entered promiscuous mode [ 93.933058][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.945705][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.950092][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.969696][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.980523][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.033308][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.046653][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.150948][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.163839][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.196813][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.207563][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.244341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.252224][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.312548][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.331471][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.350586][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.380150][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.404932][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.413768][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.428354][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.469855][ T5831] Bluetooth: hci1: command tx timeout [ 94.545154][ T5831] Bluetooth: hci0: command tx timeout [ 94.546909][ T5824] Bluetooth: hci2: command tx timeout [ 94.600430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.624163][ T5824] Bluetooth: hci3: command tx timeout [ 94.624178][ T5831] Bluetooth: hci4: command tx timeout [ 94.857420][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.868370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.112514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.452142][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.474057][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.548243][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.557490][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.566559][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.575485][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.584443][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.593354][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.602362][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.611213][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.620582][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 96.629699][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 97.178579][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.238057][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.494391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.313823][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.354324][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.925454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.632379][ T5961] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 101.045610][ T5961] : entered promiscuous mode [ 101.937486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.068942][ T5971] netfs: Couldn't get user pages (rc=-14) [ 102.234478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.237472][ T5971] netfs: Zero-sized read [R=1] [ 103.795877][ T5986] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 103.823712][ T5986] CIFS mount error: No usable UNC path provided in device string! [ 103.823712][ T5986] [ 103.833978][ T5986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 105.776845][ T6006] __nla_validate_parse: 45 callbacks suppressed [ 105.776866][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 105.832183][ T6003] bridge0: entered allmulticast mode [ 109.346165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.346266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.448584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.448710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.145538][ T6043] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 111.882278][ T6059] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 112.400831][ T6062] veth3: entered promiscuous mode [ 112.421056][ T30] audit: type=1326 audit(1748386351.943:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6051 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842198e969 code=0x7fc00000 [ 112.518348][ T6063] Unknown options in mask 5 [ 113.794738][ T6069] mmap: syz.2.47 (6069) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.893033][ T6087] kexec: Could not allocate control_code_buffer [ 117.342533][ T6106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.56'. [ 117.357325][ T6104] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.687880][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 119.926320][ T6123] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure [ 121.816090][ T6134] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.015321][ T30] audit: type=1326 audit(1748386369.403:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6208 comm="syz.1.86" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x0 [ 130.097866][ T6214] binder: BINDER_SET_CONTEXT_MGR already set [ 130.174155][ T6214] binder: 6212:6214 ioctl 4018620d 200000000040 returned -16 [ 131.263475][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.343381][ T6222] tty tty3: ldisc open failed (-12), clearing slot 2 [ 131.526387][ T5870] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 131.585375][ T5870] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 131.601210][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 131.637413][ T5870] usb 3-1: Product: syz [ 131.710792][ T5870] usb 3-1: Manufacturer: syz [ 132.027140][ T5870] usb 3-1: SerialNumber: syz [ 132.662287][ T5870] usb 3-1: config 0 descriptor?? [ 132.709895][ T5870] usb 3-1: can't set config #0, error -71 [ 133.020438][ T6243] process 'syz.3.93' launched '/dev/fd/6' with NULL argv: empty string added [ 133.314688][ T6246] dns_resolver: Unsupported content type (254) [ 133.544658][ T5870] usb 3-1: USB disconnect, device number 2 [ 133.624628][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.631372][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.866684][ T6239] ubi31: attaching mtd0 [ 133.932395][ T6239] ubi31: scanning is finished [ 133.937633][ T6239] ubi31: empty MTD device detected [ 137.449806][ T6239] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 137.801679][ T6268] binder: 6266:6268 ioctl c0306201 200000000280 returned -14 [ 138.903482][ T6275] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.601227][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 140.049447][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 140.629412][ T6282] syz_tun: entered promiscuous mode [ 140.654324][ T6282] macvtap1: entered promiscuous mode [ 140.666360][ T6282] macvtap1: entered allmulticast mode [ 140.671898][ T6282] syz_tun: entered allmulticast mode [ 140.720996][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 140.804349][ T6286] syz_tun: left allmulticast mode [ 140.809858][ T6286] syz_tun: left promiscuous mode [ 140.857106][ T6295] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 140.880931][ T6287] ceph: No mds server is up or the cluster is laggy [ 140.895687][ T9] libceph: connect (1)[c::]:6789 error -101 [ 140.902385][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 140.969693][ T6295] geneve2: entered allmulticast mode [ 141.029099][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 143.287274][ T6316] binder: 6314:6316 ioctl 4018620d 0 returned -22 [ 144.388731][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 144.472812][ T6324] binder: 6314:6324 ioctl 400c620e 200000000540 returned -22 [ 144.721383][ T45] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.862261][ T45] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 145.901211][ T45] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.917322][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 145.930589][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.40 [ 145.940341][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.949290][ T45] usb 3-1: Product: syz [ 145.953652][ T45] usb 3-1: Manufacturer: syz [ 145.958914][ T45] usb 3-1: SerialNumber: syz [ 145.979572][ T6321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.341984][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.394030][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 147.425810][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 147.563458][ T45] usb 3-1: USB disconnect, device number 3 [ 147.748115][ T6343] bridge1: entered allmulticast mode [ 149.094680][ T6345] tipc: Enabling of bearer rejected, failed to enable media [ 149.173701][ T6359] x_tables: duplicate underflow at hook 1 [ 149.807254][ T6355] tipc: Started in network mode [ 149.848454][ T6355] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 149.894456][ T6355] tipc: Enabled bearer , priority 0 [ 150.054923][ T5870] usb 2-1: unable to read config index 0 descriptor/all [ 150.062338][ T5870] usb 2-1: can't read configurations, error -71 [ 150.417836][ T6371] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 151.374360][ T5869] tipc: Node number set to 11578026 [ 152.051275][ T6371] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 156.544157][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.073976][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 158.089586][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.116708][ T9] usb 2-1: config 7 has an invalid interface number: 87 but max is 0 [ 158.573932][ T9] usb 2-1: config 7 has no interface number 0 [ 158.580198][ T9] usb 2-1: config 7 interface 87 has no altsetting 0 [ 158.623787][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=796e, bcdDevice=25.c0 [ 158.633584][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.664297][ T9] usb 2-1: Product: syz [ 158.668548][ T9] usb 2-1: Manufacturer: syz [ 158.673366][ T9] usb 2-1: SerialNumber: syz [ 158.857395][ T6424] Zero length message leads to an empty skb [ 158.987456][ T9] usb 2-1: can't set config #7, error -71 [ 158.996088][ T9] usb 2-1: USB disconnect, device number 4 [ 160.504043][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 160.536464][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 161.196832][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 161.270187][ T6456] hfsplus: unable to find HFS+ superblock [ 161.341252][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.364027][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.414564][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.435150][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.479800][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.511179][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.555219][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 162.199221][ T9] usb 4-1: usb_control_msg returned -71 [ 162.228806][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.246431][ T9] usbtmc 4-1:16.0: can't read capabilities [ 162.344258][ T9] usb 4-1: USB disconnect, device number 2 [ 162.549998][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.159'. [ 163.639341][ T6458] bridge_slave_1 (unregistering): left allmulticast mode [ 163.666002][ T6458] bridge_slave_1 (unregistering): left promiscuous mode [ 163.678152][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.894170][ T6471] bond0: entered promiscuous mode [ 163.904591][ T6471] bond_slave_0: entered promiscuous mode [ 163.941016][ T6471] bond_slave_1: entered promiscuous mode [ 163.966615][ T6471] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.005896][ T6471] bond0: left promiscuous mode [ 164.010784][ T6471] bond_slave_0: left promiscuous mode [ 164.059135][ T6471] bond_slave_1: left promiscuous mode [ 164.379369][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'. [ 166.229907][ T6504] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 167.444963][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 167.518399][ T30] audit: type=1800 audit(1748386407.323:4): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.173" name="/" dev="9p" ino=2 res=0 errno=0 [ 167.559510][ T6511] netfs: Couldn't get user pages (rc=-14) [ 168.955499][ T6518] sctp: failed to load transform for md5: -4 [ 170.027439][ T6543] binfmt_misc: register: failed to install interpreter file ./file2 [ 170.625202][ T30] audit: type=1800 audit(1748386410.413:5): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.181" name="/" dev="9p" ino=2 res=0 errno=0 [ 173.622577][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 173.971105][ T6596] netem: change failed [ 173.994395][ T6598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.602996][ T6622] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.883980][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.094402][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 179.321852][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.342789][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 179.379059][ T5869] usb 1-1: can't read configurations, error -71 [ 179.757946][ T6646] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.354419][ T30] audit: type=1326 audit(1748386420.153:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 180.483551][ T30] audit: type=1326 audit(1748386420.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 180.568669][ T30] audit: type=1326 audit(1748386420.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 180.598241][ T6661] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 180.640185][ T30] audit: type=1326 audit(1748386420.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 180.684325][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 180.739677][ T30] audit: type=1326 audit(1748386420.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 180.753619][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 180.849702][ T30] audit: type=1326 audit(1748386420.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 180.912032][ T30] audit: type=1326 audit(1748386420.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 181.032317][ T30] audit: type=1326 audit(1748386420.163:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 181.140109][ T30] audit: type=1326 audit(1748386420.163:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 181.203802][ T30] audit: type=1326 audit(1748386420.163:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6655 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3be998e969 code=0x7ffc0000 [ 183.061130][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 184.618204][ T6716] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 184.802824][ T6716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.840328][ T6718] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 184.909547][ T6720] bond1: (slave gretap1): making interface the new active one [ 184.927052][ T6720] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 184.936374][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 184.959658][ T6730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.063790][ T6720] syz.0.233 (6720) used greatest stack depth: 19752 bytes left [ 185.783619][ T6752] bridge0: entered promiscuous mode [ 185.824138][ T6752] vlan2: entered promiscuous mode [ 188.170981][ T6775] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 188.240541][ T6775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.341890][ T6777] bond1: (slave gretap1): making interface the new active one [ 188.426787][ T6777] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 188.522892][ T6777] syz.3.249 (6777) used greatest stack depth: 19472 bytes left [ 188.765812][ T6792] fuse: Bad value for 'fd' [ 190.067269][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 190.067288][ T30] audit: type=1326 audit(1748386429.873:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6780 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be998e969 code=0x7fc00000 [ 191.412799][ T6791] xt_hashlimit: size too large, truncated to 1048576 [ 191.576991][ T6811] syz.4.258: attempt to access beyond end of device [ 191.576991][ T6811] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 191.596765][ T6811] hfs: can't find a HFS filesystem on dev nbd4 [ 191.765691][ T6819] delete_channel: no stack [ 191.771138][ T6818] delete_channel: no stack [ 194.621305][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.633910][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.658934][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 196.684862][ T6861] overlayfs: failed to clone upperpath [ 205.687211][ T6948] netlink: 'syz.4.299': attribute type 10 has an invalid length. [ 205.701429][ T6948] team0: Device ipvlan1 failed to register rx_handler [ 207.175901][ T6956] sctp: [Deprecated]: syz.0.302 (pid 6956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.175901][ T6956] Use struct sctp_sack_info instead [ 207.247649][ T6955] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.762189][ T30] audit: type=1804 audit(1748386448.563:51): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.308" name="/newroot/56/file1" dev="fuse" ino=1 res=1 errno=0 [ 208.844875][ T30] audit: type=1800 audit(1748386448.563:52): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.308" name="/" dev="fuse" ino=1 res=0 errno=0 [ 209.085379][ T30] audit: type=1800 audit(1748386448.563:53): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.308" name="/" dev="fuse" ino=1 res=0 errno=0 [ 211.012197][ T6994] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 211.027123][ T6995] binder: BINDER_SET_CONTEXT_MGR already set [ 211.033924][ T6995] binder: 6990:6995 ioctl 4018620d 200000000040 returned -16 [ 211.048184][ T6995] binder: 6990:6995 ioctl c0306201 2000000003c0 returned -14 [ 211.068409][ T6996] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 211.203757][ T30] audit: type=1326 audit(1748386451.003:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6993 comm="syz.2.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa71d98e969 code=0x0 [ 212.703908][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 212.705631][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 212.710400][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 212.718206][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.722272][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 213.360094][ T6995] syz.1.316 (6995): drop_caches: 2 [ 218.294290][ T30] audit: type=1326 audit(1748386458.083:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 218.433922][ T30] audit: type=1326 audit(1748386458.083:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 218.465775][ T30] audit: type=1326 audit(1748386458.083:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 218.493134][ T30] audit: type=1326 audit(1748386458.083:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 218.574478][ T30] audit: type=1326 audit(1748386458.083:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 218.692280][ T30] audit: type=1326 audit(1748386458.083:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 218.815086][ T30] audit: type=1326 audit(1748386458.000:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 219.033973][ T30] audit: type=1326 audit(1748386458.000:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 219.056008][ T30] audit: type=1326 audit(1748386458.000:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 219.078337][ T30] audit: type=1326 audit(1748386458.000:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7076 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 223.123975][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 223.308064][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 223.320291][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.353506][ T24] usb 2-1: config 127 has an invalid interface number: 51 but max is 0 [ 223.373963][ T24] usb 2-1: config 127 has no interface number 0 [ 223.611594][ T24] usb 2-1: config 127 interface 51 has no altsetting 0 [ 223.622413][ T24] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 223.673909][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.682861][ T24] usb 2-1: Product: syz [ 223.687163][ T24] usb 2-1: Manufacturer: syz [ 223.691888][ T24] usb 2-1: SerialNumber: syz [ 223.780486][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.790203][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.799876][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.809385][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.818889][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.828158][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.838692][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.848799][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.858524][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 223.868192][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 224.505586][ T24] usb 2-1: USB disconnect, device number 5 [ 227.254320][ T7177] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 227.584274][ T7179] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.593349][ T7179] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.625684][ T7187] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.670168][ T7179] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.711678][ T7179] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.738742][ T7179] bond2: (slave geneve2): making interface the new active one [ 227.756077][ T7179] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 227.780703][ T7180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.884053][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 229.883911][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 230.020281][ T24] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.037313][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.050144][ T24] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 230.060206][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.911602][ T24] usb 5-1: config 0 descriptor?? [ 231.786729][ T7193] ip6gretap0: entered promiscuous mode [ 231.792789][ T7193] vlan2: entered promiscuous mode [ 232.289624][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 232.308213][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.359424][ T24] usb 5-1: USB disconnect, device number 2 [ 237.267122][ T7248] cgroup: Unknown subsys name 'noxattr' [ 237.493001][ T7251] __nla_validate_parse: 46 callbacks suppressed [ 237.493017][ T7251] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.395'. [ 238.384100][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.395'. [ 239.796015][ T7255] xt_TCPMSS: Only works on TCP SYN packets [ 244.465548][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 245.636341][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 245.648904][ T5869] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 245.648936][ T5869] usb 2-1: config 0 has no interface number 0 [ 245.648963][ T5869] usb 2-1: config 0 interface 12 has no altsetting 0 [ 245.658270][ T5869] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 245.658302][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.658322][ T5869] usb 2-1: Product: syz [ 245.658338][ T5869] usb 2-1: Manufacturer: syz [ 245.658354][ T5869] usb 2-1: SerialNumber: syz [ 245.661821][ T5869] usb 2-1: config 0 descriptor?? [ 246.536449][ T5869] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 246.554128][ T5869] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 246.563617][ T5869] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 246.591844][ T5869] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 246.642683][ T5869] usb 2-1: USB disconnect, device number 6 [ 246.843084][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 246.843106][ T30] audit: type=1326 audit(1748386486.550:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 246.957246][ T30] audit: type=1326 audit(1748386486.550:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 247.053379][ T30] audit: type=1326 audit(1748386486.560:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 247.183641][ T30] audit: type=1326 audit(1748386486.560:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 247.278119][ T30] audit: type=1326 audit(1748386486.560:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 247.386337][ T30] audit: type=1326 audit(1748386486.560:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 248.357272][ T30] audit: type=1326 audit(1748386486.600:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 248.391641][ T30] audit: type=1326 audit(1748386486.630:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 248.477736][ T30] audit: type=1326 audit(1748386486.630:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 248.643584][ T30] audit: type=1326 audit(1748386486.630:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f200f58e969 code=0x7ffc0000 [ 252.507251][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.429'. [ 252.718823][ T7370] bond_slave_0: entered promiscuous mode [ 252.725040][ T7370] bond_slave_1: entered promiscuous mode [ 252.742794][ T7370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.765560][ T7370] bond_slave_0: left promiscuous mode [ 252.771218][ T7370] bond_slave_1: left promiscuous mode [ 255.048337][ T5890] IPVS: starting estimator thread 0... [ 255.264231][ T7398] IPVS: using max 22 ests per chain, 52800 per kthread [ 256.052938][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.060032][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.751829][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'. [ 257.603095][ T7421] dummy0: entered promiscuous mode [ 257.676567][ T7421] dummy0: left promiscuous mode [ 258.812345][ T7429] xt_socket: unknown flags 0x40 [ 258.882265][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 260.324496][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 260.324517][ T30] audit: type=1326 audit(1748386500.030:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7441 comm="syz.4.453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aea78e969 code=0x0 [ 261.136184][ T7449] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 261.299829][ T7449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.483403][ T7449] veth5: entered promiscuous mode [ 261.552835][ T7449] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 261.619220][ T7457] CIFS mount error: No usable UNC path provided in device string! [ 261.619220][ T7457] [ 261.654210][ T7457] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 267.950217][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 269.024534][ T5822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 269.194332][ T5822] usb 1-1: config 0 has no interfaces? [ 269.199996][ T5822] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 269.250255][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.327873][ T5822] usb 1-1: config 0 descriptor?? [ 269.671610][ T7530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.411172][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.444599][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.820169][ T7533] No such timeout policy "syz1" [ 271.042687][ T7511] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 271.102909][ T5870] usb 1-1: USB disconnect, device number 4 [ 271.336234][ T7535] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.477' sets config #1 [ 273.912028][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.920105][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.401897][ T7568] capability: warning: `syz.0.486' uses 32-bit capabilities (legacy support in use) [ 275.932143][ T7576] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 276.675594][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.761042][ T7539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.834077][ T979] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 277.016155][ T979] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 277.024971][ T7539] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.062660][ T7539] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.085843][ T7539] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.110917][ T7539] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.224980][ T7589] netlink: 156 bytes leftover after parsing attributes in process `syz.4.492'. [ 277.253715][ T979] usb 1-1: config 0 has no interface number 0 [ 277.264845][ T979] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 277.276674][ T979] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 277.287492][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.306051][ T979] usb 1-1: config 0 descriptor?? [ 277.327110][ T979] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 277.340230][ T979] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 278.172334][ T5872] usb 1-1: USB disconnect, device number 5 [ 278.512398][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 279.846730][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 279.856381][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 282.668322][ T7629] could not allocate digest TFM handle sha224-ssse3 [ 287.191086][ T7666] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 287.628218][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.156195][ T7668] bond1: (slave ip6gretap1): making interface the new active one [ 288.215456][ T7668] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 288.581943][ T7670] veth3: entered promiscuous mode [ 289.238601][ T7670] bond1: (slave veth3): Enslaving as an active interface with a down link [ 289.376488][ T7675] erspan0: entered allmulticast mode [ 289.451066][ T7675] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 291.373304][ T5824] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 292.629073][ T979] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 292.804219][ T979] usb 1-1: Using ep0 maxpacket: 8 [ 292.833045][ T979] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 292.855576][ T979] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 292.878676][ T979] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 292.920418][ T979] usb 1-1: config 250 has no interface number 0 [ 292.942126][ T979] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 292.961061][ T979] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 292.978181][ T979] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 293.009610][ T979] usb 1-1: config 250 interface 228 has no altsetting 0 [ 293.034466][ T979] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 293.050572][ T979] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 293.062041][ T979] usb 1-1: Product: syz [ 293.069427][ T979] usb 1-1: SerialNumber: syz [ 293.120661][ T979] hub 1-1:250.228: bad descriptor, ignoring hub [ 293.147820][ T979] hub 1-1:250.228: probe with driver hub failed with error -5 [ 293.515465][ T979] usb 1-1: USB disconnect, device number 6 [ 294.991670][ T7738] __vm_enough_memory: pid: 7738, comm: syz.3.527, bytes: 4115879641088 not enough memory for the allocation [ 295.887446][ T5824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 295.899206][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: kworker/u9:4 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 295.899255][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.899269][ T5824] Workqueue: hci0 hci_rx_work [ 295.899302][ T5824] Call Trace: [ 295.899310][ T5824] [ 295.899321][ T5824] dump_stack_lvl+0x189/0x250 [ 295.899365][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.899395][ T5824] ? __pfx__printk+0x10/0x10 [ 295.899428][ T5824] ? kernfs_path_from_node+0x2b/0x260 [ 295.899451][ T5824] ? kernfs_path_from_node+0x2b/0x260 [ 295.899469][ T5824] ? kernfs_path_from_node+0x2b/0x260 [ 295.899491][ T5824] ? kernfs_path_from_node+0x216/0x260 [ 295.899523][ T5824] sysfs_create_dir_ns+0x259/0x280 [ 295.899559][ T5824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 295.899594][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 295.899632][ T5824] kobject_add_internal+0x59f/0xb40 [ 295.899673][ T5824] kobject_add+0x155/0x220 [ 295.899708][ T5824] ? __pfx_kobject_add+0x10/0x10 [ 295.899737][ T5824] ? _raw_spin_unlock+0x28/0x50 [ 295.899763][ T5824] ? get_device_parent+0x366/0x3a0 [ 295.899790][ T5824] device_add+0x408/0xb50 [ 295.899818][ T5824] hci_conn_add_sysfs+0xd5/0x1e0 [ 295.899848][ T5824] le_conn_complete_evt+0xc3a/0x1220 [ 295.899899][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 295.899933][ T5824] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 295.899957][ T5824] ? __asan_memcpy+0x40/0x70 [ 295.899983][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 295.900009][ T5824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.900033][ T5824] ? skb_pull_data+0xfb/0x200 [ 295.900070][ T5824] hci_le_conn_complete_evt+0x187/0x450 [ 295.900112][ T5824] hci_event_packet+0x7a2/0x1270 [ 295.900147][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 295.900185][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 295.900215][ T5824] ? kcov_remote_start+0x4d3/0x7f0 [ 295.900236][ T5824] ? local_clock_noinstr+0xe0/0xe0 [ 295.900263][ T5824] ? hci_send_to_monitor+0xd7/0x4f0 [ 295.900287][ T5824] hci_rx_work+0x46a/0xe80 [ 295.900326][ T5824] ? process_scheduled_works+0x9ec/0x17a0 [ 295.900356][ T5824] process_scheduled_works+0xadb/0x17a0 [ 295.900422][ T5824] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.900472][ T5824] worker_thread+0x8a0/0xda0 [ 295.900542][ T5824] kthread+0x711/0x8a0 [ 295.900567][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 295.900594][ T5824] ? __pfx_kthread+0x10/0x10 [ 295.900616][ T5824] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.900636][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.900656][ T5824] ? __pfx_kthread+0x10/0x10 [ 295.900677][ T5824] ret_from_fork+0x3fc/0x770 [ 295.900705][ T5824] ? __pfx_ret_from_fork+0x10/0x10 [ 295.900738][ T5824] ? __switch_to_asm+0x39/0x70 [ 295.900754][ T5824] ? __switch_to_asm+0x33/0x70 [ 295.900770][ T5824] ? __pfx_kthread+0x10/0x10 [ 295.900791][ T5824] ret_from_fork_asm+0x1a/0x30 [ 295.900830][ T5824] [ 295.900964][ T5824] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 296.264003][ T5824] Bluetooth: hci0: failed to register connection device [ 297.197189][ T5824] ================================================================== [ 297.205438][ T7758] zonefs (nullb0) ERROR: Not a zoned block device [ 297.205541][ T5824] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 297.221209][ T5824] Read of size 8 at addr ffff8880206e8588 by task kworker/u9:4/5824 [ 297.229234][ T5824] [ 297.231607][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: kworker/u9:4 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 297.231633][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.231647][ T5824] Workqueue: hci0 hci_rx_work [ 297.231678][ T5824] Call Trace: [ 297.231689][ T5824] [ 297.231698][ T5824] dump_stack_lvl+0x189/0x250 [ 297.231727][ T5824] ? __virt_addr_valid+0x1c8/0x5c0 [ 297.231755][ T5824] ? rcu_is_watching+0x15/0xb0 [ 297.231781][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.231807][ T5824] ? rcu_is_watching+0x15/0xb0 [ 297.231832][ T5824] ? lock_release+0x4b/0x3e0 [ 297.231856][ T5824] ? __virt_addr_valid+0x1c8/0x5c0 [ 297.231884][ T5824] ? __virt_addr_valid+0x4a5/0x5c0 [ 297.231914][ T5824] print_report+0xd2/0x2b0 [ 297.231937][ T5824] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 297.231961][ T5824] kasan_report+0x118/0x150 [ 297.231990][ T5824] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 297.232018][ T5824] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 297.232044][ T5824] l2cap_connect_cfm+0x37a/0x1040 [ 297.232069][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 297.232093][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 297.232113][ T5824] hci_connect_cfm+0x92/0x140 [ 297.232143][ T5824] le_conn_complete_evt+0xcd3/0x1220 [ 297.232180][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 297.232211][ T5824] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 297.232236][ T5824] ? __asan_memcpy+0x40/0x70 [ 297.232259][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 297.232291][ T5824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.232314][ T5824] ? skb_pull_data+0xfb/0x200 [ 297.232345][ T5824] hci_le_conn_complete_evt+0x187/0x450 [ 297.232378][ T5824] hci_event_packet+0x7a2/0x1270 [ 297.232405][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 297.232434][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 297.232460][ T5824] ? kcov_remote_start+0x4d3/0x7f0 [ 297.232479][ T5824] ? local_clock_noinstr+0xe0/0xe0 [ 297.232502][ T5824] ? hci_send_to_monitor+0xd7/0x4f0 [ 297.232522][ T5824] hci_rx_work+0x46a/0xe80 [ 297.232551][ T5824] ? process_scheduled_works+0x9ec/0x17a0 [ 297.232577][ T5824] process_scheduled_works+0xadb/0x17a0 [ 297.232616][ T5824] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.232650][ T5824] worker_thread+0x8a0/0xda0 [ 297.232688][ T5824] kthread+0x711/0x8a0 [ 297.232707][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 297.232733][ T5824] ? __pfx_kthread+0x10/0x10 [ 297.232751][ T5824] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.232771][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.232791][ T5824] ? __pfx_kthread+0x10/0x10 [ 297.232809][ T5824] ret_from_fork+0x3fc/0x770 [ 297.232834][ T5824] ? __pfx_ret_from_fork+0x10/0x10 [ 297.232859][ T5824] ? __switch_to_asm+0x39/0x70 [ 297.232876][ T5824] ? __switch_to_asm+0x33/0x70 [ 297.232892][ T5824] ? __pfx_kthread+0x10/0x10 [ 297.232910][ T5824] ret_from_fork_asm+0x1a/0x30 [ 297.232935][ T5824] [ 297.232943][ T5824] [ 297.519708][ T5824] Allocated by task 5824: [ 297.524057][ T5824] kasan_save_track+0x3e/0x80 [ 297.528778][ T5824] __kasan_kmalloc+0x93/0xb0 [ 297.533398][ T5824] __kmalloc_noprof+0x27a/0x4f0 [ 297.538369][ T5824] sk_prot_alloc+0xe7/0x220 [ 297.543064][ T5824] sk_alloc+0x3a/0x370 [ 297.547322][ T5824] bt_sock_alloc+0x3b/0x310 [ 297.551951][ T5824] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 297.557976][ T5824] l2cap_connect_cfm+0x37a/0x1040 [ 297.563009][ T5824] hci_connect_cfm+0x92/0x140 [ 297.567746][ T5824] le_conn_complete_evt+0xcd3/0x1220 [ 297.573250][ T5824] hci_le_conn_complete_evt+0x187/0x450 [ 297.578894][ T5824] hci_event_packet+0x7a2/0x1270 [ 297.583840][ T5824] hci_rx_work+0x46a/0xe80 [ 297.588271][ T5824] process_scheduled_works+0xadb/0x17a0 [ 297.593916][ T5824] worker_thread+0x8a0/0xda0 [ 297.598516][ T5824] kthread+0x711/0x8a0 [ 297.602710][ T5824] ret_from_fork+0x3fc/0x770 [ 297.607307][ T5824] ret_from_fork_asm+0x1a/0x30 [ 297.612185][ T5824] [ 297.614533][ T5824] Freed by task 7743: [ 297.618536][ T5824] kasan_save_track+0x3e/0x80 [ 297.623416][ T5824] kasan_save_free_info+0x46/0x50 [ 297.628448][ T5824] __kasan_slab_free+0x62/0x70 [ 297.633408][ T5824] kfree+0x18e/0x440 [ 297.637344][ T5824] __sk_destruct+0x4e1/0x660 [ 297.641989][ T5824] l2cap_sock_cleanup_listen+0xda/0x3e0 [ 297.647669][ T5824] l2cap_sock_release+0x5d/0x1d0 [ 297.652624][ T5824] sock_close+0xc0/0x240 [ 297.657110][ T5824] __fput+0x44c/0xa70 [ 297.661302][ T5824] task_work_run+0x1d4/0x260 [ 297.666004][ T5824] get_signal+0x11c5/0x1310 [ 297.670606][ T5824] arch_do_signal_or_restart+0x9a/0x750 [ 297.676171][ T5824] exit_to_user_mode_loop+0x75/0x110 [ 297.681479][ T5824] do_syscall_64+0x2bd/0x3b0 [ 297.686173][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.692112][ T5824] [ 297.694444][ T5824] The buggy address belongs to the object at ffff8880206e8000 [ 297.694444][ T5824] which belongs to the cache kmalloc-2k of size 2048 [ 297.708621][ T5824] The buggy address is located 1416 bytes inside of [ 297.708621][ T5824] freed 2048-byte region [ffff8880206e8000, ffff8880206e8800) [ 297.722611][ T5824] [ 297.725033][ T5824] The buggy address belongs to the physical page: [ 297.731452][ T5824] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x206e8 [ 297.740392][ T5824] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 297.749107][ T5824] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 297.756951][ T5824] page_type: f5(slab) [ 297.760978][ T5824] raw: 00fff00000000040 ffff88801a042000 ffffea0000d5a600 dead000000000002 [ 297.769719][ T5824] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 297.778703][ T5824] head: 00fff00000000040 ffff88801a042000 ffffea0000d5a600 dead000000000002 [ 297.787570][ T5824] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 297.796341][ T5824] head: 00fff00000000003 ffffea000081ba01 00000000ffffffff 00000000ffffffff [ 297.805045][ T5824] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 297.813808][ T5824] page dumped because: kasan: bad access detected [ 297.820223][ T5824] page_owner tracks the page as allocated [ 297.825945][ T5824] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4008829871, free_ts 0 [ 297.845945][ T5824] post_alloc_hook+0x240/0x2a0 [ 297.850751][ T5824] get_page_from_freelist+0x21c7/0x22a0 [ 297.856312][ T5824] __alloc_frozen_pages_noprof+0x181/0x370 [ 297.862212][ T5824] alloc_pages_mpol+0x232/0x4a0 [ 297.867107][ T5824] allocate_slab+0x8a/0x3b0 [ 297.871780][ T5824] ___slab_alloc+0xbfc/0x1480 [ 297.876469][ T5824] __kmalloc_cache_noprof+0x296/0x3d0 [ 297.882121][ T5824] acpi_ds_create_walk_state+0xd9/0x270 [ 297.887693][ T5824] acpi_ps_execute_method+0x220/0x7c0 [ 297.893183][ T5824] acpi_ns_evaluate+0x5a6/0xa20 [ 297.898057][ T5824] acpi_evaluate_object+0x53f/0xa10 [ 297.903474][ T5824] acpi_evaluate_integer+0xfc/0x270 [ 297.908715][ T5824] acpi_bus_get_status+0x14a/0x380 [ 297.913843][ T5824] acpi_bus_attach+0x232/0xbb0 [ 297.918770][ T5824] device_for_each_child+0x100/0x190 [ 297.924076][ T5824] acpi_dev_for_each_child+0x93/0xd0 [ 297.929460][ T5824] page_owner free stack trace missing [ 297.934834][ T5824] [ 297.937177][ T5824] Memory state around the buggy address: [ 297.942937][ T5824] ffff8880206e8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.951019][ T5824] ffff8880206e8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.959449][ T5824] >ffff8880206e8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.967944][ T5824] ^ [ 297.972286][ T5824] ffff8880206e8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.980703][ T5824] ffff8880206e8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.989042][ T5824] ================================================================== [ 298.292955][ T5824] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.300321][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: kworker/u9:4 Not tainted 6.15.0-syzkaller-02443-g015a99fa7665 #0 PREEMPT(full) [ 298.312520][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.322797][ T5824] Workqueue: hci0 hci_rx_work [ 298.327593][ T5824] Call Trace: [ 298.330876][ T5824] [ 298.333904][ T5824] dump_stack_lvl+0x99/0x250 [ 298.338598][ T5824] ? __asan_memcpy+0x40/0x70 [ 298.343301][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.348720][ T5824] ? __pfx__printk+0x10/0x10 [ 298.353619][ T5824] panic+0x2db/0x790 [ 298.357543][ T5824] ? __pfx_panic+0x10/0x10 [ 298.362067][ T5824] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 298.367967][ T5824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.374402][ T5824] ? print_memory_metadata+0x314/0x400 [ 298.380058][ T5824] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 298.386272][ T5824] check_panic_on_warn+0x89/0xb0 [ 298.391417][ T5824] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 298.397934][ T5824] end_report+0x78/0x160 [ 298.402265][ T5824] kasan_report+0x129/0x150 [ 298.406787][ T5824] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 298.412956][ T5824] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 298.419404][ T5824] l2cap_connect_cfm+0x37a/0x1040 [ 298.424623][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 298.430092][ T5824] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 298.435679][ T5824] hci_connect_cfm+0x92/0x140 [ 298.440372][ T5824] le_conn_complete_evt+0xcd3/0x1220 [ 298.445689][ T5824] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 298.451424][ T5824] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 298.457174][ T5824] ? __asan_memcpy+0x40/0x70 [ 298.461776][ T5824] ? __pfx___mutex_lock+0x10/0x10 [ 298.466817][ T5824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.473178][ T5824] ? skb_pull_data+0xfb/0x200 [ 298.478073][ T5824] hci_le_conn_complete_evt+0x187/0x450 [ 298.484180][ T5824] hci_event_packet+0x7a2/0x1270 [ 298.489247][ T5824] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 298.494575][ T5824] ? __pfx_hci_event_packet+0x10/0x10 [ 298.499981][ T5824] ? kcov_remote_start+0x4d3/0x7f0 [ 298.505110][ T5824] ? local_clock_noinstr+0xe0/0xe0 [ 298.510497][ T5824] ? hci_send_to_monitor+0xd7/0x4f0 [ 298.515983][ T5824] hci_rx_work+0x46a/0xe80 [ 298.520434][ T5824] ? process_scheduled_works+0x9ec/0x17a0 [ 298.526266][ T5824] process_scheduled_works+0xadb/0x17a0 [ 298.532120][ T5824] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.538382][ T5824] worker_thread+0x8a0/0xda0 [ 298.543170][ T5824] kthread+0x711/0x8a0 [ 298.547337][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 298.552562][ T5824] ? __pfx_kthread+0x10/0x10 [ 298.557167][ T5824] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.562376][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.567766][ T5824] ? __pfx_kthread+0x10/0x10 [ 298.572453][ T5824] ret_from_fork+0x3fc/0x770 [ 298.577060][ T5824] ? __pfx_ret_from_fork+0x10/0x10 [ 298.582248][ T5824] ? __switch_to_asm+0x39/0x70 [ 298.587117][ T5824] ? __switch_to_asm+0x33/0x70 [ 298.592146][ T5824] ? __pfx_kthread+0x10/0x10 [ 298.596744][ T5824] ret_from_fork_asm+0x1a/0x30 [ 298.601693][ T5824] [ 298.605514][ T5824] Kernel Offset: disabled [ 298.609936][ T5824] Rebooting in 86400 seconds..