last executing test programs: 1m4.122415246s ago: executing program 1 (id=437): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 1m3.353932417s ago: executing program 1 (id=440): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001000)=""/240, 0xf0}], 0x1}, 0x1a4}], 0x1, 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000083) 1m2.037713047s ago: executing program 1 (id=448): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid}]}}) 1m1.473984635s ago: executing program 1 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x111016, 0x0) 1m0.569788514s ago: executing program 1 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 59.517577731s ago: executing program 1 (id=470): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x54, 0x5}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "e5d2074e"}, @global=@item_012={0x1, 0x1, 0x5, "05"}]}}, 0x0}, 0x0) 58.628881711s ago: executing program 32 (id=470): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x54, 0x5}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x9, "e5d2074e"}, @global=@item_012={0x1, 0x1, 0x5, "05"}]}}, 0x0}, 0x0) 4.743700136s ago: executing program 4 (id=752): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e4101000000000000000000000000ac1414aa00000000e1"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.27428396s ago: executing program 4 (id=756): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a311"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) listen(r0, 0x0) shutdown(r0, 0x0) 4.01997752s ago: executing program 4 (id=757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) membarrier(0x10, 0x0) membarrier(0x8, 0x0) 2.421538625s ago: executing program 3 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x7080, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000003240)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x100000001, {0x7, 0x2b, 0x8001, 0x400, 0x7f, 0x4, 0x81, 0x101, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000140)='./file0\x00') 2.321764359s ago: executing program 2 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 1.962101302s ago: executing program 3 (id=771): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xe4a) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.764346661s ago: executing program 5 (id=773): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000018c0)=0x13) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xa, 0x4, 0x4, 0x5, 0x11, "3c16d79e4d269b4607000000665c3900"}) 1.751292689s ago: executing program 0 (id=774): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.554490809s ago: executing program 2 (id=775): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0xfecf) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18}}], 0x1, 0x4c0c0) read$FUSE(r1, &(0x7f0000002680)={0x2020}, 0x2020) 1.472560332s ago: executing program 5 (id=776): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.412875124s ago: executing program 4 (id=777): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.398826191s ago: executing program 0 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) 1.317113777s ago: executing program 3 (id=779): r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000a40)=""/29, 0x1d) getdents(r2, 0xfffffffffffffffd, 0xbb) 1.241962018s ago: executing program 2 (id=780): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.082010713s ago: executing program 4 (id=781): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.081821949s ago: executing program 5 (id=782): syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.044587727s ago: executing program 3 (id=783): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2d42, 0xb0) r1 = fanotify_init(0x4, 0x101801) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) 905.17836ms ago: executing program 2 (id=784): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 826.653513ms ago: executing program 5 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000057c000/0x2000)=nil, 0x2000}, 0x1}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 784.202194ms ago: executing program 4 (id=786): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000900)={0x0, 0x14, 0x6, "3d26dae29004"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 734.250685ms ago: executing program 0 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb00030000fb"], 0x830200) 681.777852ms ago: executing program 3 (id=788): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 659.174494ms ago: executing program 2 (id=789): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r1, &(0x7f0000000000)="9a9c94a4190e99829ee64c8477", 0xd, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) 594.429572ms ago: executing program 0 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = timerfd_create(0x9, 0x0) timerfd_gettime(r3, &(0x7f0000000040)) 541.453447ms ago: executing program 3 (id=791): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 439.642248ms ago: executing program 2 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 374.501942ms ago: executing program 5 (id=793): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 338.964365ms ago: executing program 0 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1008c66) r3 = eventfd(0xfffffff0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0xffff1000, 0x1, r3, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r3, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffff001, 0x0, 0x1, r2, 0x9}) 166.895801ms ago: executing program 5 (id=795): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xf47c34376c57618a}}]}}]}, 0x3c}}, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=796): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 90.254640][ T5824] cgroup: Unknown subsys name 'net' [ 90.515380][ T5824] cgroup: Unknown subsys name 'cpuset' [ 90.570102][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.953812][ T990] cfg80211: failed to load regulatory.db [ 92.634269][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.522930][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.526064][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.528970][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.534896][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.537116][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.538200][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.543144][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.562044][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.565242][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.566279][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.701874][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.703600][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.705079][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.706627][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.708569][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.785188][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.786945][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.805793][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.808768][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.823576][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.908512][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.917761][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.919194][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.938627][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.952714][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.616591][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.734277][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 97.020649][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 97.228755][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 97.457719][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.458903][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.459962][ T5835] bridge_slave_0: entered allmulticast mode [ 97.463434][ T5835] bridge_slave_0: entered promiscuous mode [ 97.568341][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.568458][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.568588][ T5835] bridge_slave_1: entered allmulticast mode [ 97.582901][ T5835] bridge_slave_1: entered promiscuous mode [ 97.631099][ T5156] Bluetooth: hci0: command tx timeout [ 97.709715][ T5156] Bluetooth: hci1: command tx timeout [ 97.737484][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 97.800773][ T5156] Bluetooth: hci2: command tx timeout [ 97.816291][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.816457][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.816633][ T5838] bridge_slave_0: entered allmulticast mode [ 97.819173][ T5838] bridge_slave_0: entered promiscuous mode [ 97.880086][ T5156] Bluetooth: hci3: command tx timeout [ 97.980613][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.980754][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.980963][ T5838] bridge_slave_1: entered allmulticast mode [ 97.983407][ T5838] bridge_slave_1: entered promiscuous mode [ 98.029711][ T5156] Bluetooth: hci4: command tx timeout [ 98.107530][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.383699][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.452266][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.452479][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.454842][ T5843] bridge_slave_0: entered allmulticast mode [ 98.456824][ T5843] bridge_slave_0: entered promiscuous mode [ 98.681315][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.682821][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.683025][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.683224][ T5843] bridge_slave_1: entered allmulticast mode [ 98.688960][ T5843] bridge_slave_1: entered promiscuous mode [ 99.055870][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.140550][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.140718][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.140858][ T5845] bridge_slave_0: entered allmulticast mode [ 99.143016][ T5845] bridge_slave_0: entered promiscuous mode [ 99.170588][ T5835] team0: Port device team_slave_0 added [ 99.303080][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.303239][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.303467][ T5845] bridge_slave_1: entered allmulticast mode [ 99.306388][ T5845] bridge_slave_1: entered promiscuous mode [ 99.403220][ T5835] team0: Port device team_slave_1 added [ 99.473983][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.709665][ T5156] Bluetooth: hci0: command tx timeout [ 99.762803][ T5838] team0: Port device team_slave_0 added [ 99.766367][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.790933][ T5156] Bluetooth: hci1: command tx timeout [ 99.869693][ T5156] Bluetooth: hci2: command tx timeout [ 99.924022][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.924274][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.924476][ T5847] bridge_slave_0: entered allmulticast mode [ 99.926610][ T5847] bridge_slave_0: entered promiscuous mode [ 99.934255][ T5838] team0: Port device team_slave_1 added [ 99.969465][ T5156] Bluetooth: hci3: command tx timeout [ 100.034965][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.109680][ T5156] Bluetooth: hci4: command tx timeout [ 100.233711][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.233726][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.233764][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.235271][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.235434][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.235630][ T5847] bridge_slave_1: entered allmulticast mode [ 100.237781][ T5847] bridge_slave_1: entered promiscuous mode [ 100.447352][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.448356][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.448366][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.448385][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.604218][ T5843] team0: Port device team_slave_0 added [ 100.761214][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.761232][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.761270][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.763924][ T5843] team0: Port device team_slave_1 added [ 100.887840][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.888747][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.888761][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.888787][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.973711][ T5845] team0: Port device team_slave_0 added [ 100.978393][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.066533][ T5845] team0: Port device team_slave_1 added [ 101.233198][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.233212][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.233231][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.705800][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.705817][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.705844][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.789515][ T5156] Bluetooth: hci0: command tx timeout [ 101.848989][ T5835] hsr_slave_0: entered promiscuous mode [ 101.856614][ T5835] hsr_slave_1: entered promiscuous mode [ 101.866074][ T5847] team0: Port device team_slave_0 added [ 101.879482][ T5156] Bluetooth: hci1: command tx timeout [ 101.950305][ T5156] Bluetooth: hci2: command tx timeout [ 101.952912][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.952928][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.952956][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.957543][ T5847] team0: Port device team_slave_1 added [ 102.029582][ T5156] Bluetooth: hci3: command tx timeout [ 102.094089][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.094107][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.094135][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.189618][ T5156] Bluetooth: hci4: command tx timeout [ 102.243970][ T5838] hsr_slave_0: entered promiscuous mode [ 102.245287][ T5838] hsr_slave_1: entered promiscuous mode [ 102.246039][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 102.246128][ T5838] Cannot create hsr debugfs directory [ 102.591129][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.591143][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.591161][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.841373][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.841389][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.841408][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.956705][ T5843] hsr_slave_0: entered promiscuous mode [ 102.957631][ T5843] hsr_slave_1: entered promiscuous mode [ 102.958295][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 102.958317][ T5843] Cannot create hsr debugfs directory [ 103.167973][ T5845] hsr_slave_0: entered promiscuous mode [ 103.168906][ T5845] hsr_slave_1: entered promiscuous mode [ 103.169846][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 103.169875][ T5845] Cannot create hsr debugfs directory [ 103.571079][ T5847] hsr_slave_0: entered promiscuous mode [ 103.573055][ T5847] hsr_slave_1: entered promiscuous mode [ 103.573950][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 103.573982][ T5847] Cannot create hsr debugfs directory [ 103.869556][ T5156] Bluetooth: hci0: command tx timeout [ 103.950415][ T5156] Bluetooth: hci1: command tx timeout [ 104.029653][ T5156] Bluetooth: hci2: command tx timeout [ 104.109644][ T5156] Bluetooth: hci3: command tx timeout [ 104.269650][ T5156] Bluetooth: hci4: command tx timeout [ 104.841388][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.878981][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.928169][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.971811][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.113258][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.145748][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.181176][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.236182][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.380207][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.427663][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.466707][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.517702][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.705462][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.738655][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.768878][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.834154][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.971099][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.033800][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.074706][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.113313][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.152844][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.225424][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.283852][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.285273][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.336618][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.387360][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.387575][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.477067][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.511940][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.541866][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.543482][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.602300][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.602447][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.666929][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.728933][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.729568][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.762429][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.801058][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.801235][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.965563][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.002853][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.051168][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.051872][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.106236][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.106394][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.199857][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.247973][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.249321][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.334616][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.334809][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.499160][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.654628][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.930422][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.004629][ T5835] veth0_vlan: entered promiscuous mode [ 108.083712][ T5838] veth0_vlan: entered promiscuous mode [ 108.106629][ T5835] veth1_vlan: entered promiscuous mode [ 108.185404][ T5838] veth1_vlan: entered promiscuous mode [ 108.223678][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.345646][ T5843] veth0_vlan: entered promiscuous mode [ 108.354424][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.384168][ T5835] veth0_macvtap: entered promiscuous mode [ 108.436673][ T5835] veth1_macvtap: entered promiscuous mode [ 108.447641][ T5843] veth1_vlan: entered promiscuous mode [ 108.465649][ T5838] veth0_macvtap: entered promiscuous mode [ 108.522461][ T5838] veth1_macvtap: entered promiscuous mode [ 108.595426][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.647555][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.663596][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.761277][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.764059][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.796759][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.797733][ T5843] veth0_macvtap: entered promiscuous mode [ 108.822864][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.850803][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.851431][ T5847] veth0_vlan: entered promiscuous mode [ 108.858544][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.869036][ T5843] veth1_macvtap: entered promiscuous mode [ 108.893341][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.962828][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.985498][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.092170][ T5847] veth1_vlan: entered promiscuous mode [ 109.269920][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.374100][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.433426][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.433452][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.485129][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.503181][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.525408][ T5845] veth0_vlan: entered promiscuous mode [ 109.526764][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.539037][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.552890][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.552910][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.692218][ T5847] veth0_macvtap: entered promiscuous mode [ 109.710246][ T5845] veth1_vlan: entered promiscuous mode [ 109.715445][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.715465][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.826393][ T5847] veth1_macvtap: entered promiscuous mode [ 109.927370][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.927391][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.077954][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.155090][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.155111][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.236144][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.291439][ T5953] evm: overlay not supported [ 110.427734][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.429345][ T5845] veth0_macvtap: entered promiscuous mode [ 110.444171][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.444189][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.444799][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.449170][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.465698][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.528634][ T5845] veth1_macvtap: entered promiscuous mode [ 110.941488][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.076934][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.137907][ T1109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.137998][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.138013][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.154676][ T1109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.156593][ T1109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.162458][ T1109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.524357][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.524379][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.900467][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.900488][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.230247][ T5156] Bluetooth: hci2: hcon ffff88803580c000 sent 1 < count 13 [ 112.274965][ T5975] Bluetooth: MGMT ver 1.23 [ 112.374396][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.374419][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.084252][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 113.140258][ T5985] Zero length message leads to an empty skb [ 113.296433][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 113.492999][ T3541] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.494388][ T3541] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.495161][ T3541] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.495824][ T3541] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.499778][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 113.774948][ T5998] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 113.777706][ T5156] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 113.777749][ T5156] CPU: 1 UID: 0 PID: 5156 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.777774][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.777787][ T5156] Workqueue: hci4 hci_rx_work [ 113.777827][ T5156] Call Trace: [ 113.777836][ T5156] [ 113.777845][ T5156] dump_stack_lvl+0x189/0x250 [ 113.777883][ T5156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.777914][ T5156] ? __pfx__printk+0x10/0x10 [ 113.777944][ T5156] ? kernfs_path_from_node+0x2c/0x280 [ 113.777965][ T5156] ? kernfs_path_from_node+0x243/0x280 [ 113.777984][ T5156] ? kernfs_path_from_node+0x2c/0x280 [ 113.778009][ T5156] sysfs_create_dir_ns+0x259/0x280 [ 113.778042][ T5156] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 113.778067][ T5156] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 113.778110][ T5156] ? rt_spin_unlock+0x65/0x80 [ 113.778141][ T5156] kobject_add_internal+0x5a5/0xb50 [ 113.778200][ T5156] kobject_add+0x155/0x220 [ 113.778252][ T5156] ? __pfx_kobject_add+0x10/0x10 [ 113.778310][ T5156] ? get_device_parent+0x370/0x3a0 [ 113.778348][ T5156] device_add+0x408/0xb50 [ 113.778386][ T5156] hci_conn_add_sysfs+0xd5/0x1e0 [ 113.778424][ T5156] le_conn_complete_evt+0xc3a/0x1220 [ 113.778468][ T5156] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 113.778498][ T5156] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 113.778528][ T5156] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.778562][ T5156] ? skb_pull_data+0xfb/0x200 [ 113.778590][ T5156] hci_le_conn_complete_evt+0x187/0x450 [ 113.778626][ T5156] hci_event_packet+0x78f/0x1200 [ 113.778653][ T5156] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 113.778682][ T5156] ? __pfx_hci_event_packet+0x10/0x10 [ 113.778704][ T5156] ? __pfx_migrate_enable+0x10/0x10 [ 113.778740][ T5156] ? hci_send_to_monitor+0xe2/0x570 [ 113.778773][ T5156] hci_rx_work+0x46a/0xe80 [ 113.778805][ T5156] ? process_scheduled_works+0x9ef/0x17b0 [ 113.778835][ T5156] process_scheduled_works+0xade/0x17b0 [ 113.778899][ T5156] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.778947][ T5156] worker_thread+0x8a0/0xda0 [ 113.779007][ T5156] kthread+0x70e/0x8a0 [ 113.779043][ T5156] ? __pfx_worker_thread+0x10/0x10 [ 113.779082][ T5156] ? __pfx_kthread+0x10/0x10 [ 113.779128][ T5156] ? __pfx_kthread+0x10/0x10 [ 113.779163][ T5156] ret_from_fork+0x3f9/0x770 [ 113.779195][ T5156] ? __pfx_ret_from_fork+0x10/0x10 [ 113.779232][ T5156] ? __switch_to_asm+0x39/0x70 [ 113.779252][ T5156] ? __switch_to_asm+0x33/0x70 [ 113.779271][ T5156] ? __pfx_kthread+0x10/0x10 [ 113.779305][ T5156] ret_from_fork_asm+0x1a/0x30 [ 113.779345][ T5156] [ 113.784913][ T5156] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.784972][ T5156] Bluetooth: hci4: failed to register connection device [ 114.427757][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.376465][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 115.553783][ T6011] block device autoloading is deprecated and will be removed. [ 116.108413][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.37'. [ 116.112046][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 116.801148][ T6060] netlink: 96 bytes leftover after parsing attributes in process `syz.3.42'. [ 117.813981][ T6079] loop9: detected capacity change from 0 to 7 [ 117.854576][ T6079] Dev loop9: unable to read RDB block 7 [ 117.854626][ T6079] loop9: unable to read partition table [ 117.854879][ T6079] loop9: partition table beyond EOD, truncated [ 117.854898][ T6079] loop_reread_partitions: partition scan of loop9 (x ) failed (rc=-5) [ 118.579462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.031244][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 121.026390][ T6120] team_slave_0: entered promiscuous mode [ 121.026465][ T6120] team_slave_1: entered promiscuous mode [ 121.028935][ T6120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.237891][ T6120] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 121.252920][ T5923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.276832][ T6124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 121.459262][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 121.504296][ T5923] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 121.504327][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.647915][ T5923] usb 5-1: config 0 descriptor?? [ 121.909057][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 121.952329][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.970653][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 121.970750][ T5923] usb 5-1: media controller created [ 122.024885][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.735193][ T6140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3742998066 (479103752448 ns) > initial count (440160584064 ns). Using initial count to start timer. [ 122.779450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.780096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.781261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.782410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.809432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.810311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.811508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.811736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.949883][ T5923] stb0899_attach: Driver disabled by Kconfig [ 122.950015][ T5923] az6027: no front-end attached [ 122.950015][ T5923] [ 123.258989][ T5923] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 123.275119][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 123.401513][ T5923] dvb-usb: schedule remote query interval to 400 msecs. [ 123.401548][ T5923] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 123.530565][ T5923] usb 5-1: USB disconnect, device number 2 [ 124.305862][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'. [ 124.305900][ T6156] netlink: 'syz.2.75': attribute type 7 has an invalid length. [ 124.305915][ T6156] netlink: 'syz.2.75': attribute type 8 has an invalid length. [ 124.305927][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 124.585731][ T5923] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 125.010432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.571767][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 129.758162][ T6231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.771512][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 129.893948][ T6231] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.944259][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.944278][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.944292][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.947470][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.947491][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.947505][ T9] usb 1-1: Product: syz [ 129.947515][ T9] usb 1-1: Manufacturer: syz [ 129.947525][ T9] usb 1-1: SerialNumber: syz [ 130.499578][ T9] usb 1-1: 0:2 : does not exist [ 130.590436][ T5156] Bluetooth: hci5: command 0x1003 tx timeout [ 130.593219][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.589413][ T9] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 131.831085][ T9] usb 1-1: USB disconnect, device number 2 [ 131.941130][ T6256] syz.3.108 uses obsolete (PF_INET,SOCK_PACKET) [ 134.539870][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.692529][ T5923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.692566][ T5923] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.692607][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.692630][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.761405][ T6275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.784189][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.230403][ T5923] usb 4-1: USB disconnect, device number 2 [ 135.873391][ T5902] kernel write not supported for file /dsp (pid: 5902 comm: kworker/1:4) [ 136.341645][ C0] Unknown status report in ack skb [ 136.381993][ T6350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.933349][ T6366] fuse: root generation should be zero [ 137.076173][ T6371] mmap: syz.2.134 (6371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.699914][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.852850][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.857161][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.857192][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.857214][ T5923] usb 4-1: Product: syz [ 137.857229][ T5923] usb 4-1: Manufacturer: syz [ 137.857245][ T5923] usb 4-1: SerialNumber: syz [ 138.007172][ T6397] capability: warning: `syz.4.141' uses 32-bit capabilities (legacy support in use) [ 138.044973][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.045079][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.983579][ T5923] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 138.983615][ T5923] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 138.983635][ T5923] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 139.208074][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 139.671879][ T5923] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 139.909629][ T5923] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 139.940145][ T5923] usb 4-1: USB disconnect, device number 3 [ 139.960833][ T5923] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 140.425883][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 140.977105][ T6437] sg_read: process 100 (syz.2.156) changed security contexts after opening file descriptor, this is not allowed. [ 141.787049][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.831360][ T6452] bridge_slave_1: left allmulticast mode [ 141.831393][ T6452] bridge_slave_1: left promiscuous mode [ 141.834099][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.002976][ T6452] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 143.391740][ T6488] netlink: 'syz.1.184': attribute type 12 has an invalid length. [ 143.443082][ C0] Unknown status report in ack skb [ 145.179727][ T2173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.326065][ T6523] all: renamed from lo (while UP) [ 145.333703][ T2173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.333742][ T2173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.333785][ T2173] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 145.333812][ T2173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.363622][ T2173] usb 2-1: config 0 descriptor?? [ 145.854057][ T2173] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 145.896188][ T2173] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 146.049712][ T2173] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 146.336528][ T6543] warning: `syz.0.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.889269][ T2173] usb 2-1: USB disconnect, device number 2 [ 149.729916][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.891183][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 149.926576][ T5901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 149.926612][ T5901] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.926651][ T5901] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.961597][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.961627][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.961648][ T5901] usb 2-1: Product: syz [ 149.961663][ T5901] usb 2-1: Manufacturer: syz [ 149.961677][ T5901] usb 2-1: SerialNumber: syz [ 149.979540][ T45] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.153308][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.153335][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.157945][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.158035][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.158057][ T45] usb 1-1: Product: syz [ 150.158071][ T45] usb 1-1: Manufacturer: syz [ 150.158086][ T45] usb 1-1: SerialNumber: syz [ 150.434821][ T6592] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 150.478018][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.524365][ T5901] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 150.818789][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.818819][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.177025][ T5900] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.177058][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.177088][ T5900] usb 5-1: SerialNumber: syz [ 154.692010][ T5901] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 154.852509][ T45] usb 1-1: 0:2 : does not exist [ 154.876087][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 154.999206][ T5901] usb 2-1: USB disconnect, device number 3 [ 155.058455][ T5900] usb 5-1: 0:2 : does not exist [ 155.139118][ T45] usb 1-1: USB disconnect, device number 3 [ 155.213631][ T5900] usb 5-1: USB disconnect, device number 3 [ 155.714218][ T6608] input: syz0 as /devices/virtual/input/input7 [ 155.893908][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 156.206485][ T6616] loop9: detected capacity change from 0 to 7 [ 156.207534][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.207661][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.207780][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.218281][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.218432][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.218561][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.218771][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.218845][ T6616] ldm_validate_partition_table(): Disk read failed. [ 156.218912][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.219040][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.219152][ T6616] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.219420][ T6616] Dev loop9: unable to read RDB block 0 [ 156.219750][ T6616] loop9: unable to read partition table [ 156.220019][ T6616] loop9: partition table beyond EOD, truncated [ 156.220056][ T6616] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 156.220056][ T6616] ) failed (rc=-5) [ 156.746700][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.879115][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 156.929604][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 156.939273][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.997019][ T5901] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 156.997049][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.997069][ T5901] usb 2-1: Product: syz [ 156.997083][ T5901] usb 2-1: Manufacturer: syz [ 156.997096][ T5901] usb 2-1: SerialNumber: syz [ 157.036475][ T5901] usb 2-1: config 0 descriptor?? [ 157.192828][ T6632] team1: entered promiscuous mode [ 157.192860][ T6632] team1: entered allmulticast mode [ 157.623514][ T5901] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 157.689468][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.873708][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 157.873773][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.873796][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.931463][ T45] usb 5-1: config 0 descriptor?? [ 157.989936][ T45] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 158.115080][ T5901] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 158.472055][ T5901] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 158.539921][ T5901] usb 2-1: USB disconnect, device number 4 [ 158.677582][ T6052] usb 5-1: USB disconnect, device number 4 [ 159.589570][ T2173] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.744713][ T2173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.744737][ T2173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.744753][ T2173] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.744782][ T2173] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.744798][ T2173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.748845][ T2173] usb 5-1: config 0 descriptor?? [ 160.255074][ T2173] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 160.349594][ T5156] Bluetooth: hci5: command 0xfc11 tx timeout [ 160.356080][ T59] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 160.562087][ T6052] usb 5-1: USB disconnect, device number 5 [ 161.155243][ T6677] tipc: Started in network mode [ 161.155268][ T6677] tipc: Node identity 7, cluster identity 4711 [ 161.155281][ T6677] tipc: Node number set to 7 [ 161.699506][ T2173] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.849492][ T2173] usb 1-1: Using ep0 maxpacket: 8 [ 161.855819][ T2173] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 161.855849][ T2173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.855869][ T2173] usb 1-1: Product: syz [ 161.855884][ T2173] usb 1-1: Manufacturer: syz [ 161.855898][ T2173] usb 1-1: SerialNumber: syz [ 161.904943][ T2173] usb 1-1: config 0 descriptor?? [ 162.121895][ T2173] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 162.653319][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 162.710050][ T6329] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.712344][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 162.715960][ T6329] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.810166][ T6329] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.810221][ T6329] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.360730][ T6052] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.555820][ T6052] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.555865][ T6052] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.555906][ T6052] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.555929][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.596886][ T2173] usb write operation failed. (-71) [ 163.621053][ T2173] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.621847][ T2173] dvbdev: DVB: registering new adapter (Terratec H7) [ 163.621989][ T2173] usb 1-1: media controller created [ 163.622812][ T2173] usb read operation failed. (-71) [ 163.623814][ T2173] usb write operation failed. (-71) [ 163.671024][ T2173] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 163.676834][ T2173] usb 1-1: USB disconnect, device number 4 [ 163.710593][ T6713] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.749947][ T6052] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.945340][ T6052] usb 5-1: USB disconnect, device number 6 [ 164.709771][ T5923] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.905357][ T5923] usb 1-1: config 3 has an invalid interface number: 168 but max is 0 [ 164.905385][ T5923] usb 1-1: config 3 has no interface number 0 [ 164.905436][ T5923] usb 1-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 164.905462][ T5923] usb 1-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 164.905489][ T5923] usb 1-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 164.905530][ T5923] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 164.905553][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.996538][ T6715] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.182035][ T5923] usb 1-1: string descriptor 0 read error: -71 [ 166.187549][ T5923] keyspan 1-1:3.168: Keyspan 2 port adapter converter detected [ 166.188033][ T5923] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 1 [ 166.234004][ T5923] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 84 [ 166.234091][ T5923] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 2 [ 166.255587][ T5923] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 166.258267][ T5923] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 88 [ 166.258370][ T5923] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 6 [ 166.285125][ T5923] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 166.320456][ T5923] usb 1-1: USB disconnect, device number 5 [ 166.336732][ T5923] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 166.362508][ T5923] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 166.363474][ T5923] keyspan 1-1:3.168: device disconnected [ 166.869210][ T6738] loop6: detected capacity change from 0 to 7 [ 166.885467][ T6738] Dev loop6: unable to read RDB block 7 [ 166.885511][ T6738] loop6: AHDI p1 p2 p3 [ 166.885542][ T6738] loop6: partition table partially beyond EOD, truncated [ 166.885662][ T6738] loop6: p1 start 1405162169 is beyond EOD, truncated [ 166.885681][ T6738] loop6: p2 size 46 extends beyond EOD, truncated [ 167.379050][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 167.499237][ T59] Bluetooth: hci4: link tx timeout [ 167.500441][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.503211][ T59] Bluetooth: hci4: killing stalled connection 00:00:00:00:00:00 [ 167.543049][ T59] Bluetooth: hci4: link tx timeout [ 167.543070][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.543086][ T59] Bluetooth: hci4: killing stalled connection 00:00:00:00:00:00 [ 167.933330][ T6769] trusted_key: syz.3.287 sent an empty control message without MSG_MORE. [ 168.759555][ T2173] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 168.840019][ T6795] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.912005][ T2173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.912040][ T2173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 168.915198][ T2173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.915227][ T2173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.915247][ T2173] usb 3-1: Product: syz [ 168.915262][ T2173] usb 3-1: Manufacturer: syz [ 168.915277][ T2173] usb 3-1: SerialNumber: syz [ 168.980134][ T6789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.549674][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 170.136146][ T2173] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 170.136265][ T2173] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 170.635779][ T2173] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 170.668935][ T2173] usb 3-1: USB disconnect, device number 2 [ 170.691889][ T2173] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 172.295394][ T6846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.435925][ T5915] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 174.492055][ T5915] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.735263][ T6899] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 175.250966][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.434647][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 175.599161][ T45] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 175.599203][ T45] usb 5-1: config 0 has no interface number 0 [ 175.651181][ T45] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 175.651211][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.651231][ T45] usb 5-1: Product: syz [ 175.651245][ T45] usb 5-1: Manufacturer: syz [ 175.651260][ T45] usb 5-1: SerialNumber: syz [ 175.703220][ T45] usb 5-1: config 0 descriptor?? [ 175.772938][ T45] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 176.303110][ T45] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 176.341883][ T45] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 176.597811][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 176.602683][ T2173] usb 5-1: USB disconnect, device number 7 [ 176.642995][ T2173] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 176.677850][ T2173] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 176.678557][ T2173] quatech2 5-1:0.51: device disconnected [ 177.429543][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.589429][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 177.592861][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.592919][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.592966][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.592989][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.593013][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.594735][ T45] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.594762][ T45] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.594784][ T45] usb 1-1: Manufacturer: syz [ 177.620671][ T45] usb 1-1: config 0 descriptor?? [ 178.092248][ T45] rc_core: IR keymap rc-hauppauge not found [ 178.092272][ T45] Registered IR keymap rc-empty [ 178.092923][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.117080][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.146772][ T45] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 178.184408][ T45] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 178.238068][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.386358][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.400765][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.419683][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.486743][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.614257][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.630154][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.649699][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.688200][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.824877][ T45] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 178.865890][ T45] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 178.865908][ T45] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.900189][ T45] usb 1-1: USB disconnect, device number 6 [ 180.861618][ T6965] netlink: 452 bytes leftover after parsing attributes in process `syz.2.362'. [ 181.146360][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146397][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146424][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146451][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146479][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146506][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146533][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146560][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146587][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.146614][ T45] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 181.252965][ T45] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 182.172166][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 182.628212][ T38] audit: type=1326 audit(1756888924.304:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6968 comm="syz.1.364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b868eebe9 code=0x0 [ 184.640620][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640671][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640706][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640744][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640779][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640813][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640845][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.640895][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 184.917873][ T7033] Illegal XDP return value 4294967274 on prog (id 58) dev syz_tun, expect packet loss! [ 187.120201][ T7077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.148459][ T7077] overlayfs: failed lookup in lower (/, name='bus', err=-66): unsupported object type [ 187.612994][ T7087] __nla_validate_parse: 44 callbacks suppressed [ 187.613022][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 187.815373][ T6930] syz.3.351 (6930): drop_caches: 1 [ 187.959687][ T2173] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.144224][ T2173] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 188.144810][ T2173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.144835][ T2173] usb 1-1: config 0 has no interface number 0 [ 188.144875][ T2173] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 188.144955][ T2173] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 188.199240][ T2173] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 188.199262][ T2173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.199276][ T2173] usb 1-1: Product: syz [ 188.199298][ T2173] usb 1-1: Manufacturer: syz [ 188.199308][ T2173] usb 1-1: SerialNumber: syz [ 188.255004][ T2173] usb 1-1: config 0 descriptor?? [ 188.267643][ T2173] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 188.517924][ T9] usb 1-1: USB disconnect, device number 7 [ 190.265726][ T7125] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 190.311789][ T9] IPVS: starting estimator thread 0... [ 190.406925][ T7133] IPVS: using max 7 ests per chain, 16800 per kthread [ 190.722021][ T7150] tipc: Failed to remove unknown binding: 66,1,1/0:4037228858/4037228860 [ 190.722066][ T7150] tipc: Failed to remove unknown binding: 66,1,1/0:4037228858/4037228860 [ 190.741691][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 190.988637][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.149932][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 191.157367][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 191.157974][ T9] usb 5-1: config 0 has no interface number 0 [ 191.158027][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.158054][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 191.162512][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 191.162542][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.162566][ T9] usb 5-1: Product: syz [ 191.162582][ T9] usb 5-1: Manufacturer: syz [ 191.162598][ T9] usb 5-1: SerialNumber: syz [ 191.264233][ T9] usb 5-1: config 0 descriptor?? [ 191.390020][ T7160] netlink: 'syz.0.438': attribute type 15 has an invalid length. [ 191.874156][ T9] appletouch 5-1:0.85: Geyser mode initialized. [ 191.876537][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input10 [ 192.090335][ T6052] usb 5-1: USB disconnect, device number 8 [ 192.343975][ T6052] appletouch 5-1:0.85: input: appletouch disconnected [ 193.041207][ T7180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.615965][ T7205] loop2: detected capacity change from 0 to 7 [ 194.629704][ T7205] Dev loop2: unable to read RDB block 7 [ 194.629750][ T7205] loop2: unable to read partition table [ 194.629994][ T7205] loop2: partition table beyond EOD, truncated [ 194.630012][ T7205] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 196.532019][ T6300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.131398][ T7253] sctp: [Deprecated]: syz.0.477 (pid 7253) Use of int in max_burst socket option. [ 197.131398][ T7253] Use struct sctp_assoc_value instead [ 197.172545][ T6300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.480911][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.502951][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.504545][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.508076][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.508906][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.607696][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'. [ 197.746374][ T6300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.277857][ T6300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.502696][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.502779][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.544426][ T7289] syz.2.490 (7289) used greatest stack depth: 18488 bytes left [ 199.629765][ T5156] Bluetooth: hci2: command tx timeout [ 199.652557][ T6300] bridge_slave_1: left allmulticast mode [ 199.654250][ T6300] bridge_slave_1: left promiscuous mode [ 199.656931][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.792629][ T6300] bridge_slave_0: left allmulticast mode [ 199.792662][ T6300] bridge_slave_0: left promiscuous mode [ 199.792926][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.709688][ T5156] Bluetooth: hci2: command tx timeout [ 203.112909][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.171725][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.194328][ T6300] bond0 (unregistering): Released all slaves [ 203.540928][ T38] audit: type=1326 audit(1756888945.214:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7328 comm="syz.2.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51d1f5ebe9 code=0x0 [ 203.789564][ T5156] Bluetooth: hci2: command tx timeout [ 204.714079][ T7260] chnl_net:caif_netlink_parms(): no params data found [ 205.599584][ T6300] hsr_slave_0: left promiscuous mode [ 205.624456][ T6300] hsr_slave_1: left promiscuous mode [ 205.625941][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.626038][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.678106][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.678131][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.879955][ T5156] Bluetooth: hci2: command tx timeout [ 206.103817][ T6300] team_slave_0: left promiscuous mode [ 206.103893][ T6300] team_slave_1: left promiscuous mode [ 206.135888][ T6300] veth1_macvtap: left promiscuous mode [ 206.136189][ T6300] veth0_macvtap: left promiscuous mode [ 206.138974][ T6300] veth1_vlan: left promiscuous mode [ 206.218010][ T6300] veth0_vlan: left promiscuous mode [ 210.111133][ T6052] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.266351][ T6052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.266390][ T6052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.266413][ T6052] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.266465][ T6052] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.266489][ T6052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.272560][ T6052] usb 4-1: config 0 descriptor?? [ 210.725346][ T6052] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 211.159640][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 211.420471][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 212.846125][ T6052] usb 4-1: USB disconnect, device number 4 [ 213.808645][ T38] audit: type=1326 audit(1756888955.484:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7417 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b90f5ebe9 code=0x7ffc0000 [ 213.834312][ T38] audit: type=1326 audit(1756888955.484:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7417 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f6b90f5ebe9 code=0x7ffc0000 [ 213.836954][ T38] audit: type=1326 audit(1756888955.484:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7417 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b90f5ebe9 code=0x7ffc0000 [ 214.279523][ T6052] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 214.449500][ T6052] usb 1-1: Using ep0 maxpacket: 16 [ 214.452081][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.452111][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.452134][ T6052] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.452176][ T6052] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.452199][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.457806][ T6052] usb 1-1: config 0 descriptor?? [ 214.618040][ T7424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.666568][ T7424] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 214.695514][ T7424] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 214.960243][ T6052] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input11 [ 215.072137][ T6052] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 215.133239][ T6052] usb 1-1: USB disconnect, device number 8 [ 215.366310][ T5902] infiniband syz1: ib_query_port failed (-19) [ 215.788634][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.788872][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.789093][ T7260] bridge_slave_0: entered allmulticast mode [ 215.810600][ T7431] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 215.810620][ T7431] netlink: 'syz.4.542': attribute type 4 has an invalid length. [ 215.810633][ T7431] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.542'. [ 215.844661][ T7260] bridge_slave_0: entered promiscuous mode [ 215.848587][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.848809][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.849006][ T7260] bridge_slave_1: entered allmulticast mode [ 215.888511][ T7260] bridge_slave_1: entered promiscuous mode [ 216.104444][ T7438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.664703][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.699210][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.202633][ T7260] team0: Port device team_slave_0 added [ 217.214397][ T7260] team0: Port device team_slave_1 added [ 217.660098][ T7457] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 217.701587][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.701605][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.701634][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.740891][ T6300] IPVS: stop unused estimator thread 0... [ 217.805287][ T7462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.938774][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 217.956539][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.956556][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.956582][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.951094][ T7260] hsr_slave_0: entered promiscuous mode [ 218.956434][ T7260] hsr_slave_1: entered promiscuous mode [ 218.960319][ T7260] debugfs: 'hsr0' already exists in 'hsr' [ 218.960352][ T7260] Cannot create hsr debugfs directory [ 219.984595][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 220.140001][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 220.713360][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 220.846066][ T7260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.028079][ T7260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.126227][ T7260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.181616][ T7260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.339469][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 221.528865][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 221.528902][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 221.528946][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.528969][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.645447][ T7514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.664268][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.012618][ T5923] usb 3-1: USB disconnect, device number 3 [ 222.034665][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 222.034800][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 222.034826][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 222.190079][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.353915][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.421339][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.425592][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.429711][ T5902] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 222.509227][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.509550][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.600150][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.600178][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.607580][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.607609][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.607630][ T5902] usb 4-1: Product: syz [ 222.607644][ T5902] usb 4-1: Manufacturer: syz [ 222.607659][ T5902] usb 4-1: SerialNumber: syz [ 222.886341][ T5902] usb 4-1: 0:2 : does not exist [ 222.909574][ T5902] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 223.025508][ T5902] usb 4-1: USB disconnect, device number 5 [ 223.541389][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.559477][ T5901] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 223.723685][ T5901] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.723720][ T5901] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.723744][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.723790][ T5901] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 223.723813][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.734720][ T5901] usb 3-1: config 0 descriptor?? [ 224.305911][ T5901] uclogic 0003:28BD:0075.0007: interface is invalid, ignoring [ 224.520756][ T5902] usb 3-1: USB disconnect, device number 4 [ 224.622677][ T7260] veth0_vlan: entered promiscuous mode [ 224.652325][ T7260] veth1_vlan: entered promiscuous mode [ 224.699511][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.734006][ T7260] veth0_macvtap: entered promiscuous mode [ 224.746853][ T7260] veth1_macvtap: entered promiscuous mode [ 224.809012][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.849555][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 224.867745][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.889772][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.889806][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.889845][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 224.889869][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.895093][ T9] usb 5-1: config 0 descriptor?? [ 224.915575][ T6299] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.923838][ T6299] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.932338][ T6299] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.953247][ T6299] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.359823][ T9] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 225.578073][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.578095][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.583652][ T9] usb 5-1: USB disconnect, device number 9 [ 226.411142][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.411183][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.123893][ T7583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.995012][ T7596] capability: warning: `syz.3.597' uses deprecated v2 capabilities in a way that may be insecure [ 228.019168][ T7596] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 228.019195][ T7596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.019207][ T7596] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 228.251804][ T6052] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.406912][ T6052] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.413718][ T6052] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.432289][ T6052] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.432320][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.432341][ T6052] usb 5-1: Product: syz [ 228.432355][ T6052] usb 5-1: Manufacturer: syz [ 228.432370][ T6052] usb 5-1: SerialNumber: syz [ 228.839094][ T6052] usb 5-1: USB disconnect, device number 10 [ 229.422337][ T7627] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.611'. [ 229.485479][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.609'. [ 229.831667][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 230.284702][ T7655] bridge_slave_0: left allmulticast mode [ 230.284735][ T7655] bridge_slave_0: left promiscuous mode [ 230.285004][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.403349][ T7655] bridge_slave_1: left allmulticast mode [ 230.403384][ T7655] bridge_slave_1: left promiscuous mode [ 230.403644][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.561380][ T7655] bond0: (slave bond_slave_0): Releasing backup interface [ 230.739888][ T7655] bond0: (slave bond_slave_1): Releasing backup interface [ 230.825927][ T7655] team0: Port device team_slave_0 removed [ 230.929022][ T7655] team0: Port device team_slave_1 removed [ 230.932796][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.932831][ T7655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.969943][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.969975][ T7655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.999062][ T7677] loop2: detected capacity change from 0 to 7 [ 231.070013][ T7677] Dev loop2: unable to read RDB block 7 [ 231.070059][ T7677] loop2: unable to read partition table [ 231.070262][ T7677] loop2: partition table beyond EOD, truncated [ 231.070281][ T7677] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 232.051527][ T7690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.316434][ T7703] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 232.599699][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.779571][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 232.782833][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 232.782866][ T5902] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 232.782890][ T5902] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.790996][ T5902] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.791030][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.791056][ T5902] usb 6-1: SerialNumber: syz [ 232.809840][ T7698] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.833281][ T7703] bond1: entered promiscuous mode [ 232.841880][ T7703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.011208][ T7707] bond1: (slave bridge1): making interface the new active one [ 233.011234][ T7707] bridge1: entered promiscuous mode [ 233.013288][ T7707] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 233.139495][ T5923] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 233.289497][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 233.302522][ T5923] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 233.302547][ T5923] usb 1-1: config 0 has no interface number 0 [ 233.335955][ T5923] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 233.335987][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.336008][ T5923] usb 1-1: Product: syz [ 233.336023][ T5923] usb 1-1: Manufacturer: syz [ 233.336038][ T5923] usb 1-1: SerialNumber: syz [ 233.375382][ T5923] usb 1-1: config 0 descriptor?? [ 233.433216][ T5923] smsc95xx v2.0.0 [ 233.534240][ T5902] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 233.567390][ T5902] usb 6-1: USB disconnect, device number 2 [ 233.905186][ T5923] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 233.905216][ T5923] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 234.498990][ T7746] netlink: 'syz.4.654': attribute type 3 has an invalid length. [ 234.672300][ T7746] netlink: 'syz.4.654': attribute type 3 has an invalid length. [ 234.770274][ T5923] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 234.770650][ T5923] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 234.823553][ T5923] usb 1-1: USB disconnect, device number 9 [ 235.371740][ T7759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.829896][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.664'. [ 235.869492][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 235.965459][ T2173] kernel write not supported for file /367/attr/exec (pid: 2173 comm: kworker/0:2) [ 236.049509][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 236.052470][ T45] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 236.052499][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.059129][ T45] usb 5-1: config 0 descriptor?? [ 236.110340][ T45] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 237.608840][ T45] usb 5-1: USB disconnect, device number 11 [ 237.621164][ T7801] overlay: ./file0 is not a directory [ 238.242540][ T7805] syz_tun: entered allmulticast mode [ 238.447081][ T7804] syz_tun: left allmulticast mode [ 239.242415][ T7837] smc: net device bond0 applied user defined pnetid SYZ0 [ 239.247595][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 239.270516][ T7837] smc: net device bond0 erased user defined pnetid SYZ0 [ 239.441325][ T7839] syzkaller0: entered allmulticast mode [ 239.699246][ T5902] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.879425][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 239.911701][ T5902] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.911738][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.911777][ T5902] usb 6-1: Product: syz [ 239.911793][ T5902] usb 6-1: Manufacturer: syz [ 239.911808][ T5902] usb 6-1: SerialNumber: syz [ 239.943788][ T5902] usb 6-1: config 0 descriptor?? [ 240.174799][ T5902] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.572177][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 240.678224][ T7854] gtp0: entered promiscuous mode [ 240.678258][ T7854] gtp0: entered allmulticast mode [ 241.186655][ T5902] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 241.217078][ T5902] usb 6-1: USB disconnect, device number 3 [ 241.449460][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 241.649485][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 241.651930][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.651961][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.652001][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.652026][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.663505][ T45] usb 4-1: config 0 descriptor?? [ 241.717624][ T45] hub 4-1:0.0: USB hub found [ 241.875883][ T45] hub 4-1:0.0: 1 port detected [ 242.527912][ T45] hub 4-1:0.0: activate --> -90 [ 242.900067][ T5902] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 242.940883][ T45] usb 4-1-port1: config error [ 242.946341][ T45] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 242.946358][ T45] usb 4-1-port1: connect-debounce failed [ 242.946802][ T5901] usb 4-1: USB disconnect, device number 6 [ 242.946999][ T45] usb 4-1-port1: cannot disable (err = -71) [ 243.079420][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 243.084747][ T5902] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 243.084768][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.084782][ T5902] usb 5-1: Product: syz [ 243.084792][ T5902] usb 5-1: Manufacturer: syz [ 243.084802][ T5902] usb 5-1: SerialNumber: syz [ 243.131825][ T5902] usb 5-1: config 0 descriptor?? [ 243.737193][ T5902] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 243.765271][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.768500][ T5902] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 243.790321][ T5902] usb 5-1: media controller created [ 243.868013][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.957241][ T5902] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 243.957256][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 244.020052][ T38] audit: type=1800 audit(1756888985.584:7): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.710" name="bus" dev="overlay" ino=161 res=0 errno=0 [ 244.210172][ T5902] usb 5-1: USB disconnect, device number 12 [ 244.331963][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 244.396221][ T7898] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 244.670012][ T38] audit: type=1326 audit(1756888986.354:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.672225][ T38] audit: type=1326 audit(1756888986.354:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.675291][ T38] audit: type=1326 audit(1756888986.354:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.687878][ T38] audit: type=1326 audit(1756888986.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.690044][ T38] audit: type=1326 audit(1756888986.374:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.690632][ T38] audit: type=1326 audit(1756888986.374:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.690926][ T38] audit: type=1326 audit(1756888986.374:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.691232][ T38] audit: type=1326 audit(1756888986.374:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7903 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc171ebe9 code=0x7ffc0000 [ 244.899503][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 245.054196][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.054245][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.054268][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.076832][ T9] usb 6-1: config 0 descriptor?? [ 245.322388][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 245.322523][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 245.332314][ T9] usb 6-1: USB disconnect, device number 4 [ 245.859646][ T5900] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 246.010549][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 246.013732][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.013778][ T5900] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 246.013803][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.060821][ T5900] usb 6-1: config 0 descriptor?? [ 246.401313][ T7932] pim6reg1: entered allmulticast mode [ 246.490381][ T5900] kye 0003:0458:5016.0009: control desc unexpectedly large [ 246.527649][ T5900] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0009/input/input12 [ 246.654795][ T5900] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0009/input/input13 [ 246.775134][ T5900] kye 0003:0458:5016.0009: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 247.248794][ T5915] usb 6-1: USB disconnect, device number 5 [ 248.079513][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 248.232095][ T9] usb 1-1: config 0 has no interfaces? [ 248.232152][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 248.232177][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.268628][ T9] usb 1-1: config 0 descriptor?? [ 248.540218][ T5902] usb 1-1: USB disconnect, device number 10 [ 249.443845][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 251.662372][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 251.662436][ T38] audit: type=1800 audit(1756888993.304:26): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.755" name="/" dev="fuse" ino=1 res=0 errno=0 [ 252.113625][ T8024] netlink: 'syz.5.763': attribute type 1 has an invalid length. [ 252.273428][ T8024] bond1: (slave geneve2): making interface the new active one [ 252.274375][ T8024] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 252.278922][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.278970][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.279008][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.279045][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 254.016494][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 254.025380][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 254.064427][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.781'. [ 254.117331][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.781'. [ 254.510560][ T5923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 254.665007][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 254.667656][ T5923] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 254.667683][ T5923] usb 5-1: config 0 has no interface number 0 [ 254.667731][ T5923] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 254.667757][ T5923] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 254.667782][ T5923] usb 5-1: config 0 interface 41 has no altsetting 0 [ 254.719774][ T5923] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 254.719806][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.719828][ T5923] usb 5-1: Product: syz [ 254.719844][ T5923] usb 5-1: Manufacturer: syz [ 254.719859][ T5923] usb 5-1: SerialNumber: syz [ 254.768831][ T5923] usb 5-1: config 0 descriptor?? [ 254.776072][ T8077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 254.776739][ T8077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.008694][ T8077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.008917][ T8077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.070464][ C0] ------------[ cut here ]------------ [ 255.070488][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 255.070531][ C0] Modules linked in: [ 255.070562][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.070589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.070603][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 255.070629][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 255.070648][ C0] RSP: 0000:ffffc900001577a0 EFLAGS: 00010246 [ 255.070667][ C0] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801c2a5940 [ 255.070683][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 255.070697][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 255.070710][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000009 [ 255.070725][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027924468 [ 255.070739][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 255.070757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.070772][ C0] CR2: 00007f6b8f1bdf98 CR3: 0000000040016000 CR4: 00000000003526f0 [ 255.070791][ C0] Call Trace: [ 255.070800][ C0] [ 255.070825][ C0] ? __pfx_est_timer+0x10/0x10 [ 255.070872][ C0] call_timer_fn+0x17e/0x5f0 [ 255.070904][ C0] ? __pfx_est_timer+0x10/0x10 [ 255.070928][ C0] ? call_timer_fn+0xbe/0x5f0 [ 255.070958][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 255.071000][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.071031][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.071058][ C0] ? __pfx_est_timer+0x10/0x10 [ 255.071086][ C0] __run_timer_base+0x648/0x970 [ 255.071139][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 255.071186][ C0] run_timer_softirq+0xb7/0x180 [ 255.071215][ C0] handle_softirqs+0x22f/0x710 [ 255.071256][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 255.071298][ C0] run_ktimerd+0xcf/0x190 [ 255.071329][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 255.071358][ C0] ? schedule+0x91/0x360 [ 255.071395][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 255.071422][ C0] smpboot_thread_fn+0x53f/0xa60 [ 255.071452][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 255.071491][ C0] kthread+0x70e/0x8a0 [ 255.071530][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 255.071558][ C0] ? __pfx_kthread+0x10/0x10 [ 255.071599][ C0] ? __pfx_kthread+0x10/0x10 [ 255.071635][ C0] ret_from_fork+0x3f9/0x770 [ 255.071669][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 255.071706][ C0] ? __switch_to_asm+0x39/0x70 [ 255.071727][ C0] ? __switch_to_asm+0x33/0x70 [ 255.071747][ C0] ? __pfx_kthread+0x10/0x10 [ 255.071783][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.071824][ C0] [ 255.071841][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.071857][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.071882][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.071896][ C0] Call Trace: [ 255.071904][ C0] [ 255.071913][ C0] dump_stack_lvl+0x99/0x250 [ 255.071948][ C0] ? __asan_memcpy+0x40/0x70 [ 255.071974][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.072008][ C0] ? __pfx__printk+0x10/0x10 [ 255.072049][ C0] vpanic+0x281/0x750 [ 255.072082][ C0] ? __pfx__printk+0x10/0x10 [ 255.072106][ C0] ? __pfx_vpanic+0x10/0x10 [ 255.072146][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 255.072191][ C0] panic+0xb9/0xc0 [ 255.072224][ C0] ? __pfx_panic+0x10/0x10 [ 255.072276][ C0] __warn+0x31b/0x4b0 [ 255.072307][ C0] ? est_timer+0x6dc/0x9f0 [ 255.072334][ C0] ? est_timer+0x6dc/0x9f0 [ 255.072359][ C0] report_bug+0x2be/0x4f0 [ 255.072387][ C0] ? est_timer+0x6dc/0x9f0 [ 255.072413][ C0] ? est_timer+0x6dc/0x9f0 [ 255.072437][ C0] ? est_timer+0x6de/0x9f0 [ 255.072461][ C0] handle_bug+0x84/0x160 [ 255.072497][ C0] exc_invalid_op+0x1a/0x50 [ 255.072531][ C0] asm_exc_invalid_op+0x1a/0x20 [ 255.072553][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 255.072578][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 255.072597][ C0] RSP: 0000:ffffc900001577a0 EFLAGS: 00010246 [ 255.072616][ C0] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801c2a5940 [ 255.072632][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 255.072646][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 255.072660][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000009 [ 255.072676][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888027924468 [ 255.072701][ C0] ? est_timer+0x6db/0x9f0 [ 255.072751][ C0] ? __pfx_est_timer+0x10/0x10 [ 255.072789][ C0] call_timer_fn+0x17e/0x5f0 [ 255.072819][ C0] ? __pfx_est_timer+0x10/0x10 [ 255.072843][ C0] ? call_timer_fn+0xbe/0x5f0 [ 255.072872][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 255.072914][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.072944][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.072972][ C0] ? __pfx_est_timer+0x10/0x10 [ 255.072998][ C0] __run_timer_base+0x648/0x970 [ 255.073043][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 255.073090][ C0] run_timer_softirq+0xb7/0x180 [ 255.073124][ C0] handle_softirqs+0x22f/0x710 [ 255.073162][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 255.073204][ C0] run_ktimerd+0xcf/0x190 [ 255.073236][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 255.073264][ C0] ? schedule+0x91/0x360 [ 255.073301][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 255.073328][ C0] smpboot_thread_fn+0x53f/0xa60 [ 255.073358][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 255.073397][ C0] kthread+0x70e/0x8a0 [ 255.073435][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 255.073463][ C0] ? __pfx_kthread+0x10/0x10 [ 255.073503][ C0] ? __pfx_kthread+0x10/0x10 [ 255.073538][ C0] ret_from_fork+0x3f9/0x770 [ 255.073571][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 255.073608][ C0] ? __switch_to_asm+0x39/0x70 [ 255.073627][ C0] ? __switch_to_asm+0x33/0x70 [ 255.073646][ C0] ? __pfx_kthread+0x10/0x10 [ 255.073680][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.073734][ C0] [ 255.074097][ C0] Kernel Offset: disabled