last executing test programs: 6.934731891s ago: executing program 4 (id=304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 6.604046282s ago: executing program 4 (id=307): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x9000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.909974243s ago: executing program 4 (id=315): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x2}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x3, 0x4, 0x3, 0xfc, 0xfe, 0x1, 0x7f, 0xe4b}, {0x1001, 0x3, 0x24, 0x5, 0xa, 0x7, 0x4, 0x4f, 0xfd, 0x70, 0x7, 0x2}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x9000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.491791623s ago: executing program 2 (id=324): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="fea5", 0x2}], 0x1) 4.367270049s ago: executing program 1 (id=325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.311953583s ago: executing program 4 (id=326): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x7}}, 0x30) 4.311677815s ago: executing program 2 (id=327): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x0) 4.04452176s ago: executing program 2 (id=329): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400000600"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 4.024557115s ago: executing program 4 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) 3.732648818s ago: executing program 3 (id=331): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000001e80)=""/4135, &(0x7f0000000140)=0x1027) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 3.729736139s ago: executing program 1 (id=332): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(0xffffffffffffffff, &(0x7f00000004c0)=""/85, 0x55) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(0xffffffffffffffff, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 3.493192335s ago: executing program 1 (id=334): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.267635733s ago: executing program 0 (id=335): socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.267072218s ago: executing program 1 (id=336): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x20000, {r0}}, 0x20) 2.49077962s ago: executing program 3 (id=337): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080), 0x0) 2.31969746s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000150a010400000000000000200a0000030909000000797a31000000000900020073797a30000000000900010073797a3100000000730008002f578452008bd7137842e3d514774740d410313dbb9907ea97dd3e5bc186a1a70e563280f435416b06e272b3f744421f7322fa14e594858147fcb6fc2369ab20b52a8d966a2b522d3463458d813c291260943f94ddf787499f26e55dc17b69ad8a9ebb77850cdb74e5bf821101b1ed00"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4c008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2.291240752s ago: executing program 0 (id=339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4000000000000001a01"], 0x100}, 0x0) 2.258665638s ago: executing program 3 (id=340): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x7}}, 0x30) 2.255767536s ago: executing program 1 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/12, 0xc) write(r0, &(0x7f0000000700)='\x00'/16, 0x10) 2.018798145s ago: executing program 0 (id=342): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='n', 0x1) 1.951979348s ago: executing program 3 (id=343): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.946123916s ago: executing program 1 (id=344): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r1, &(0x7f00000004c0)=""/85, 0x55) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a) 1.85242756s ago: executing program 0 (id=345): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x16) 1.520293401s ago: executing program 0 (id=346): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 1.369696897s ago: executing program 3 (id=347): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000001e80)=""/4135, &(0x7f0000000140)=0x1027) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.279698833s ago: executing program 0 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.006399128s ago: executing program 4 (id=349): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x8000009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0x3, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x3, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x7ff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 896.146748ms ago: executing program 2 (id=350): socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 68.111584ms ago: executing program 3 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 0s ago: executing program 2 (id=352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4000000000000001a01"], 0x100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 74.640037][ T5573] cgroup: Unknown subsys name 'net' [ 74.881730][ T5573] cgroup: Unknown subsys name 'cpuset' [ 74.936378][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.687165][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.165444][ T5588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.187000][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.201765][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.210732][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.223546][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.227894][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.228779][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.235162][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.252540][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.261090][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.261499][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.268509][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.270383][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.270800][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.273283][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.294635][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.302530][ T4902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.323205][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.343636][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.344343][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.406249][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.420751][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.423319][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.469448][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.470716][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.437284][ T5599] Bluetooth: hci1: command tx timeout [ 82.437406][ T5599] Bluetooth: hci2: command tx timeout [ 82.516717][ T5592] Bluetooth: hci4: command tx timeout [ 82.516829][ T5592] Bluetooth: hci3: command tx timeout [ 82.516908][ T5592] Bluetooth: hci0: command tx timeout [ 83.009762][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.010865][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.010984][ T5583] bridge_slave_0: entered allmulticast mode [ 83.012587][ T5583] bridge_slave_0: entered promiscuous mode [ 83.038633][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.038747][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.038891][ T5585] bridge_slave_0: entered allmulticast mode [ 83.042741][ T5585] bridge_slave_0: entered promiscuous mode [ 83.080598][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.080692][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.080812][ T5587] bridge_slave_0: entered allmulticast mode [ 83.082224][ T5587] bridge_slave_0: entered promiscuous mode [ 83.083612][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.083779][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.083937][ T5585] bridge_slave_1: entered allmulticast mode [ 83.100210][ T5585] bridge_slave_1: entered promiscuous mode [ 83.125465][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.127253][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.127448][ T5583] bridge_slave_1: entered allmulticast mode [ 83.129959][ T5583] bridge_slave_1: entered promiscuous mode [ 83.131582][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.131691][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.132207][ T5586] bridge_slave_0: entered allmulticast mode [ 83.134967][ T5586] bridge_slave_0: entered promiscuous mode [ 83.145100][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.145249][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.145457][ T5587] bridge_slave_1: entered allmulticast mode [ 83.148850][ T5587] bridge_slave_1: entered promiscuous mode [ 83.170370][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.170483][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.171002][ T5584] bridge_slave_0: entered allmulticast mode [ 83.173473][ T5584] bridge_slave_0: entered promiscuous mode [ 83.205697][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.205810][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.205965][ T5586] bridge_slave_1: entered allmulticast mode [ 83.208790][ T5586] bridge_slave_1: entered promiscuous mode [ 83.256391][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.256529][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.256673][ T5584] bridge_slave_1: entered allmulticast mode [ 83.263237][ T5584] bridge_slave_1: entered promiscuous mode [ 83.319418][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.342079][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.419778][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.422209][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.446904][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.450491][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.453363][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.487339][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.505151][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.535301][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.583468][ T5585] team0: Port device team_slave_0 added [ 83.603893][ T5583] team0: Port device team_slave_0 added [ 83.621404][ T5587] team0: Port device team_slave_0 added [ 83.623519][ T5585] team0: Port device team_slave_1 added [ 83.647346][ T5583] team0: Port device team_slave_1 added [ 83.648940][ T5586] team0: Port device team_slave_0 added [ 83.651080][ T5587] team0: Port device team_slave_1 added [ 83.679614][ T5584] team0: Port device team_slave_0 added [ 83.696469][ T5586] team0: Port device team_slave_1 added [ 83.723334][ T5584] team0: Port device team_slave_1 added [ 83.760630][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.760640][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.760653][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.791974][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.791990][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.792014][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.819167][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.819182][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.819205][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.822135][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.822149][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.822172][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.847641][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.847656][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.847679][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.849234][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.849246][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.849273][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.856676][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.856691][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.856714][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.876161][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.876177][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.876200][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.900419][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.900435][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.900458][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.923054][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.923070][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.923093][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.134532][ T5585] hsr_slave_0: entered promiscuous mode [ 84.138578][ T5585] hsr_slave_1: entered promiscuous mode [ 84.173060][ T5583] hsr_slave_0: entered promiscuous mode [ 84.174375][ T5583] hsr_slave_1: entered promiscuous mode [ 84.177579][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 84.177708][ T5583] Cannot create hsr debugfs directory [ 84.212154][ T5587] hsr_slave_0: entered promiscuous mode [ 84.213503][ T5587] hsr_slave_1: entered promiscuous mode [ 84.215535][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 84.217371][ T5587] Cannot create hsr debugfs directory [ 84.257825][ T5586] hsr_slave_0: entered promiscuous mode [ 84.259291][ T5586] hsr_slave_1: entered promiscuous mode [ 84.260171][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 84.260193][ T5586] Cannot create hsr debugfs directory [ 84.277561][ T5584] hsr_slave_0: entered promiscuous mode [ 84.278858][ T5584] hsr_slave_1: entered promiscuous mode [ 84.279749][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 84.279770][ T5584] Cannot create hsr debugfs directory [ 84.525773][ T5599] Bluetooth: hci2: command tx timeout [ 84.525805][ T5599] Bluetooth: hci1: command tx timeout [ 84.595790][ T5592] Bluetooth: hci0: command tx timeout [ 84.595832][ T5592] Bluetooth: hci4: command tx timeout [ 84.595908][ T5599] Bluetooth: hci3: command tx timeout [ 85.653533][ T5585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.721394][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.731683][ T5585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.769809][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.775376][ T5585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.819606][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.841492][ T5585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.881572][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.000346][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.040963][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.047346][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.068957][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.072344][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.123804][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.151151][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.179930][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.290929][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.329031][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.334559][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.360623][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.364200][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.400744][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.434302][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.466865][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.595906][ T5599] Bluetooth: hci2: command tx timeout [ 86.596545][ T5588] Bluetooth: hci1: command tx timeout [ 86.661653][ T5584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.675884][ T5599] Bluetooth: hci3: command tx timeout [ 86.675917][ T5599] Bluetooth: hci0: command tx timeout [ 86.685953][ T5588] Bluetooth: hci4: command tx timeout [ 86.709941][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.725223][ T5584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.761429][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.768308][ T5584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.791234][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.820425][ T5584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.870076][ T31] cfg80211: failed to load regulatory.db [ 86.876295][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.992230][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.043414][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.070884][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.084105][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.110540][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.114704][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.149484][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.169141][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.210530][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.246088][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.273774][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.299930][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.300081][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.359379][ T1892] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.359467][ T1892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.416460][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.456946][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.457083][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.522276][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.532729][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.532821][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.642941][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.698917][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.723015][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.729095][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.849858][ T979] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.849992][ T979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.995118][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.025123][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.078230][ T1892] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.078374][ T1892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.142958][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.143095][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.267699][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.340688][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.342297][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.432374][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.432541][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.664147][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.675781][ T5588] Bluetooth: hci1: command tx timeout [ 88.675810][ T5588] Bluetooth: hci2: command tx timeout [ 88.757824][ T5599] Bluetooth: hci4: command tx timeout [ 88.757856][ T5599] Bluetooth: hci0: command tx timeout [ 88.757876][ T5599] Bluetooth: hci3: command tx timeout [ 89.114809][ T5585] veth0_vlan: entered promiscuous mode [ 89.238882][ T5585] veth1_vlan: entered promiscuous mode [ 89.263429][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.481804][ T5585] veth0_macvtap: entered promiscuous mode [ 89.534784][ T5585] veth1_macvtap: entered promiscuous mode [ 89.628140][ T5587] veth0_vlan: entered promiscuous mode [ 89.713921][ T5587] veth1_vlan: entered promiscuous mode [ 89.774300][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.839930][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.861705][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.936412][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.192625][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.237427][ T5587] veth0_macvtap: entered promiscuous mode [ 90.392766][ T5587] veth1_macvtap: entered promiscuous mode [ 90.611006][ T5586] veth0_vlan: entered promiscuous mode [ 90.649046][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.655024][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.655048][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.663795][ T5584] veth0_vlan: entered promiscuous mode [ 90.718209][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.725209][ T5586] veth1_vlan: entered promiscuous mode [ 90.741825][ T5584] veth1_vlan: entered promiscuous mode [ 90.815912][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.815931][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.274653][ T5583] veth0_vlan: entered promiscuous mode [ 91.299335][ T5584] veth0_macvtap: entered promiscuous mode [ 91.339770][ T5586] veth0_macvtap: entered promiscuous mode [ 91.418146][ T5583] veth1_vlan: entered promiscuous mode [ 91.440610][ T5584] veth1_macvtap: entered promiscuous mode [ 91.455200][ T5586] veth1_macvtap: entered promiscuous mode [ 91.491557][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.491593][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.576599][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.590440][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.593019][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.593039][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.674555][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.703134][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.793356][ T5583] veth0_macvtap: entered promiscuous mode [ 92.833278][ T5583] veth1_macvtap: entered promiscuous mode [ 93.399004][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.535795][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.844908][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.907146][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.907174][ T5709] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.958815][ T5709] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 93.958845][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.958864][ T5709] usb 1-1: Product: syz [ 93.958879][ T5709] usb 1-1: Manufacturer: syz [ 93.958893][ T5709] usb 1-1: SerialNumber: syz [ 94.224224][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.224243][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.468199][ T1549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.468218][ T1549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.552485][ C1] usb 1-1: invalid arpc response id received: 11 [ 95.067813][ T5709] usb 1-1: failed to set cport flags for port 0 [ 95.068019][ T5709] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 95.479897][ C1] usb 1-1: failed to resubmit arpc in-urb: -1 [ 95.524895][ T5709] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 95.539051][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.539073][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.740283][ T5709] usb 1-1: USB disconnect, device number 2 [ 95.753993][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.754011][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.805508][ T1549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.969268][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.969489][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.970845][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.014686][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.014703][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.767161][ T979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.767178][ T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.901173][ T1385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.903757][ T1514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.904094][ T1514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.904361][ T1514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.271927][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.272720][ T5819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.272763][ T5819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.965765][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.037507][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.071459][ T5823] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.145758][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.197818][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.198390][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.455994][ T5710] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.589653][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 98.590517][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'. [ 98.590557][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'. [ 99.099193][ T1549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.237790][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.243787][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.244005][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.245019][ T124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.245254][ T124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.325744][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 99.366230][ T5710] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 99.366286][ T5710] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 99.366312][ T5710] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.366347][ T5710] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 99.412585][ T5710] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 99.412615][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.412633][ T5710] usb 1-1: Product: syz [ 99.412645][ T5710] usb 1-1: Manufacturer: syz [ 99.412658][ T5710] usb 1-1: SerialNumber: syz [ 99.517481][ T124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.971166][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 100.121695][ T5710] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input5 [ 100.235996][ T5710] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 100.236016][ T5710] (id 0x00) [ 100.461183][ T5857] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 100.483781][ T5854] jffs2: notice: (5854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.575707][ T5710] rc_core: IR keymap rc-imon-pad not found [ 100.575727][ T5710] Registered IR keymap rc-empty [ 100.575823][ T5710] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 100.575840][ T5710] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.630606][ T5710] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 100.648577][ T5710] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input6 [ 100.698728][ T5710] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:3> initialized [ 100.810773][ T5710] usb 1-1: USB disconnect, device number 3 [ 104.555688][ T5709] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.679436][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.679533][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.679568][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 105.535517][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 105.588857][ T5709] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 105.588886][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.588905][ T5709] usb 1-1: Product: syz [ 105.588918][ T5709] usb 1-1: Manufacturer: syz [ 105.588930][ T5709] usb 1-1: SerialNumber: syz [ 106.795742][ T5945] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 107.936851][ T5709] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 108.065835][ T5709] usb 1-1: USB disconnect, device number 4 [ 108.898035][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.60'. [ 108.898194][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.60'. [ 108.898230][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.60'. [ 109.481613][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'. [ 109.664500][ T5969] Zero length message leads to an empty skb [ 111.482634][ T5997] No source specified [ 111.504508][ T5993] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 111.626635][ T6001] overlayfs: unescaped trailing colons in lowerdir mount option. [ 112.305824][ T5709] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.459021][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.459075][ T5709] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 112.474126][ T5709] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 112.474157][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.479614][ T5709] usb 5-1: Product: syz [ 112.479634][ T5709] usb 5-1: Manufacturer: syz [ 112.479649][ T5709] usb 5-1: SerialNumber: syz [ 113.442515][ T5709] usb 5-1: Cannot retrieve CPort count: -110 [ 113.442562][ T5709] usb 5-1: Cannot retrieve CPort count: -110 [ 113.442604][ T5709] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 114.078801][ T6038] netlink: 332 bytes leftover after parsing attributes in process `syz.0.90'. [ 114.078892][ T6038] netlink: 196 bytes leftover after parsing attributes in process `syz.0.90'. [ 114.305640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.325641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.335616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.345623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.355614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.365617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.375627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.385619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.395616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.405644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.975309][ T5593] usb 5-1: USB disconnect, device number 2 [ 117.242056][ T6050] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 118.055698][ T5687] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.215730][ T5687] usb 1-1: Using ep0 maxpacket: 32 [ 118.221698][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.221731][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.221754][ T5687] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.221796][ T5687] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 118.221819][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.300871][ T5687] usb 1-1: config 0 descriptor?? [ 119.006597][ T6096] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 119.009971][ T6096] overlayfs: overlapping lowerdir path [ 120.004593][ T6099] fuse: Bad value for 'fd' [ 121.518925][ T5687] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input7 [ 121.560615][ T5687] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input8 [ 121.829589][ T5588] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 121.829637][ T5588] CPU: 1 UID: 0 PID: 5588 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.829664][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.829677][ T5588] Workqueue: hci1 hci_rx_work [ 121.829730][ T5588] Call Trace: [ 121.829737][ T5588] [ 121.829746][ T5588] dump_stack_lvl+0xe8/0x150 [ 121.829777][ T5588] sysfs_create_dir_ns+0x271/0x2a0 [ 121.829805][ T5588] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 121.829844][ T5588] ? rt_spin_unlock+0x163/0x200 [ 121.829870][ T5588] kobject_add_internal+0x62c/0xce0 [ 121.829897][ T5588] kobject_add+0x163/0x240 [ 121.829914][ T5588] ? rt_spin_unlock+0x157/0x200 [ 121.829939][ T5588] ? __pfx_kobject_add+0x10/0x10 [ 121.829965][ T5588] ? get_device_parent+0x370/0x3a0 [ 121.829991][ T5588] device_add+0x3fa/0xb80 [ 121.830018][ T5588] hci_conn_add_sysfs+0xd5/0x210 [ 121.830047][ T5588] le_conn_complete_evt+0xfef/0x1580 [ 121.830088][ T5588] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 121.830120][ T5588] ? lockdep_hardirqs_on+0x7a/0x110 [ 121.830147][ T5588] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 121.830175][ T5588] ? rt_mutex_slowunlock+0x219/0x460 [ 121.830198][ T5588] ? skb_pull_data+0xf0/0x200 [ 121.830231][ T5588] hci_le_conn_complete_evt+0x187/0x470 [ 121.830270][ T5588] hci_event_packet+0x67a/0xf10 [ 121.830303][ T5588] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 121.830332][ T5588] ? __pfx_hci_event_packet+0x10/0x10 [ 121.830359][ T5588] ? rt_spin_unlock+0x157/0x200 [ 121.830405][ T5588] ? hci_send_to_monitor+0xe2/0x590 [ 121.830430][ T5588] hci_rx_work+0x3ee/0x1020 [ 121.830467][ T5588] ? process_scheduled_works+0xa20/0x14e0 [ 121.830491][ T5588] process_scheduled_works+0xa8e/0x14e0 [ 121.830544][ T5588] ? __pfx_process_scheduled_works+0x10/0x10 [ 121.830574][ T5588] ? assign_work+0x3cf/0x5d0 [ 121.830602][ T5588] worker_thread+0xa47/0xfb0 [ 121.830655][ T5588] kthread+0x388/0x470 [ 121.830685][ T5588] ? __pfx_worker_thread+0x10/0x10 [ 121.830707][ T5588] ? __pfx_kthread+0x10/0x10 [ 121.830737][ T5588] ret_from_fork+0x514/0xb70 [ 121.830783][ T5588] ? __pfx_ret_from_fork+0x10/0x10 [ 121.830814][ T5588] ? __switch_to+0xc89/0x1420 [ 121.830843][ T5588] ? __pfx_kthread+0x10/0x10 [ 121.830873][ T5588] ret_from_fork_asm+0x1a/0x30 [ 121.830922][ T5588] [ 121.831630][ T5588] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.831672][ T5588] Bluetooth: hci1: failed to register connection device [ 122.264214][ T5687] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 122.349688][ T6127] syz.4.117 uses obsolete (PF_INET,SOCK_PACKET) [ 124.322046][ T9] usb 1-1: USB disconnect, device number 5 [ 125.526099][ T6135] fido_id[6135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 127.524537][ T6184] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 127.524952][ T6184] overlayfs: overlapping lowerdir path [ 133.145628][ T6236] ======================================================= [ 133.145628][ T6236] WARNING: The mand mount option has been deprecated and [ 133.145628][ T6236] and is ignored by this kernel. Remove the mand [ 133.145628][ T6236] option from the mount to silence this warning. [ 133.145628][ T6236] ======================================================= [ 133.846057][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.846156][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.844471][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 135.886264][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 136.609393][ T6279] jffs2: notice: (6279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.740740][ T6285] Bluetooth: MGMT ver 1.23 [ 140.822746][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 141.283112][ T6333] overlayfs: failed to resolve './bus': -2 [ 143.751087][ T6353] fuse: Bad value for 'fd' [ 144.575488][ T6361] fuse: Bad value for 'user_id' [ 144.575508][ T6361] fuse: Bad value for 'user_id' [ 145.390674][ T6373] nbd0: detected capacity change from 0 to 63 [ 145.540207][ T5599] block nbd0: Receive control failed (result -104) [ 145.928408][ T6377] overlayfs: conflicting lowerdir path [ 145.984614][ T6398] fuse: Bad value for 'fd' [ 146.093283][ T6403] netlink: 116 bytes leftover after parsing attributes in process `syz.4.217'. [ 146.179651][ T3129] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.309369][ T6412] netlink: 152 bytes leftover after parsing attributes in process `syz.4.221'. [ 146.337149][ T3129] usb 4-1: Using ep0 maxpacket: 8 [ 146.339879][ T3129] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.339911][ T3129] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.339952][ T3129] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 146.339972][ T3129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.393975][ T3129] usb 4-1: config 0 descriptor?? [ 146.775158][ T6412] lo speed is unknown, defaulting to 1000 [ 146.775345][ T6412] lo speed is unknown, defaulting to 1000 [ 146.803177][ T37] audit: type=1326 audit(1786162253.625:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6419 comm="syz.2.225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e061e0d9 code=0x7ffc0000 [ 146.803227][ T37] audit: type=1326 audit(1786162253.685:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6419 comm="syz.2.225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e061e0d9 code=0x7ffc0000 [ 146.803325][ T37] audit: type=1326 audit(1786162253.685:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6419 comm="syz.2.225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54e061e0d9 code=0x7ffc0000 [ 146.803362][ T37] audit: type=1326 audit(1786162253.685:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6419 comm="syz.2.225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e061e0d9 code=0x7ffc0000 [ 146.803399][ T37] audit: type=1326 audit(1786162253.685:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6419 comm="syz.2.225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f54e061e0d9 code=0x7ffc0000 [ 146.803488][ T37] audit: type=1326 audit(1786162253.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6419 comm="syz.2.225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54e061e0d9 code=0x7ffc0000 [ 147.017287][ T3129] kye 0003:0458:500F.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 147.018001][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018024][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018040][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018055][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018070][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018085][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018100][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018115][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018130][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.018144][ T3129] kye 0003:0458:500F.0002: unknown main item tag 0x0 [ 147.162694][ T6426] fuse: Bad value for 'fd' [ 147.179482][ T6412] lo speed is unknown, defaulting to 1000 [ 147.182730][ T3129] kye 0003:0458:500F.0002: hidraw0: USB HID v80.00 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 147.182773][ T3129] kye 0003:0458:500F.0002: tablet-enabling feature report not found [ 147.182787][ T3129] kye 0003:0458:500F.0002: tablet enabling failed [ 147.255521][ T3129] usb 4-1: USB disconnect, device number 2 [ 147.496595][ T6412] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 147.496619][ T6412] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 147.496640][ T6412] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 147.592399][ T6433] fido_id[6433]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.665028][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.790128][ T6412] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.464437][ T6452] process 'syz.3.237' launched './file0' with NULL argv: empty string added [ 149.542459][ T6460] fuse: Bad value for 'fd' [ 150.184312][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 150.184431][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 150.184484][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 151.251253][ T6412] lo speed is unknown, defaulting to 1000 [ 151.319063][ T6412] lo speed is unknown, defaulting to 1000 [ 151.328044][ T6412] lo speed is unknown, defaulting to 1000 [ 151.332634][ T6412] lo speed is unknown, defaulting to 1000 [ 151.402262][ T6412] lo speed is unknown, defaulting to 1000 [ 152.456692][ T6500] fuse: Bad value for 'fd' [ 152.881347][ T6510] overlayfs: missing 'lowerdir' [ 154.465958][ T4969] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.648317][ T4969] usb 5-1: Using ep0 maxpacket: 16 [ 154.653800][ T4969] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 154.653831][ T4969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.653852][ T4969] usb 5-1: Product: syz [ 154.653866][ T4969] usb 5-1: Manufacturer: syz [ 154.653881][ T4969] usb 5-1: SerialNumber: syz [ 156.963789][ T4969] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 156.995716][ T4969] usb 5-1: USB disconnect, device number 3 [ 157.147584][ T6547] overlayfs: missing 'lowerdir' [ 157.843109][ T6564] overlayfs: missing 'lowerdir' [ 158.557643][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 159.478187][ T6569] smbdirect: ib_dev[syz2] removed [ 161.228714][ T6589] overlayfs: missing 'lowerdir' [ 161.454064][ T6591] netlink: 14676 bytes leftover after parsing attributes in process `syz.3.287'. [ 161.820315][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 162.221676][ T6616] overlayfs: missing 'lowerdir' [ 163.954631][ T6623] netlink: 152 bytes leftover after parsing attributes in process `syz.3.298'. [ 164.111066][ T6633] lo speed is unknown, defaulting to 1000 [ 164.111113][ T6633] lo speed is unknown, defaulting to 1000 [ 164.165801][ T6633] lo speed is unknown, defaulting to 1000 [ 164.179026][ T6633] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 164.179073][ T6633] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 164.179119][ T6633] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 164.209732][ T6633] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.241813][ T5687] lo speed is unknown, defaulting to 1000 [ 164.695473][ T6633] lo speed is unknown, defaulting to 1000 [ 164.810870][ T6633] lo speed is unknown, defaulting to 1000 [ 164.870645][ T6633] lo speed is unknown, defaulting to 1000 [ 164.874068][ T6633] lo speed is unknown, defaulting to 1000 [ 164.907454][ T6633] lo speed is unknown, defaulting to 1000 [ 165.172808][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 165.178121][ T6656] netlink: 152 bytes leftover after parsing attributes in process `syz.1.314'. [ 165.406473][ T6656] siw: device registration error -23 [ 166.587816][ T6685] netlink: 152 bytes leftover after parsing attributes in process `syz.3.322'. [ 166.812300][ T6693] fuse: Unknown parameter 'group_i00000000000000000000' [ 167.081305][ T6698] jffs2: notice: (6698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.226374][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 168.790153][ T6725] netlink: 152 bytes leftover after parsing attributes in process `syz.2.338'. [ 168.844054][ T6729] jffs2: notice: (6729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 168.924843][ T6732] fuse: Unknown parameter 'group_i00000000000000000000' [ 169.120157][ T6737] siw: device registration error -23 [ 171.128361][ T6757] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI [ 171.128388][ T6757] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 171.128408][ T6757] CPU: 1 UID: 0 PID: 6757 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.128431][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.128443][ T6757] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 171.128477][ T6757] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 ae a3 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 86 a3 c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 171.128492][ T6757] RSP: 0018:ffffc9000402fc80 EFLAGS: 00010202 [ 171.128511][ T6757] RAX: 0000000000000016 RBX: ffff888033c20e48 RCX: dffffc0000000000 [ 171.128526][ T6757] RDX: 0000000000000006 RSI: ffffffff8d880f18 RDI: 00000000ffffffff [ 171.128541][ T6757] RBP: ffffc9000402fd88 R08: ffffffff8faf4937 R09: 1ffffffff1f5e926 [ 171.128555][ T6757] R10: dffffc0000000000 R11: fffffbfff1f5e927 R12: 00000000000000b0 [ 171.128568][ T6757] R13: 0000000000000000 R14: ffffffff8c21fd48 R15: 1ffff92000805fa0 [ 171.128581][ T6757] FS: 00007f8b9cb616c0(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 171.128596][ T6757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.128608][ T6757] CR2: 000000110c2b308d CR3: 0000000039edc000 CR4: 00000000003526f0 [ 171.128636][ T6757] Call Trace: [ 171.128643][ T6757] [ 171.128656][ T6757] ? __pfx_configfs_symlink+0x10/0x10 [ 171.128684][ T6757] ? bpf_lsm_inode_symlink+0x9/0x20 [ 171.128705][ T6757] vfs_symlink+0x18b/0x330 [ 171.128725][ T6757] ? security_path_symlink+0xfd/0x360 [ 171.128747][ T6757] filename_symlinkat+0x1cd/0x420 [ 171.128769][ T6757] ? __pfx_filename_symlinkat+0x10/0x10 [ 171.128790][ T6757] ? do_getname+0x151/0x250 [ 171.128811][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.128826][ T6757] __se_sys_symlinkat+0x4e/0x2b0 [ 171.128847][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.128861][ T6757] do_syscall_64+0x174/0x580 [ 171.128882][ T6757] ? trace_irq_disable+0x3b/0x140 [ 171.128905][ T6757] ? clear_bhb_loop+0x70/0xc0 [ 171.128921][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.128935][ T6757] RIP: 0033:0x7f8b9ed6e0d9 [ 171.128957][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.128969][ T6757] RSP: 002b:00007f8b9cb61028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 171.128986][ T6757] RAX: ffffffffffffffda RBX: 00007f8b9eff6270 RCX: 00007f8b9ed6e0d9 [ 171.128997][ T6757] RDX: 0000200000001c00 RSI: ffffffffffffff9c RDI: 0000200000001b00 [ 171.129009][ T6757] RBP: 00007f8b9ee05024 R08: 0000000000000000 R09: 0000000000000000 [ 171.129019][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.129036][ T6757] R13: 00007f8b9eff6308 R14: 00007f8b9eff6270 R15: 00007ffef516dae8 [ 171.129053][ T6757] [ 171.129059][ T6757] Modules linked in: [ 171.129091][ T6757] ---[ end trace 0000000000000000 ]--- [ 171.129105][ T6757] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 171.129134][ T6757] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 ae a3 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 86 a3 c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 171.129150][ T6757] RSP: 0018:ffffc9000402fc80 EFLAGS: 00010202 [ 171.134674][ T6757] RAX: 0000000000000016 RBX: ffff888033c20e48 RCX: dffffc0000000000 [ 171.134693][ T6757] RDX: 0000000000000006 RSI: ffffffff8d880f18 RDI: 00000000ffffffff [ 171.134708][ T6757] RBP: ffffc9000402fd88 R08: ffffffff8faf4937 R09: 1ffffffff1f5e926 [ 171.134724][ T6757] R10: dffffc0000000000 R11: fffffbfff1f5e927 R12: 00000000000000b0 [ 171.134739][ T6757] R13: 0000000000000000 R14: ffffffff8c21fd48 R15: 1ffff92000805fa0 [ 171.134754][ T6757] FS: 00007f8b9cb616c0(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 171.134772][ T6757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.134785][ T6757] CR2: 000000110c2f8d35 CR3: 0000000039edc000 CR4: 00000000003526f0 [ 171.134807][ T6757] Kernel panic - not syncing: Fatal exception [ 171.135075][ T6757] Kernel Offset: disabled