last executing test programs: 3m58.292944669s ago: executing program 2 (id=103): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000840)={0x2ff, [0x8], 0x2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 3m55.753856196s ago: executing program 2 (id=115): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m53.90111708s ago: executing program 2 (id=123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) r1 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000001300"}) 3m52.558133927s ago: executing program 2 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 3m52.233823569s ago: executing program 2 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) 3m51.324451456s ago: executing program 2 (id=140): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 3m50.731699249s ago: executing program 32 (id=140): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 2m51.359020103s ago: executing program 1 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='rdma.current\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) 2m51.13580103s ago: executing program 1 (id=570): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x4, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "d59d3c66e1298240"}, 0x10}, 0x1, 0x0, 0x0, 0x8490}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)=""/215, 0xd7}], 0x6}, 0xa}], 0x1, 0x40012100, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m50.721133825s ago: executing program 1 (id=572): setresuid(0x0, 0xee00, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m50.033735779s ago: executing program 1 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 2m49.825453277s ago: executing program 1 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd28, 0x7ffc, {0x0, 0x0, 0x0, r3, {0x8, 0x2}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m48.361529869s ago: executing program 1 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) 2m47.624475127s ago: executing program 33 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) 4.420673663s ago: executing program 5 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 2.856524486s ago: executing program 0 (id=1668): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) 2.660526564s ago: executing program 0 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.346592402s ago: executing program 5 (id=1673): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x7, 0x1, 0x3, 0xa, 0x7, 0x30000, 0x5, 0x1, 0x80000000, 0x80000000, 0x4, 0x7, 0x8c, 0x80000001, 0xfa], 0x1001, 0x81542}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0xff, 0x10}, {0x8080000, 0x0, 0x2e591ac03c405730, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x2, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x8080000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x128, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 2.33767673s ago: executing program 0 (id=1674): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/234, 0xea}], 0x1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}) 2.011714654s ago: executing program 5 (id=1678): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="604f3ba2fdb12384", 0x8}], 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmmsg$unix(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0) 1.851377584s ago: executing program 5 (id=1680): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029c000/0x4000)=nil, 0x4000}}) 1.510837967s ago: executing program 6 (id=1684): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.38589159s ago: executing program 3 (id=1685): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x428c39a6f3326709}, 0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 1.385136956s ago: executing program 4 (id=1686): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.308863059s ago: executing program 6 (id=1687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'r\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1.295691925s ago: executing program 0 (id=1688): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 1.154280684s ago: executing program 4 (id=1689): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) r1 = syz_open_pts(r0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = eventfd(0x10) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f00000003c0)='z', 0x1, 0xcead, 0x0, 0x5, r3}]) close_range(r0, 0xffffffffffffffff, 0x0) 1.113831229s ago: executing program 0 (id=1690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 1.064850174s ago: executing program 6 (id=1691): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) 981.277465ms ago: executing program 3 (id=1692): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 962.249633ms ago: executing program 6 (id=1693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x1001d, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2c0}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 919.582295ms ago: executing program 4 (id=1694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)) 883.162582ms ago: executing program 5 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_fuse_handle_req(r0, &(0x7f0000013800)="1195ac9218230be8698e3c32212a907ef4ebdb358a3845acde78d80602e932aff327ea7fa73f792c40cebdba37cecd38ed8a684e8e7e17c283a4a8133578350204e227bc8b66e6e3e496a9058407be3b1c02fe6a537132a7dbb038450582558bc290991aa904db098add7df0dfbb1872456b02af0baa9d727d628215805b913a4a76742f8086dc1d4aeafee73a85593ad0b5894773faa16ba06cf2f5a42ff342dd413b65c59ee263d078e5224bfa88f40e834878bb4ddc596a258558f4faef188fcb81f6de204fa4c275aec29c3d198c8918c230e80cbbffb8b4847d949783042e0aa097ac44b197332210e6f983f88f077b8e9e98ab605534a19e2c7099bad58f5d45cc9e9132320a2c53696f9011a9e6410046f32556f58cacbd56b22e38206ae6f3b09eefd692c89d1434ec54964aaba6c6704863aba623d0a6f99ee44b353a29b1e0b3311509200ee9052c8a98127b2f60b73d8390a5ea306879122e314431dbebce943b924e2b02c6b7cae0ccf680fca614bd21e3d04fbda26ec22518ce189371a0757b334332f21f028571779919a1562a0c9fbcb2161060a4491761a5d1c75725665db8078cfbe681a5a486fdad7f53a300e8fe749c54be9807e2a1bea17a8b4e75f0f6e66d0b73b2db67b985c9fb0464343b4d8a4f7e3f7cf99ae2ccb5140791863f765b6334c08bb123ac632c0326db66baa39006083c9afe2573da0191b6866c089223271e3914cdf6806795e2ab2fc9f78cd6527088cce01447266c0773120b71d72a03a110d142277c4324330dee504d11fe46bf3b13ee94e8d3266dd27207ebae0da9559f7198165aa5d962272465dde32e68017341bc7a8baaa727c279db496bfa3427628aa4a2ac26300c117607d9e771c70408c9a1fc8fc01d6a7c4e53374e249f0d77d93d8f5e065981e2001e8d3eb6e7db05547abb747b7c405de291f383a048bf15e5ab07527ea8cf32aa96980494b8c540ec04fa2f498d469afda8dcf289521a459e532054e62aa42a97f912627449ef20f30e6ca203fc3d2a84eb115898744e65790253d5b2813e5c7b8b27ab17c7562964baa46589a46868eb79491d7309eb2a87958619825d4a0971d34962fc48ad762e0fbc0e0f3217d88950199c4e4c00322509f9a1d03f2f375b1ec77190df881ea468c62baa4ec4caba3302e5442157a63596e723f04fb40b6b1e6740e2af48820f0b53ebe9031f2ec6b59810ee5abb6ae2d1ce2372eba86db69e313ff7a6f17d15b8ddc2170c24bdb065dd6baf0edc38f41e37473a66e4dbc4b1ffde72f5450716bd88c5992f0a61953234965ec5d1e031df13cdefabdcf89b6521996dd1b1392813dd4c845a939dc6e629e72f967e7d0bcdd0f1af46335a581f8bad4146f48907c36cee6d7a9c449f122c56956768f2a5658506bba553683724a7c36fa9d5f3ae9064f9a67ad964c2d8442f3812aed7ce0941a11309f80c69d478beb9c8c88332693645bbfce9987e61ca2fd008bb5f5296c842d80b367c0dc49da3ebcc8b7c2cbfebc656e546c0bd9b9422d4c49f13cfc8152958ae75a03174d693eb4d5df1a45a0ac12481053b7874b08b6701e85c4f058cba81cbae4ff8bd426f625ee2884bf719f490795fba7927765c4299b6c2c03c3521e74a19130dfe76dbb26f4aef2689060a6ea83956e2af600c87c894b79f2d172d9ffb572ec7731662ff5f38129dac6bbe75176e56d3e4d01bcd94343bdecac0047d916b09a5a0cd9bae339f481e085c900f1ac282ae8f6eb04c4fbecdc697227247ee5c9d632c50e33d716cbd6d60d90182fc0235f92aa7480b2ebfba9fb6e3e2a175ad83fb5bddd8e7fd539bdcc9388a2e59a4f6b445c60210d30d66d652be1d705f26809291c43f78c028af6dbe38cb3f1635bb671e1d36183a32047f80959e489441c24ce546abea2aee04cd742e9fcec01760197b914a9cd677e5862b748c1e6f8b760fc1d6add31578176b0c149ced98a4379f115990bb629107914498e933bfb1bad94098063bcab75b2b8667df3c83a8aeec59e919fd09157f860eacf75a23b4a4744af043bccf4aa3c3f3180130bf2a1de45f8304bdbaca1be46bcfddaa1e8524f40523c8c2bf1249f4bb8cd811a24e1b6f820c7daa8b6b9367554f97f7f3f68634ad6de0a59256d58b4e5cbba2524ff2cf97c3afa90e529e9d802ec9ad5ff49e9a1ac4151abc68e7ce7c03673c3513736925420c6f667a5e68adbbe8d062b4fc163ff20748055c152a42412b980ca3c692bfe759a6e0b2ce14f2c5f470927e6ce00ee18ddfee2de194e3793b1921f9039a90147ebe9902bd0d0e1541a9c7cc803492394a13645aa94ebd712f8908070ad8daf1a6b58e74caad344eeda72315b2fc3db4455d46dfbec77d0aeece7a7f6f566e636dcbdbdd872341b0bf8ee54b46471da2ce085afabada91cfd1785f5e2d1824d55844a42c99a94fae9acdde0e22da26cee563a0421512fd60605709d8fe4b6a6166617982d28529dc73232ab55b19e65ebeecf47a921d6e60be3f3049d93694baf5a93a4af602a37cfcb6f9801765e5fac20fe221ef4a083fa4e01bb6c7836b3691aa4ef846b18e8181f8a73fb81437c0f1400eae9866c43eca0393e5628b85f03e5706d223ac4cb58919f4a906f3e3a225cb139e1f2feef448f173c778978757edbb9fa8cc9777c51bb1c6a5f45e7769fb7c1134df864599449a4dbe80c6fa944a1e21ca31fc0cdae18eaf88999c9c196967dd3de189e6ff8d04dcdf7cd11a73cd80904b5e3f5d1c5383103ccb549d194d97b9dfabfc51e07e80a64565c1d8683ea5803f81e54e1dee4004d56eefeed1a96dbcbc98a5bdeb9b327216ae3334b78a48f5a8d45aabe7931f08c4b13fe4719d3119d4ad59ed094c1f38fefc6afca15bc8027401a0ca65bae1f3d4be2327d776c4f3dd0de91aa4acbbe1166577e9eab77ddafd055b1ae6e9c2653faacda733f850bc97ed023e66922346c3ae3b20b46a7caca216eeb65c35bef91a1910f96696d1addb5e71090757db69e7799eb6924c331db23ba05db7a1a8e51262925c9d71aa238676499bdf0150c43a0e19a184d861f66f9d8c422e6aa64f49d4c0b802dd4f7b36f4743d3872ee32761b5984f6c04a19ac52d44edb701f8349bf8bb3a753bbae71e042b89936747d13d75c681bd8e79a76edba119389464c267af8fb237ca3ff2a8e3e577da6f6480ead48e0958638e28769ccf4aa93be482513ebe87a15d127b46f526599b60e9f771a1fa2513c790ea1f8ee09ac98316b7f461a0dcbaab6c3bc4f92709cde1a4021ece3f9801c1bf08d875d97b4728bc903f18b45cf4d57c0ef1003bc7a3df29a648b152f0d9571d38f1c16dfb289bcd8a1dc9499dfa15ff73ebf844f749b6508d250adcaee0fd01ba3de01ed05be515c814c5e9879a12e540dfc44df0298bc5ead95cec9ed47c0a26a3805ca1cd7a98f7d4e46da93c4e7108ed562ca0c31fd8bb1d55ab0f759e4229fe34129c65267973869fefca9c1d3e839db40c897cce4e7fbe147e2a063f3647a085807d34afc1971724ec56497e91b79fd3353562dd604cced748c45429d6e30269b19380c567fe2aa4a6149fc6476c31050cc82af709ec4f62e5fb6faa51c86f3cd6fb81dc64a6bccb739f0e9f559ba9d4acf882c3e77d1401f824c702af545a29eb05edde2f0ae10dbb4a2edd9d78933444932e7e4a278372643d01743ff954abbeb4f9946b74ca37086cd3faf4680e809202cd2c2bbd50cd936f4a8a3d4f9df8ae90a568f3ac6f6788541b202ae298df9a69ac09f68c1f8364850f67b2b5a69172ac8c4fdfc097a3d02c13e04578f6c766c5d3f1e6c3db86ffb4510718a267d8bbe00ca2b17a5c1cfc046c906c08010ed4981a1bc4e10d71f9148dcdf8524d939f86a3fb1f64a8e3de5544a8779dac4a43709240f36288b14d39ec68e59b9063f61bdfd7d20d98da5766a95bed463a564d38c263ecc9a3b2e4022941611c8975f2b3ca232ba5e4fa9d6b371a816fcc9ab66a52c9ada22c735d312d7846c4674afdd58ce7965f1c93c43feef6f558483f91c575525f09ef7f0713bdacf60415527efdcf12f09b6641fa058a13ff76fe7af55a15e39bed26c45c2c3464d503f6ff2b6b95e3d4101ef1aa4e0aa6b60248c4f26c72497b026a9f0f8a25ca38f358624ae18258aa3594d3d0596a8b66b3c5e259168bb5f61881eaa4b9733119474a64b28f61a18c049d2514f9ca508af4aaacc005965d3fe68538cbdcf17e4aa9e82fef208d2fd3d9b6f7099337631ec8268b83b90279e5f8c18572b2c15edf1b1e08fc00fb2b38c856e66a79885d61d2f1bd04c93bb892ef5343d9dd04eb75db7a4cf2a25f3be77369937d802f57c4fed0860f6f721892d9ba5324a3aa6d5231f54d07fb0a1450c4c708c996bfcf3fd6a79c8050b2fd34652655681869c5ea07c1f9c3228add4089be8593a6ea05193719221a99e4c90f400e5c3d59bfdbdc6ea3c56687267a9a48a8aa636acb99f07ed893f7ae3f7d50f82217166140ba0b003c23cae03aa1445c0025e92e67b342dc37acf5795fdc802da80900e1cd9a84cb6f749752bae73ac05f9a5778a4679927d7ec777fbb8d5edcd230846f74079018fd494d657e9a099f4e0d8cd70d1c60d37972998b3a83abf35d1b8c090afa28c56999381008d23a7dac91a196a316c7d5e284cec002d1ff145f569abb70910fd9abbd9d017bed22ef0c5f48466d70e386ea4ee50cce142cf4e562b80b4e17ba1282701ca36a917d4bbd98a8795c120b0e7c38cdaa4bfd86d9860442a60f955ac03a9db8503884fadd3f8dcc0174570c145e0f22859667a6f44ca297bce84b2192bd0bd5e4cd006ee43a9bb77474414ba8f96a3fc940d41cb6bc05eb90d3025e57c9c6697485d5dc6d9be64705684602433fcde9303289bb23db0739a6db6dc7682ea6aab49c5077f66fa21e8af5cd01833654cead3646d48184bbb68bdd897b8026f3580d538fad7dce7c7e9f163a09e8edffa5cfbee9ac743e4d97a2a1461fc945c4541be3e4b940c73d64e69471adeeb7b2bfb3c5fefacc68414b24c7cc5e124aa51430618ed69c496440651bfb95aa766bb3336eabc3a817c82c39c4b81acbb6d97f623ca1fdd3fbeef5ef7e6cefd09e16391f1d409a3ed1305b79c82b3d29077849b8d584c5edcfe08dcb0361684c7d4f56e408cb745e11196ad0fcea32876140a181c17ddb0097ba22b714bd49f228bc6b57fd6fea29475f3f61e1d68330e6015539eda198e3cf85ac9b5012e8f5f44a272c61ca3af2c3040ea0cb425dc43d02e0641d831369b96eae13bbe494d08a49409f7d9ba07642ad0bce66d22ba548acebf527c09f8d0bf8167215ce0844241e91978ab487cf84e4ddcf49213a360ca8dfd060f345ac9a177bff55e41247663b4db3f874026149c81f3281193d0d634f056aab00bf4a56bfb9ff9c50e4260ec224cfbdb06ba8ccddd3c46cbc1482e3c3d121dd783b11b5a4af3956259b943e4054b9e5d8954aef77f7f0d997324969c63631e157be36d082c6fe9090012fadd6384c8ac4a915346aac0e6c033b13fa1a50d2d13baa70ad596fd841d0711cc5465d7fa5ee72b0734fc570dececfdc62356fd5f97aaba7c1ffc89b73ecd4ff69a3aba137648b1ef8022bac30aad32393acaa5fa16c976a809f1572f7c766bbd36f9886dbc477501c412b966edd8751dc603e0dafec7fdb020a21701fa27b250f88662cc934775b82e788f9847425c21a9d93276d572213a5dbea46155b747a03e0b3d3be575d1d4c40fe10efda14606a7203585314ff929c636221fc4bb17f5243f61d4b877917e11b2956cf785f5b3e2a154b6cf9fe7694f2829983801b79ec796f4d47407f75eed168826c489e9f295c78546e8c628785e9fc2989fc30ec2416782bb78ebaeea24bc4b20699db6150e28984cfb809f1adb18fbd5dcf7ea4d3c248d99324806c9c27e644a88a1193c26eaf692f33edbe9f6de2ab448d1683b98cd82d6990b6b105ec77a36c81260d525b0f75dd3f1da8f75072fa90b31b15caa883eb60026d2a4dc80c84e169f4a6d50f1a3f083043a8cfa01e47b83b7d8a15c73a416c035692e3612664b253de522846d12f82d90c7d7a1a1c41ba04e19859f527b47ca588632fb18cf45a06a58d85e08f61f77a4bf1fdd68a4ea06d75b4d6ad2f0f26b9e72b37e5104e17240c40fc5e4c1c9f6145715c0529baee5a3cd72ab30ef31ab61b38bc91ab6279e48351268680eb3cad3481cd550cb64654bc90f073149786ef959f94f9390184250ce0268ad6221b43efaf14a11de971c45a370a2db06d592c742e84917550ef2b37b9b68966e802f95a2c00da784afe8e62a6deb1d6976a08db1008093418dd35e4d4ba8a0f9f2bfa20c7d0b3c2afffe755cf1296b5ab84393248bce17ac3cd71eec5966801e3b3b1d2de47131e59f487587767485edfbfe6ff037531e57e1db1b61921d7b702dceff03b925d14d205f9b8697110490ccbb383ef911dc6b6a16b617902da843d27747cef1ef311157b25cb1cdd9231aaf86647d343ca36c85c4059f59fe8a7508f466c6240476d867ae06883ac7f45c50613e56b337692cce24ba24efad08ef93920119fb2b0879474d3f0ba61da5a4f3299ca80d2cb65fc905ab5271303db67ac86723203071b354d45945f342c9821a9845bc0ba3df7ed61c12f88512f692d5757a30911072af8e0fa95142315c6be38726f390d696cd4938d2d9bf357064513cc90510a0422be150e1218fb22a5b71de6e8c313a565c939cb48a6b1ac1b75638e3ae00a4caec8834c16c297df319508441e7f063d67c6e4062b1ad606b18e039da59e7167dd3a0b34356f95f9f52093939106180a0071533bf71ab47086263bd96c7b4004085779bc813c2186b5f44f84aecab71b78027f7fcca02be7d149db4c0f17835201ef03c9ca6fbcca3a1353d5d94fc366bc2fda593280ca7daec8ae12815f854fc84cc1c3e40b4412850baec19331413fb4d19b2a51769af14c51b98e9bb8575f0a066a060f9bc44202f22183a1ba2713453259599690bd70392782fef5b7c5e3f8e6379ea84a3b602273e372805f9acc7994dd745bbb9ab401035b6d042c9e0a1fa329502e2e0f17ee9d34b96c255a3305b6e311fe4893d144c10afd860d74218ee78d83f252d4620964a1d7bccf718fad9df3baf5dd5bfec7448e52601f598e78665546ad09ccbc9e1b96debdada7a570ba6ff018fff9a589111ab45b71b9daa9f068a8fb09a16a1c1a6f6e22296ccad7d5d968821794236a79a62262e5edc5756c99c7e733e88ab78120da5f844968d02fa0b9e2fc3763dd16f354117b9ce848c21992b2b391137a7a8c31f2226d4c0669a8334ce6d5d85fac701bb0b23452453ff766373f18dc9c44b80151ef728e256656b40baf747b9292489de5e20184a9c022c1ed330003454f4b686a393e68b0db21e8fd931aca596ba3f51243101250fe78de2ebd95f4f333ad25edd6f80406a00dee774121da8f8b23b6eb7f2c657852fc777122753bf2fe4566ce403b6c0ef0b8bd0c53823d9f60bc44d0ddd6ac788e8888df28f322ad0fb6fd9b6d88b6530be372d29050d2f1b1e8273fb7a1ca6395c882090422af5ca6f803877f172fa3e3bba15facb5bcef8fa89a5e3c661b835b11e02b19f6d5c872bdc4917913458c5972b4e2cd3aaa08cb2ec668c0ec2692eb53d61988f63c8460aa945a2975ad59abfe00ad67242739b653e8ad422675a37026396f6e7d9bdc9f311ee667ddbc64c4afb4166316ea167780c718d541846099202113b869ae8ef66811edb958cda474195542b7a0becbe351ccc7ef78f6b572af15e431b59fc5f82d47265372c4f3fc18da44c9aee246bcc248de3533f20a60b61d8a4b8324dca11ec571028271a7d1bc83183e92be5385ed4b2e94343452468f50f747c3a4b172e34c947b9a40415602d44469dcf426087ccb2a3977a8698c5c1190e1a84f70366b544c89fab78146b7b6daace5676067a48e00fb90a6073167be04341ebf2181575559cfbc03a9871617cd7718ce1a46c52dd3faf79babd1a01fbeaf89d8b59fa9dc6400766cd102db6cd6132e8f5daf25061614042f9dc254f91a4ed14031992476021a0cfe5b7cd8a8410391d7e572c19404c43d5328fe9c96e7feedde6b3741d04b524e11a41dd3131d5b2c36b5824a899d7aa1918fce06dc08d3cb2b29581553ff352b8f606db5fbfcca1a154c4613de096ab5c7f4eb6250096d964b270ebe242850c359686114b1bcfeb715c7154f04a772973c41ca9399b61841d7fdaeee47745cfce51f842f7cf412022d006567f58fb49dfb3eba342191ea6ed037d32e6a92123d7e58777ad352c2bc27da93ed46c378ff631a7dce38d94fd8d865b5ce62de4c67af96bfee74018671be2fedd63823306c3492320fe530b099b5cdd144608b6cb14aa79f5482b01f828b8aadb6e98415daea029984e470f8b28b2655b2ac753d33b8035963b4a5c00bb0cfda3372b2782590596d6d03c237e95a4ab347531d2819c9ac9ba37f642298f6a999fdaaa13778e10d07e3fc9c1387a0a76016a4b30317fb3d8ddeb4433d0b04d17d30c29615aacf0f8697255a6a55e6b47d64fa45d7171a8ca4af78b32047acb2b7c5c70969e530828882287a16ad460c3f372cce00404ba06b2fe64166d70dcb4f6bb636fd53a267be9a13beb9a1d8253dbc9e49028981f7479488eb40ccb58cfa1c0c9fd61437ef0e84f51ed5f788d8e9595e5955faa744c700d6677bfe3c5e52f0ecf70270b9e62610d5cbd53b2321033a7aa3bd70ad8a9506545f0da4cfce3aac6e9a03051ad703a0f564685ef2b1e5f203637edd5c30ba505f81666012e2cae3b3a815d33ae97b0767e8b48f3d42272f9d326e8bcf176f852a8aeb0603a11fe12b5e04c3c5ab4cab621eedfb5e86436661bb279459e3d874ba0fba92e55fcc763cb8b732b5cd9286e8f3147d3cadf5f342dc9313f64bd83ed828fc426b69761179ce732a3009194b8777a10eb2d3f4881129478b994e55abaf73965d62d846b8c4976f91d009b73738ca1c81f055e0936aeb527cb4002daa96ddd8cefe2e390bb5f90eca8e6d6997ade6819be3b44b2e346d533f7ca8f3c031f3c5ebbe9e17ee00d0e0823c61d850c6fea943fbdb4caa6539e3f7903e05a304e7cdf24b989908ba2f41b8bf67cec6a83ebdddeca2ec954e70c7816d8241d703b8109029869f3cb58c62e1e7c9fee329af5a3ec5d8a12db1f00fb579fad7ff18fe5a72bf1b185f52cdae932df12744b5eb24a0c3e4e5706c880f5f6b64ffdf6b71a17985fc4d2cea77860196f378ccf5b2b235b93b0278fb69fc7f460f21472cb90ec54d16d168a5caf2337d63b8ebf11012568d2ea0d92e91e83cd6cbbc88afba1097a84cd1af3948a2388891225237b30b4704d2fefb6bc7bf6adf6dd86b7a65c511637d96a3397096217c3a9743050133bf836b8333519d001947230cd25ade2e2e4e9b8a1227ae4283b2052b2c3a58a11bf7edc534bc11113c329791cea22dc5b71f3b4702d1529d965f4ed81951ce99a61779452751bca8d3a0070c47b1f8fb636ae6bef93514950f607c1746f5d9afa96902effd960b770a26aedad55aa5ad869d18c98e24b470c99b901badbaee298d93c2458303104e5c2dc3077b93c39ff46f0e81440a6f9d2a267f05f533c3c0943b6bfe50906944d2325143d84e5c12d528841ec611014d2768b116992fe1483c1764467eab1446b14adce8e366ec1615f7ad0fcc272355ade823771ea79db57f2dfba3335a50dd0c1c6105ec51f245e096c1492ba4230a752871e4c16e8ee301bf5960e97fdc948c7d54697f7c01439f18f97cfd01c4b74022607e9459fbdcd10243239b4b7f29dbc217a0caafc0b613e43e9689dc1bb2e135e9deca88bebfc61cffdea1ee33df41967cf96ef72a9d87c45084fb105077273109aeba2e3384ef27b604f356984401a8643c493acbc56e3780f0f0ce868db37c0f0f91d403e99951e9c33ec808ac1107a133109588e065162ccb0fa254c8fdc3fc89bfba51a17c975ba3cfc4d1f0faac685619bd5453ea2acaa8a3dcf34b2cac31447d77a89ad8adc9b1c0c620b6b72230a02f978a5407572fc3994c59b764b27221aece8b8ce9faed1d6c442672c102d7f2d28059173b6b6b188dbad05273ff852e0b9f14380f2ba94a34859092407449b9118a7d54201890c216a4720001f026306a9f8e57d0bdb9c29b9eea019e0bdef92e5e6a93852dd3e26cd09007a27cf479e88dab17bae6d339f2519b76824f1e5549304dd01333b393082274655b8c3dc00e602aea10f35793d6882069ce5a4debf9884c51d38aa1d83c91a92c0606d38076a1dbd7bd4c0cc5ad01dfb2b04b0dcdb1cfa9cb08c498ec9481559f0b5fdfca94ef3f2f07de6b541ccc5b287904d0344ba8b5b51c535644e8d459d15166c3af4bf36cfdccfd1ac83ebf540d61db77069f13152f27f17757d68536fa52473dee6b1db107f7c9aca2d6a98ab5e537b9fdc5625e7febe87c2127dbe140a94018dd26a640fd42a769bba8e6ffa284d5435d6c57a1f950933a6f6b45d2c7faf19ae2e8f2d2a96b946f1f6d2aeb335aeee909a746a5944f7dcd85f9cef487e9b182ed90cc03d9b170c1173cbdb0e9c40382e0cbdac38bbe8c3ffeee255c009f0423efc3d8135f9f7c949d12d4b700d2aff5bd3c0fa3c9f30a6054959b4f609c2ec8e235f5652d6416be3d13abcb84fe2db79e304757ffcbfbe286a1c8b4c0f8aa19d846608f6fd7f8a34acad860a73588593eb1cf7cc6f3586356747d43726982a38a527f3d94dcc25849ab71286b89c5a30cea07b8cb255dfe1b86b54d077960db18eaa30cae8101b4a61fef2147f1f38a5e83e40e262e2484bc552b728879d1c169a81713db17379c4bf5f9dcdbfd0196228a7afa3b181d401d98ac322c5ec619b0d504e28aa71a450b259c0c89fa2ba1ba7a7356da009b58085bb6e25fe5cd0097d822d39f9f3c9b39da1041c58ac1a4556de9d34f452c995ec21d1034e959218e8fe002d2b757c674848eb7ac84e8bd457a312c4378303ebb3184d4c90108e0604cca678487bcdd0be37facdd7c6b17e740a098fa4b38091b10f1536df1f297902bdb5f02d69f25e4e84d3f4700070f63189440a2a39b9bab6d4f3dbc23634867aeeca99dba4aec39ee94e701ccb77ead02aed1012f7eaa84eb44ad3e625d5619aec5ef76172213ab1d66680d42872e8ce8846e057329fe5937757e3ca7c1be1f3db31305f48978a178a043eb8d4a060d125dcc202e6d8c75205fdb2e42b0b0d215e768c73832d58ecceca993f7d5cca8c3ea340a8c1e722b806c865ed1380a1cd83b8b5e93ad4e2ea1d66cc7979fbac5fa26a2bf881b6db305bb60eb05a39edafbbed715e6aee84245b1cf950a2cb69dd631d95365e1c731ba5756b2ae1fdba6384cea97d7d74f9be62cb83fa7ea1287b6f26eb6f24532c6dad7f7869eff58b8a3448a5a6b0c4f45d8c1eb277174e3636aff670d8f169e040a445dce4b33f6c33b3be3e0100", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2000000, 0x461410, 0x0, 0x0, 0x10000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 824.937211ms ago: executing program 0 (id=1696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) 726.785547ms ago: executing program 3 (id=1697): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) close(0x4) 725.221035ms ago: executing program 4 (id=1698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x8140aecc, &(0x7f0000000080)={0x0, 0x4, 0x6}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000140)={0xfffffffffffffffa, 0xc, 0x9, 0x7, 0x8}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000080)=ANY=[]) 484.865447ms ago: executing program 4 (id=1699): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1008}) ioctl$TCXONC(r1, 0x540a, 0x2) 483.231459ms ago: executing program 6 (id=1700): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @mcast1}, 0x1c) 481.80775ms ago: executing program 3 (id=1701): r0 = io_uring_setup(0x7d98, &(0x7f0000000240)={0x0, 0x918a, 0x10, 0xffffffff, 0x800024a}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) 463.159412ms ago: executing program 5 (id=1702): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0xf00, 0x0, 0x0, 0x0) 386.503359ms ago: executing program 4 (id=1703): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000002}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x8000000000000002, {0x0, 0x0, 0x4}}, 0x18) close(r0) 278.937486ms ago: executing program 3 (id=1704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 162.114651ms ago: executing program 6 (id=1705): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2}, 0x4}], 0x2, 0x40000002, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) 0s ago: executing program 3 (id=1706): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) kernel console output (not intermixed with test programs): slave_1) entered forwarding state [ 95.835873][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.854384][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.888458][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.888576][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.936882][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.937015][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.010508][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.096662][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.100734][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.100946][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.172632][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.172844][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.334293][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.400072][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.400226][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.496150][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.501409][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.606042][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.851079][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.970778][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.047021][ T5840] veth0_vlan: entered promiscuous mode [ 97.114932][ T5840] veth1_vlan: entered promiscuous mode [ 97.246537][ T5836] veth0_vlan: entered promiscuous mode [ 97.272175][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.325149][ T5832] veth0_vlan: entered promiscuous mode [ 97.345095][ T5836] veth1_vlan: entered promiscuous mode [ 97.384959][ T5840] veth0_macvtap: entered promiscuous mode [ 97.415004][ T5832] veth1_vlan: entered promiscuous mode [ 97.440678][ T5840] veth1_macvtap: entered promiscuous mode [ 97.515722][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.588422][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.665785][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.666637][ T5836] veth0_macvtap: entered promiscuous mode [ 97.732282][ T5836] veth1_macvtap: entered promiscuous mode [ 97.738841][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.759035][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.767542][ T5832] veth0_macvtap: entered promiscuous mode [ 97.775946][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.798878][ T152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.820573][ T5832] veth1_macvtap: entered promiscuous mode [ 97.896685][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.971056][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.080559][ T5846] veth0_vlan: entered promiscuous mode [ 98.092376][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.125515][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.140610][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.159606][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.171011][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.188353][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.188376][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.206548][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.235825][ T5846] veth1_vlan: entered promiscuous mode [ 98.243920][ T5841] veth0_vlan: entered promiscuous mode [ 98.306131][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309288][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.342402][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.350518][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.420317][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.420336][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.455074][ T5841] veth1_vlan: entered promiscuous mode [ 98.782843][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.782863][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.871438][ T5846] veth0_macvtap: entered promiscuous mode [ 99.009124][ T5846] veth1_macvtap: entered promiscuous mode [ 99.075668][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.075687][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.154417][ T5841] veth0_macvtap: entered promiscuous mode [ 99.180851][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.180871][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.220822][ T5841] veth1_macvtap: entered promiscuous mode [ 99.316273][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.409208][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.420858][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.420875][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.439877][ T5958] loop2: detected capacity change from 0 to 7 [ 99.468294][ T5958] loop2: p1 [ 99.468327][ T5958] loop2: partition table partially beyond EOD, truncated [ 99.468910][ T5958] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 99.493832][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.517085][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.529144][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.567985][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.587617][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.624984][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.658846][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.775155][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.811801][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.814272][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.817107][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.911447][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.575009][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.575028][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.864943][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.864964][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.985128][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.985146][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.165484][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.165503][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.910400][ T6006] netlink: 'syz.0.21': attribute type 12 has an invalid length. [ 103.571774][ T6012] veth0: entered promiscuous mode [ 103.573387][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 105.274207][ T6035] syzkaller0: entered allmulticast mode [ 105.274914][ T6035] syzkaller0: entered promiscuous mode [ 105.338256][ T6030] syzkaller0 (unregistering): left allmulticast mode [ 105.338340][ T6030] syzkaller0 (unregistering): left promiscuous mode [ 105.365726][ T6037] block nbd0: NBD_DISCONNECT [ 105.366007][ T6037] block nbd0: Send disconnect failed -22 [ 105.367157][ T6034] block nbd0: Disconnected due to user request. [ 105.367173][ T6034] block nbd0: shutting down sockets [ 105.819137][ T6045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.590154][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 107.204366][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.423055][ T5905] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 107.423080][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.423097][ T5905] usb 3-1: Product: syz [ 107.423196][ T5905] usb 3-1: Manufacturer: syz [ 107.423207][ T5905] usb 3-1: SerialNumber: syz [ 107.498536][ T5905] usb 3-1: config 0 descriptor?? [ 107.599610][ T5905] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 107.892408][ T5984] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.065599][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.065642][ T5984] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.065662][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.250533][ T6087] netlink: set zone limit has 4 unknown bytes [ 108.318571][ T5984] usb 5-1: config 0 descriptor?? [ 108.441236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.762352][ T5984] usbhid 5-1:0.0: can't add hid device: -71 [ 108.762473][ T5984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 108.813919][ T5984] usb 5-1: USB disconnect, device number 2 [ 108.966919][ T5905] usb 3-1: USB disconnect, device number 2 [ 109.362694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.363585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.365129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.365579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.391336][ T5984] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.551272][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 109.555948][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.555995][ T5984] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 109.556015][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.614823][ T5984] usb 5-1: config 0 descriptor?? [ 110.031271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.031453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.031633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.031809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.031987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.175779][ T5984] kye 0003:0458:5016.0001: control desc unexpectedly large [ 110.216180][ T5984] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0001/input/input5 [ 110.446447][ T5984] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0001/input/input6 [ 110.928947][ T5984] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 111.431942][ T5904] usb 5-1: USB disconnect, device number 3 [ 111.633924][ T5984] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.785692][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.785718][ T5984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.785729][ T5984] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.785752][ T5984] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.785763][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.860441][ T5984] usb 1-1: config 0 descriptor?? [ 112.177125][ T6111] fido_id[6111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 112.692878][ T5984] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 113.041642][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.043188][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.553407][ T5222] usb 1-1: USB disconnect, device number 2 [ 114.651946][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.680341][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.872726][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.051346][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 115.053982][ T5926] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 115.054006][ T5926] usb 4-1: config 0 has no interface number 0 [ 115.060565][ T5926] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 115.060591][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.060607][ T5926] usb 4-1: Product: syz [ 115.060620][ T5926] usb 4-1: Manufacturer: syz [ 115.060632][ T5926] usb 4-1: SerialNumber: syz [ 115.104025][ T5926] usb 4-1: config 0 descriptor?? [ 115.119293][ T5926] hub 4-1:0.79: bad descriptor, ignoring hub [ 115.119331][ T5926] hub 4-1:0.79: probe with driver hub failed with error -5 [ 115.129095][ T5926] ftdi_sio 4-1:0.79: FTDI USB Serial Device converter detected [ 115.146412][ T5926] ftdi_sio ttyUSB0: unknown device type: 0x676 [ 115.447975][ T5926] usb 4-1: USB disconnect, device number 2 [ 115.480324][ T5926] ftdi_sio 4-1:0.79: device disconnected [ 116.257912][ T6137] Zero length message leads to an empty skb [ 116.276125][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.290781][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.302723][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.302766][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.127068][ T6167] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 117.453755][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.545715][ T6167] bond0: (slave rose0): Enslaving as an active interface with an up link [ 118.280835][ T6193] trusted_key: syz.2.80 sent an empty control message without MSG_MORE. [ 118.888133][ T6202] Bluetooth: MGMT ver 1.23 [ 118.888176][ T6202] Bluetooth: hci0: unsupported parameter 5148 [ 118.888192][ T6202] Bluetooth: hci0: invalid len left 4, exp >= 118 [ 119.275719][ T6207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.279191][ T6213] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 119.279351][ T6213] syzkaller0: linktype set to 780 [ 120.791671][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.954295][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 120.956845][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 120.956868][ T10] usb 4-1: config 0 has no interface number 0 [ 120.956937][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 120.959919][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 120.959943][ T10] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 120.959960][ T10] usb 4-1: Product: syz [ 120.959972][ T10] usb 4-1: Manufacturer: syz [ 120.959985][ T10] usb 4-1: SerialNumber: syz [ 121.062000][ T10] usb 4-1: config 0 descriptor?? [ 122.537593][ T10] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 122.537669][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 122.537684][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 122.537777][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 122.621585][ T10] usb 4-1: USB disconnect, device number 3 [ 122.882369][ T6270] syz.4.98 uses obsolete (PF_INET,SOCK_PACKET) [ 122.928456][ T6270] syzkaller1: entered promiscuous mode [ 122.928485][ T6270] syzkaller1: entered allmulticast mode [ 123.391361][ T6010] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.541443][ T6010] usb 1-1: Using ep0 maxpacket: 32 [ 123.545502][ T6010] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 123.545529][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.583502][ T6010] usb 1-1: config 0 descriptor?? [ 123.599240][ T6010] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 124.822543][ T6010] gspca_nw80x: reg_w err -71 [ 124.822651][ T6010] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 124.859251][ T6010] usb 1-1: USB disconnect, device number 3 [ 125.381433][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 127.043412][ T6343] netlink: 'syz.4.119': attribute type 12 has an invalid length. [ 127.385697][ T1231] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.531273][ T1231] usb 4-1: Using ep0 maxpacket: 16 [ 127.533613][ T1231] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.533642][ T1231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.533672][ T1231] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 127.533691][ T1231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.540808][ T1231] usb 4-1: config 0 descriptor?? [ 128.009452][ T1231] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 128.467367][ T10] usb 4-1: USB disconnect, device number 4 [ 128.512534][ T6361] fido_id[6361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 129.184580][ T6376] ======================================================= [ 129.184580][ T6376] WARNING: The mand mount option has been deprecated and [ 129.184580][ T6376] and is ignored by this kernel. Remove the mand [ 129.184580][ T6376] option from the mount to silence this warning. [ 129.184580][ T6376] ======================================================= [ 129.190946][ T6376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 130.843584][ T6406] process 'syz.1.143' launched '/dev/fd/4' with NULL argv: empty string added [ 131.135559][ T6414] bridge0: entered allmulticast mode [ 131.144736][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 131.144824][ T6414] bridge_slave_1: left allmulticast mode [ 131.144849][ T6414] bridge_slave_1: left promiscuous mode [ 131.145118][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.233160][ T6414] bridge_slave_0: left allmulticast mode [ 131.233191][ T6414] bridge_slave_0: left promiscuous mode [ 131.233455][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.476396][ T6414] bridge0 (unregistering): left allmulticast mode [ 131.573825][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.583469][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.606256][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.608202][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.609071][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.273982][ T9] libceph: connect (1)[c::]:6789 error -101 [ 132.275365][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 132.284832][ T9] libceph: connect (1)[c::]:6789 error -101 [ 132.285056][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 132.296938][ T6431] ceph: No mds server is up or the cluster is laggy [ 132.460736][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 132.460771][ T6438] netlink: 'syz.4.154': attribute type 15 has an invalid length. [ 132.546690][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 132.546921][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 132.646940][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 132.646974][ T6438] netlink: 'syz.4.154': attribute type 15 has an invalid length. [ 132.668646][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.673229][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.673273][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.673305][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.989689][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989785][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271390][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.421268][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 133.426739][ T5945] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 133.426766][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.426783][ T5945] usb 2-1: Product: syz [ 133.426795][ T5945] usb 2-1: Manufacturer: syz [ 133.426807][ T5945] usb 2-1: SerialNumber: syz [ 133.505579][ T5945] usb 2-1: config 0 descriptor?? [ 133.520908][ T5945] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 133.711485][ T59] Bluetooth: hci3: command tx timeout [ 133.777351][ T6458] netlink: set zone limit has 4 unknown bytes [ 133.942701][ T6459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.459109][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 134.960137][ T5945] gspca_ov534_9: reg_r err -71 [ 135.211324][ T5945] gspca_ov534_9: Unknown sensor 0000 [ 135.211419][ T5945] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 135.235381][ T5945] usb 2-1: USB disconnect, device number 2 [ 135.569448][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.569598][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.569844][ T6424] bridge_slave_0: entered allmulticast mode [ 135.599685][ T6424] bridge_slave_0: entered promiscuous mode [ 135.613114][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.613251][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.613483][ T6424] bridge_slave_1: entered allmulticast mode [ 135.619983][ T6424] bridge_slave_1: entered promiscuous mode [ 135.781444][ T59] Bluetooth: hci3: command tx timeout [ 136.040632][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.085171][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.706066][ T6424] team0: Port device team_slave_0 added [ 136.752327][ T6424] team0: Port device team_slave_1 added [ 136.981330][ T37] audit: type=1326 audit(1756122047.296:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.4.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a236bebe9 code=0x0 [ 137.231462][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.322235][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.322251][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.322276][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.327877][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.327892][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.327916][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.392813][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 137.394401][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.394451][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.394476][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.395967][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.396016][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.396039][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.397628][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.397677][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.397700][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.399134][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.399186][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.399209][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.404977][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.405033][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.405057][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.432644][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.432701][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.432725][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.437609][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.437661][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.437684][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.446137][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.446190][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.446213][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.467965][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 137.467993][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 137.468011][ T9] usb 2-1: Product: syz [ 137.468024][ T9] usb 2-1: Manufacturer: syz [ 137.468036][ T9] usb 2-1: SerialNumber: syz [ 137.521881][ T9] usb 2-1: config 0 descriptor?? [ 137.715492][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 137.812896][ T9] usb 2-1: USB disconnect, device number 3 [ 137.834333][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 137.861515][ T59] Bluetooth: hci3: command tx timeout [ 138.399691][ T6424] hsr_slave_0: entered promiscuous mode [ 138.409589][ T6424] hsr_slave_1: entered promiscuous mode [ 138.410759][ T6424] debugfs: 'hsr0' already exists in 'hsr' [ 138.410783][ T6424] Cannot create hsr debugfs directory [ 138.878682][ T6539] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.878711][ T6539] overlayfs: failed to set xattr on upper [ 138.878718][ T6539] overlayfs: ...falling back to redirect_dir=nofollow. [ 138.878725][ T6539] overlayfs: ...falling back to metacopy=off. [ 138.878732][ T6539] overlayfs: ...falling back to index=off. [ 138.878738][ T6539] overlayfs: ...falling back to uuid=null. [ 138.945427][ T6543] binder: 6540:6543 ioctl c0306201 200000000640 returned -22 [ 139.089921][ T6546] netlink: 452 bytes leftover after parsing attributes in process `syz.4.188'. [ 139.336996][ T37] audit: type=1326 audit(1756122049.656:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6548 comm="syz.4.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a236bebe9 code=0x0 [ 139.941327][ T59] Bluetooth: hci3: command tx timeout [ 140.740923][ T6424] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.808089][ T6582] netlink: 180 bytes leftover after parsing attributes in process `syz.3.202'. [ 140.820947][ T6424] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.876006][ T6582] netlink: 180 bytes leftover after parsing attributes in process `syz.3.202'. [ 140.877410][ T6424] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.957423][ T6424] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.453207][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.487096][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.528717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.530506][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.592605][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.592766][ T6044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.876934][ T6603] kvm: user requested TSC rate below hardware speed [ 142.639427][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.672216][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.701319][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.831301][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 142.833244][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.833273][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.833306][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 142.833326][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.866231][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.866261][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.866280][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.866318][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.866338][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.889443][ T9] usb 1-1: config 0 descriptor?? [ 142.909677][ T10] usb 4-1: config 0 descriptor?? [ 143.418576][ T10] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xe [ 143.418758][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 143.575520][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 143.618528][ T9] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 143.791454][ T9] usb 1-1: USB disconnect, device number 4 [ 143.910949][ T6424] veth0_vlan: entered promiscuous mode [ 143.984298][ T6424] veth1_vlan: entered promiscuous mode [ 144.130086][ T5984] usb 4-1: USB disconnect, device number 5 [ 144.175559][ T6424] veth0_macvtap: entered promiscuous mode [ 144.200828][ T6646] fido_id[6646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 144.250355][ T6424] veth1_macvtap: entered promiscuous mode [ 144.317584][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.350641][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.403784][ T6108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.419239][ T1365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.439692][ T1365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.439975][ T1365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.047259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.047278][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.252937][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.252957][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.360380][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 145.360426][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.226'. [ 145.814724][ T6670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.630616][ T6692] warning: `syz.0.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.615046][ T6716] netlink: 'syz.1.245': attribute type 2 has an invalid length. [ 147.615068][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 148.367277][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 148.928003][ T6757] openvswitch: netlink: IPv4 tun info is not correct [ 149.811291][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.006049][ T5926] usb 1-1: config 0 has no interfaces? [ 150.006086][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.006107][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.017687][ T5926] usb 1-1: config 0 descriptor?? [ 150.249822][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.250392][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.268258][ T59] Bluetooth: hci1: Unknown advertising packet type: 0x72 [ 150.268292][ T59] Bluetooth: hci1: Malformed LE Event: 0x0d [ 150.269942][ T9] usb 1-1: USB disconnect, device number 5 [ 153.505241][ T6861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.581578][ T6863] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 153.759684][ T6865] syzkaller1: entered promiscuous mode [ 153.759713][ T6865] syzkaller1: entered allmulticast mode [ 153.888299][ T6871] input: syz0 as /devices/virtual/input/input8 [ 153.999482][ T6877] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.757791][ T6917] netlink: 'syz.1.323': attribute type 29 has an invalid length. [ 155.782046][ T6917] netlink: 'syz.1.323': attribute type 29 has an invalid length. [ 155.787452][ T6917] netlink: 500 bytes leftover after parsing attributes in process `syz.1.323'. [ 156.221454][ T9] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 156.249528][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.259943][ T6926] batadv_slave_0: entered promiscuous mode [ 156.384297][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.385920][ T9] usb 1-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 156.385948][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 156.389809][ T9] usb 1-1: string descriptor 0 read error: -22 [ 156.389962][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 156.389983][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.462034][ T6921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.501020][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 156.968169][ C1] bcm5974 1-1:1.0: trackpad urb failed: -1 [ 157.096815][ T9] usb 1-1: USB disconnect, device number 6 [ 157.108250][ T5188] bcm5974 1-1:1.0: could not read from device [ 157.275250][ T6082] udevd[6082]: Error opening device "/dev/input/event4": No such file or directory [ 157.275379][ T6082] udevd[6082]: Unable to EVIOCGABS device "/dev/input/event4" [ 157.275488][ T6082] udevd[6082]: Unable to EVIOCGABS device "/dev/input/event4" [ 157.275593][ T6082] udevd[6082]: Unable to EVIOCGABS device "/dev/input/event4" [ 157.275730][ T6082] udevd[6082]: Unable to EVIOCGABS device "/dev/input/event4" [ 157.728166][ T37] audit: type=1326 audit(1756122068.056:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6946 comm="syz.5.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f678881ebe9 code=0x0 [ 157.728406][ T6945] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 157.770561][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.775657][ T6945] bridge_slave_1: left allmulticast mode [ 157.775686][ T6945] bridge_slave_1: left promiscuous mode [ 157.776369][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.908907][ T6945] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 158.249882][ T6958] GUP no longer grows the stack in syz.0.339 (6958): 200000004000-20000000a000 (200000002000) [ 158.249939][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.0.339 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.249961][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.249978][ T6958] Call Trace: [ 158.249986][ T6958] [ 158.249994][ T6958] dump_stack_lvl+0x189/0x250 [ 158.250028][ T6958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.250053][ T6958] ? __pfx__printk+0x10/0x10 [ 158.250070][ T6958] ? find_vma+0xe7/0x160 [ 158.250107][ T6958] __get_user_pages+0x237e/0x2b60 [ 158.250173][ T6958] get_user_pages_remote+0x2f1/0xad0 [ 158.250196][ T6958] ? __pfx_mtree_load+0x10/0x10 [ 158.250238][ T6958] ? __pfx_get_user_pages_remote+0x10/0x10 [ 158.250265][ T6958] ? __access_remote_vm+0x367/0x7d0 [ 158.250296][ T6958] __access_remote_vm+0x211/0x7d0 [ 158.250331][ T6958] ? __pfx___access_remote_vm+0x10/0x10 [ 158.250354][ T6958] ? set_page_refcounted+0xa0/0x1e0 [ 158.250379][ T6958] ? alloc_pages_noprof+0xe4/0x1e0 [ 158.250408][ T6958] proc_pid_cmdline_read+0x433/0x810 [ 158.250432][ T6958] ? __asan_memset+0x22/0x50 [ 158.250459][ T6958] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 158.250487][ T6958] ? rw_verify_area+0x2ac/0x4e0 [ 158.250512][ T6958] vfs_readv+0x5b3/0x850 [ 158.250538][ T6958] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 158.250566][ T6958] ? __pfx_vfs_readv+0x10/0x10 [ 158.250607][ T6958] ? __fget_files+0x2a/0x420 [ 158.250635][ T6958] ? __fget_files+0x3a6/0x420 [ 158.250656][ T6958] ? __fget_files+0x2a/0x420 [ 158.250689][ T6958] __x64_sys_preadv+0x19a/0x2a0 [ 158.250714][ T6958] ? __pfx___x64_sys_preadv+0x10/0x10 [ 158.250734][ T6958] ? rcu_is_watching+0x15/0xb0 [ 158.250765][ T6958] ? do_syscall_64+0xbe/0x3b0 [ 158.250792][ T6958] do_syscall_64+0xfa/0x3b0 [ 158.250812][ T6958] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.250832][ T6958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.250850][ T6958] ? clear_bhb_loop+0x60/0xb0 [ 158.250880][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.250904][ T6958] RIP: 0033:0x7f495570ebe9 [ 158.250928][ T6958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.250946][ T6958] RSP: 002b:00007f4953976038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 158.250975][ T6958] RAX: ffffffffffffffda RBX: 00007f4955935fa0 RCX: 00007f495570ebe9 [ 158.250989][ T6958] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 158.251000][ T6958] RBP: 00007f4955791e19 R08: 0000000021000008 R09: 0000000000000000 [ 158.251012][ T6958] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 158.251023][ T6958] R13: 00007f4955936038 R14: 00007f4955935fa0 R15: 00007ffd958a2888 [ 158.251055][ T6958] [ 159.351323][ T1231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.508425][ T1231] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 159.508453][ T1231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.508469][ T1231] usb 6-1: Product: syz [ 159.508480][ T1231] usb 6-1: Manufacturer: syz [ 159.508492][ T1231] usb 6-1: SerialNumber: syz [ 159.549697][ T1231] usb 6-1: config 0 descriptor?? [ 159.563811][ T1231] ch341 6-1:0.0: ch341-uart converter detected [ 160.012106][ T6989] netlink: 96 bytes leftover after parsing attributes in process `syz.0.353'. [ 160.845693][ T1231] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 161.032988][ T5905] usb 6-1: USB disconnect, device number 2 [ 161.120539][ T5905] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 161.148468][ T5905] ch341 6-1:0.0: device disconnected [ 161.382798][ T7004] syzkaller1: entered promiscuous mode [ 161.382826][ T7004] syzkaller1: entered allmulticast mode [ 161.801553][ T7018] loop6: detected capacity change from 0 to 7 [ 161.881848][ T6109] Dev loop6: unable to read RDB block 7 [ 161.881890][ T6109] loop6: AHDI p1 p2 [ 161.881927][ T6109] loop6: partition table partially beyond EOD, truncated [ 161.882178][ T6109] loop6: p1 start 926365495 is beyond EOD, truncated [ 161.981503][ T7018] Dev loop6: unable to read RDB block 7 [ 161.981535][ T7018] loop6: AHDI p1 p2 [ 161.981564][ T7018] loop6: partition table partially beyond EOD, truncated [ 161.981811][ T7018] loop6: p1 start 926365495 is beyond EOD, truncated [ 162.475594][ T6109] udevd[6109]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 162.758073][ T6109] udevd[6109]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 163.004322][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 163.042653][ T7041] netem: change failed [ 163.348604][ T37] audit: type=1326 audit(1756122073.676:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7049 comm="syz.0.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f495570ebe9 code=0x0 [ 164.426260][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 164.481649][ T7069] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.742288][ T7083] vxlan0: entered promiscuous mode [ 164.752613][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.753105][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.753141][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.753173][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.104744][ T7099] fuse: root generation should be zero [ 166.160169][ T7131] gre2: entered promiscuous mode [ 166.160198][ T7131] gre2: entered allmulticast mode [ 166.551861][ T7136] af_packet: tpacket_rcv: packet too big, clamped from 65253 to 4294967272. macoff=96 [ 166.993418][ T37] audit: type=1326 audit(1756122077.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 166.995707][ T37] audit: type=1326 audit(1756122077.326:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 166.995970][ T37] audit: type=1326 audit(1756122077.326:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 166.998818][ T37] audit: type=1326 audit(1756122077.326:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 167.002121][ T37] audit: type=1326 audit(1756122077.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 167.003067][ T37] audit: type=1326 audit(1756122077.336:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 167.008765][ T37] audit: type=1326 audit(1756122077.336:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 167.011594][ T37] audit: type=1326 audit(1756122077.336:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.3.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7ffc0000 [ 167.310984][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 167.311017][ T7159] netlink: 'syz.3.423': attribute type 18 has an invalid length. [ 167.345919][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 167.345952][ T7159] netlink: 'syz.3.423': attribute type 18 has an invalid length. [ 167.783170][ T37] audit: type=1326 audit(1756122078.116:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7175 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a236bebe9 code=0x7ffc0000 [ 169.288694][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 172.111732][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.326347][ T5905] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 172.326374][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.326391][ T5905] usb 2-1: Product: syz [ 172.326404][ T5905] usb 2-1: Manufacturer: syz [ 172.326416][ T5905] usb 2-1: SerialNumber: syz [ 172.393369][ T5905] usb 2-1: config 0 descriptor?? [ 172.405982][ T5905] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 173.700423][ T6010] usb 2-1: USB disconnect, device number 4 [ 174.335593][ T7272] syzkaller1: entered promiscuous mode [ 174.335619][ T7272] syzkaller1: entered allmulticast mode [ 177.011301][ T5926] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.041309][ T5905] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.163686][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.163715][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.163735][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.163780][ T5926] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.163800][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.241447][ T5926] usb 5-1: config 0 descriptor?? [ 177.268201][ T5905] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 177.268227][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.268244][ T5905] usb 1-1: Product: syz [ 177.268257][ T5905] usb 1-1: Manufacturer: syz [ 177.268323][ T5905] usb 1-1: SerialNumber: syz [ 177.331519][ T5905] usb 1-1: config 0 descriptor?? [ 177.796781][ T5926] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 177.976095][ T9] usb 5-1: USB disconnect, device number 4 [ 178.209472][ T7343] fido_id[7343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 178.477479][ T7349] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 178.477499][ T7349] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 178.477510][ T7349] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.482'. [ 178.792785][ T5905] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 178.827433][ T5905] usb 1-1: USB disconnect, device number 7 [ 178.907523][ T5905] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 179.068706][ T5905] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 179.147558][ T7358] bridge0: entered allmulticast mode [ 179.152666][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 179.152756][ T7358] bridge_slave_0: left allmulticast mode [ 179.152781][ T7358] bridge_slave_0: left promiscuous mode [ 179.155497][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.465682][ T7358] bridge0 (unregistering): left allmulticast mode [ 179.592954][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.487'. [ 179.676849][ T7362] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 179.676872][ T7362] netlink: 'syz.3.487': attribute type 2 has an invalid length. [ 179.676884][ T7362] netlink: 'syz.3.487': attribute type 3 has an invalid length. [ 180.015358][ T7368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.393332][ T5905] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.575320][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.575351][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.575385][ T5905] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 180.575405][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.607128][ T5905] usb 5-1: config 0 descriptor?? [ 180.724311][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 180.724406][ T7381] netlink: 'syz.3.493': attribute type 15 has an invalid length. [ 180.737128][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 180.737162][ T7381] netlink: 'syz.3.493': attribute type 15 has an invalid length. [ 180.976587][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 180.976704][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.002232][ T5905] usb 5-1: USB disconnect, device number 5 [ 181.287605][ T7389] loop2: detected capacity change from 0 to 7 [ 181.294082][ T7389] Dev loop2: unable to read RDB block 7 [ 181.294109][ T7389] loop2: AHDI p1 p2 p3 [ 181.294136][ T7389] loop2: partition table partially beyond EOD, truncated [ 181.294370][ T7389] loop2: p1 start 3233191936 is beyond EOD, truncated [ 181.294385][ T7389] loop2: p2 start 3786425150 is beyond EOD, truncated [ 182.003858][ T5222] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.132059][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.291497][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 182.294076][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.294102][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.294149][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.294169][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.294208][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.294228][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.368046][ T5222] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 182.371941][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.371996][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.372019][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.380042][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.380126][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.380151][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.390048][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.390103][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.390134][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.394812][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.394864][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.394887][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.421307][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.421360][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.421382][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.451304][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.451369][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.451393][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.455863][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.455919][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.455943][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.509761][ T5222] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.509817][ T5222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.509850][ T5222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.561289][ T5222] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 182.561315][ T5222] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 182.561331][ T5222] usb 5-1: Product: syz [ 182.561342][ T5222] usb 5-1: Manufacturer: syz [ 182.561353][ T5222] usb 5-1: SerialNumber: syz [ 182.687785][ T7398] syz.0.504 (7398) used greatest stack depth: 17656 bytes left [ 182.704290][ T5222] usb 5-1: config 0 descriptor?? [ 182.723526][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 182.723572][ T9] usbtmc 4-1:16.0: can't read capabilities [ 182.828155][ T5222] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 182.981946][ T5905] usb 4-1: USB disconnect, device number 6 [ 183.048008][ T9] usb 5-1: USB disconnect, device number 6 [ 183.082344][ T9] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 183.728854][ T7412] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 185.648553][ T7463] loop2: detected capacity change from 0 to 7 [ 185.666457][ T7463] Dev loop2: unable to read RDB block 7 [ 185.666509][ T7463] loop2: unable to read partition table [ 185.666739][ T7463] loop2: partition table beyond EOD, truncated [ 185.666767][ T7463] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.605690][ T7495] netlink: 'syz.5.540': attribute type 1 has an invalid length. [ 186.898558][ T7498] bond1: (slave gretap1): making interface the new active one [ 186.927616][ T7498] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 187.167349][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 187.167365][ T37] audit: type=1326 audit(1756122097.496:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7506 comm="syz.5.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f678881ebe9 code=0x0 [ 187.287750][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.541'. [ 188.682480][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.683708][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.790378][ T7537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.553'. [ 188.808861][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.553'. [ 191.344265][ T7592] netlink: 'syz.3.576': attribute type 2 has an invalid length. [ 191.344288][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 192.427173][ T7609] openvswitch: netlink: IPv4 tun info is not correct [ 194.428741][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428817][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.104929][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.130321][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.144342][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.148697][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.168590][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.288154][ T7658] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 195.591310][ T5904] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 195.754227][ T5904] usb 4-1: config 0 has no interfaces? [ 195.754264][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.754285][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.773886][ T7670] netlink: 'syz.5.609': attribute type 29 has an invalid length. [ 195.790917][ T7670] netlink: 'syz.5.609': attribute type 29 has an invalid length. [ 195.792211][ T7670] netlink: 500 bytes leftover after parsing attributes in process `syz.5.609'. [ 195.876527][ T5904] usb 4-1: config 0 descriptor?? [ 195.967216][ T37] audit: type=1326 audit(1756122106.286:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7672 comm="syz.0.610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f495570ebe9 code=0x0 [ 196.059069][ T5904] kernel write not supported for file bpf-prog (pid: 5904 comm: kworker/1:3) [ 196.125156][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.125732][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.167807][ T5152] Bluetooth: hci4: Unknown advertising packet type: 0x72 [ 196.167835][ T5152] Bluetooth: hci4: Malformed LE Event: 0x0d [ 196.169764][ T5904] usb 4-1: USB disconnect, device number 7 [ 196.634223][ T7655] chnl_net:caif_netlink_parms(): no params data found [ 196.672762][ T7687] netlink: 240 bytes leftover after parsing attributes in process `syz.5.613'. [ 197.221323][ T5152] Bluetooth: hci0: command tx timeout [ 197.467297][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.489362][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.489622][ T7655] bridge_slave_0: entered allmulticast mode [ 197.530338][ T7655] bridge_slave_0: entered promiscuous mode [ 197.548195][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.548355][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.548578][ T7655] bridge_slave_1: entered allmulticast mode [ 197.592652][ T7655] bridge_slave_1: entered promiscuous mode [ 197.998946][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.029382][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.718864][ T7655] team0: Port device team_slave_0 added [ 198.746514][ T7745] Illegal XDP return value 4294967274 on prog (id 76) dev syz_tun, expect packet loss! [ 198.798323][ T7655] team0: Port device team_slave_1 added [ 199.301488][ T5152] Bluetooth: hci0: command tx timeout [ 199.392200][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.392215][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.392238][ T7655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.411775][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.411790][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.411821][ T7655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.388219][ T7655] hsr_slave_0: entered promiscuous mode [ 200.398290][ T7655] hsr_slave_1: entered promiscuous mode [ 200.407137][ T7655] debugfs: 'hsr0' already exists in 'hsr' [ 200.407164][ T7655] Cannot create hsr debugfs directory [ 200.628738][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 200.963432][ T7779] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.381328][ T5152] Bluetooth: hci0: command tx timeout [ 201.420605][ T7779] netlink: 'syz.0.645': attribute type 12 has an invalid length. [ 201.420628][ T7779] netlink: 'syz.0.645': attribute type 29 has an invalid length. [ 201.420640][ T7779] netlink: 148 bytes leftover after parsing attributes in process `syz.0.645'. [ 201.420684][ T7779] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 201.420697][ T7779] netlink: 'syz.0.645': attribute type 3 has an invalid length. [ 201.421020][ T7780] netlink: 'syz.0.645': attribute type 12 has an invalid length. [ 201.421033][ T7780] netlink: 'syz.0.645': attribute type 29 has an invalid length. [ 201.421045][ T7780] netlink: 148 bytes leftover after parsing attributes in process `syz.0.645'. [ 201.421065][ T7780] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 201.421076][ T7780] netlink: 'syz.0.645': attribute type 3 has an invalid length. [ 202.241397][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 202.405729][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.405760][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.405794][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 202.405813][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.419011][ T9] usb 1-1: config 0 descriptor?? [ 202.900837][ T7655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.932021][ T9] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 203.048159][ T7655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.146920][ T7655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.308642][ T7655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.461873][ T5152] Bluetooth: hci0: command tx timeout [ 203.929885][ T9] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 203.929943][ T9] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 203.946571][ T9] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 203.991113][ T9] usb 1-1: USB disconnect, device number 8 [ 204.241328][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 204.302813][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.358129][ T7655] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.384941][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.385203][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.391331][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 204.416570][ T5904] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.416597][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.416615][ T5904] usb 5-1: Product: syz [ 204.416627][ T5904] usb 5-1: Manufacturer: syz [ 204.416638][ T5904] usb 5-1: SerialNumber: syz [ 204.434027][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.434244][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.464639][ T5904] usb 5-1: config 0 descriptor?? [ 204.744362][ T5904] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.599570][ T5904] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 205.612779][ T5904] usb 5-1: USB disconnect, device number 7 [ 206.362507][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.851359][ T5222] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.001392][ T5222] usb 1-1: Using ep0 maxpacket: 32 [ 207.035516][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.035548][ T5222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.035585][ T5222] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.035606][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.105083][ T5222] usb 1-1: config 0 descriptor?? [ 207.128874][ T5222] hub 1-1:0.0: USB hub found [ 207.383253][ T5222] hub 1-1:0.0: 1 port detected [ 208.037688][ T6010] hub 1-1:0.0: activate --> -90 [ 208.479679][ T5222] usb 1-1: USB disconnect, device number 9 [ 208.551521][ T7655] veth0_vlan: entered promiscuous mode [ 208.585383][ T7655] veth1_vlan: entered promiscuous mode [ 208.689436][ T7655] veth0_macvtap: entered promiscuous mode [ 208.711445][ T6010] usb 1-1-port1: config error [ 208.730551][ T7655] veth1_macvtap: entered promiscuous mode [ 208.765319][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.823926][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.891224][ T6044] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.891783][ T1117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.892007][ T1117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.892036][ T1117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.658332][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.658354][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.922945][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.922964][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.756107][ T1231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 210.959085][ T1231] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 210.959113][ T1231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.984640][ T1231] usb 7-1: config 0 descriptor?? [ 211.879985][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 211.880010][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 212.245200][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ad21c00: rx timeout, send abort [ 212.248713][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ad21c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 212.448106][ T1231] usb 7-1: Cannot set autoneg [ 212.448639][ T1231] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 212.458039][ T1231] usb 7-1: USB disconnect, device number 2 [ 212.567732][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 212.659774][ T7939] team1: entered promiscuous mode [ 212.659812][ T7939] team1: entered allmulticast mode [ 214.778339][ T7970] Bluetooth: MGMT ver 1.23 [ 214.779006][ T7970] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 215.066598][ T7974] netlink: 'syz.6.711': attribute type 10 has an invalid length. [ 215.467105][ T7974] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 215.863523][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 216.732579][ T7998] netlink: 'syz.6.721': attribute type 1 has an invalid length. [ 216.732599][ T7998] netlink: 'syz.6.721': attribute type 4 has an invalid length. [ 216.732610][ T7998] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.721'. [ 218.205387][ T8024] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 192 [ 218.661713][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 219.411507][ T8051] capability: warning: `syz.0.739' uses deprecated v2 capabilities in a way that may be insecure [ 220.033084][ T8071] netlink: 182 bytes leftover after parsing attributes in process `syz.6.747'. [ 220.955706][ T8088] netlink: 180 bytes leftover after parsing attributes in process `syz.6.753'. [ 221.013356][ T8089] netlink: 180 bytes leftover after parsing attributes in process `syz.6.753'. [ 221.260726][ T8095] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 223.140590][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 223.140623][ T8143] netlink: 'syz.4.767': attribute type 20 has an invalid length. [ 223.160920][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 223.214169][ T8143] netlink: 'syz.4.767': attribute type 20 has an invalid length. [ 223.771308][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 223.801295][ T1231] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.921269][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 223.927995][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 223.945724][ T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 223.945749][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.945767][ T10] usb 7-1: Product: syz [ 223.945778][ T10] usb 7-1: Manufacturer: syz [ 223.945790][ T10] usb 7-1: SerialNumber: syz [ 223.981482][ T1231] usb 5-1: Using ep0 maxpacket: 32 [ 223.984478][ T1231] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 223.984502][ T1231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.994818][ T10] usb 7-1: config 0 descriptor?? [ 224.023550][ T1231] usb 5-1: config 0 descriptor?? [ 224.027296][ T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 224.063001][ T10] usb 7-1: Detected FT232R [ 224.211499][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 224.248517][ T1231] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 224.337146][ T1231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.355996][ T1231] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 224.372786][ T1231] usb 5-1: media controller created [ 224.472044][ T1231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.508723][ T8165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.560440][ T8165] team0: Failed to send options change via netlink (err -105) [ 224.560463][ T8165] team0: Port device bond2 added [ 224.584999][ T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 224.636283][ T5905] usb 7-1: USB disconnect, device number 3 [ 224.832149][ T5905] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 224.836227][ T5905] ftdi_sio 7-1:0.0: device disconnected [ 225.451985][ T1231] stb0899_attach: Driver disabled by Kconfig [ 225.452000][ T1231] az6027: no front-end attached [ 225.452000][ T1231] [ 225.452925][ T1231] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 225.482485][ T1231] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 225.504816][ T1231] dvb-usb: schedule remote query interval to 400 msecs. [ 225.504848][ T1231] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 225.666024][ T5905] usb 5-1: USB disconnect, device number 8 [ 225.709919][ T8192] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 225.709945][ T8192] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.709956][ T8192] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 226.004701][ T5905] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 226.500827][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 226.500871][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 228.271300][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 228.441266][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 228.443878][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.443900][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.443916][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.443936][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.443972][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.443989][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.807544][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 228.807591][ T10] usbtmc 5-1:16.0: can't read capabilities [ 229.139855][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.157725][ T1117] bridge_slave_1: left allmulticast mode [ 229.158179][ T1117] bridge_slave_1: left promiscuous mode [ 229.179711][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.179791][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.179862][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.183806][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.195721][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.221284][ T5152] Bluetooth: hci5: command 0x1003 tx timeout [ 229.225607][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 229.272392][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.272475][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.272555][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.272909][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.272987][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.273055][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.275567][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.275645][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.275929][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.276003][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.276068][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.373315][ T10] usb 5-1: USB disconnect, device number 9 [ 229.818622][ T1117] bridge_slave_0: left allmulticast mode [ 229.818651][ T1117] bridge_slave_0: left promiscuous mode [ 229.822531][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.229108][ T8276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.121428][ T5904] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 232.271246][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 232.273668][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.273694][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.273715][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.273735][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.273772][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.273792][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.573344][ T5904] usb 1-1: GET_CAPABILITIES returned 0 [ 232.573390][ T5904] usbtmc 1-1:16.0: can't read capabilities [ 232.833825][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.833913][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.834235][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.834315][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.834386][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.834703][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.834772][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.834841][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.835145][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.835216][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.835522][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.835596][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.835854][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.835927][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.836195][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.836279][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.911696][ T5904] usb 1-1: USB disconnect, device number 10 [ 234.264941][ T8329] ceph: No mds server is up or the cluster is laggy [ 234.268511][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 234.268736][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 234.961741][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 235.113729][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.113755][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.115325][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.115347][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.115364][ T9] usb 1-1: SerialNumber: syz [ 235.195840][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.287722][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.345419][ T1117] bond0 (unregistering): Released all slaves [ 235.500164][ T9] usb 1-1: 0:2 : does not exist [ 235.895744][ T9] usb 1-1: USB disconnect, device number 11 [ 236.257573][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.459114][ T8354] loop2: detected capacity change from 0 to 1 [ 236.469015][ T8354] ldm_validate_privheads(): Disk read failed. [ 236.469104][ T8354] Dev loop2: unable to read RDB block 1 [ 236.469129][ T8354] loop2: AHDI p2 p3 [ 236.469155][ T8354] loop2: partition table partially beyond EOD, truncated [ 236.469401][ T8354] loop2: p3 start 335544320 is beyond EOD, truncated [ 237.175809][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 237.571450][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 237.721319][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 237.723670][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.723695][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.723717][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.723737][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.723775][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.723794][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.981668][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 237.981706][ T9] usbtmc 6-1:16.0: can't read capabilities [ 238.225986][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.226073][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.227161][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.227243][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.227318][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.227711][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.227787][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.227882][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.228247][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.228328][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.228404][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.228720][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.228790][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.228863][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.229164][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.229237][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 238.262157][ T5905] usb 6-1: USB disconnect, device number 3 [ 238.766521][ T37] audit: type=1326 audit(1756122149.096:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8394 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7fc00000 [ 239.011213][ T1117] hsr_slave_0: left promiscuous mode [ 239.146585][ T1117] hsr_slave_1: left promiscuous mode [ 239.147704][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.267246][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.591332][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 243.044939][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 243.111910][ T5222] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 243.274812][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 243.306045][ T5222] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 243.306072][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.333034][ T5222] usb 4-1: config 0 descriptor?? [ 244.828214][ T5222] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 244.828242][ T5222] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 244.828528][ T5222] asix 4-1:0.0: probe with driver asix failed with error -71 [ 244.867685][ T5222] usb 4-1: USB disconnect, device number 8 [ 245.615944][ T8464] input: syz1 as /devices/virtual/input/input11 [ 246.392456][ T8458] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 246.396593][ T8466] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.799832][ T8506] loop2: detected capacity change from 0 to 7 [ 247.827263][ T8506] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 247.827288][ T8506] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 247.827410][ T8506] Dev loop2: unable to read RDB block 7 [ 247.827509][ T8506] loop2: unable to read partition table [ 247.827755][ T8506] loop2: partition table beyond EOD, truncated [ 247.827773][ T8506] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.007203][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 248.007412][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 248.040466][ T8509] ceph: No mds server is up or the cluster is laggy [ 248.053658][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 248.053883][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 248.821777][ T5945] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 248.977929][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.977960][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.977996][ T5945] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 248.978015][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.997314][ T5945] usb 7-1: config 0 descriptor?? [ 249.509583][ T5945] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 249.509711][ T5945] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 249.604532][ T5945] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0008/input/input12 [ 249.880329][ T5945] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 249.921958][ T5222] usb 7-1: USB disconnect, device number 4 [ 250.411822][ T8559] fido_id[8559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 254.421829][ T5945] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 254.572743][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 254.575239][ T5945] usb 5-1: config 0 has no interfaces? [ 254.589200][ T5945] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 254.589227][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.589244][ T5945] usb 5-1: Product: syz [ 254.589256][ T5945] usb 5-1: Manufacturer: syz [ 254.589268][ T5945] usb 5-1: SerialNumber: syz [ 254.632040][ T5945] usb 5-1: config 0 descriptor?? [ 254.867413][ T5945] usb 5-1: USB disconnect, device number 10 [ 255.709789][ T37] audit: type=1800 audit(1756122165.986:20): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.938" name="file1" dev="overlay" ino=974 res=0 errno=0 [ 255.874080][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.874145][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.582562][ T5222] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 256.736341][ T5222] usb 7-1: config 0 has no interfaces? [ 256.736378][ T5222] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 256.736398][ T5222] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.774869][ T5222] usb 7-1: config 0 descriptor?? [ 257.027843][ T5222] usb 7-1: USB disconnect, device number 5 [ 257.946090][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 258.331441][ T5904] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 258.491408][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 258.509285][ T5904] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 258.509310][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.509338][ T5904] usb 5-1: Product: syz [ 258.509349][ T5904] usb 5-1: Manufacturer: syz [ 258.509361][ T5904] usb 5-1: SerialNumber: syz [ 258.549237][ T5904] usb 5-1: config 0 descriptor?? [ 258.594101][ T5904] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 260.014000][ T5904] gspca_stk1135: reg_w 0xf err -71 [ 260.015062][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015074][ T5904] gspca_stk1135: Sensor write failed [ 260.015096][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015104][ T5904] gspca_stk1135: Sensor write failed [ 260.015125][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015133][ T5904] gspca_stk1135: Sensor read failed [ 260.015153][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015162][ T5904] gspca_stk1135: Sensor read failed [ 260.015168][ T5904] gspca_stk1135: Detected sensor type unknown (0x0) [ 260.015193][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015201][ T5904] gspca_stk1135: Sensor read failed [ 260.015220][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015228][ T5904] gspca_stk1135: Sensor read failed [ 260.015248][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015255][ T5904] gspca_stk1135: Sensor write failed [ 260.015276][ T5904] gspca_stk1135: serial bus timeout: status=0x00 [ 260.015283][ T5904] gspca_stk1135: Sensor write failed [ 260.015368][ T5904] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 260.041522][ T5904] usb 5-1: USB disconnect, device number 11 [ 260.181052][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.967'. [ 261.532124][ T8784] netlink: 25 bytes leftover after parsing attributes in process `syz.4.970'. [ 261.602761][ T8785] netlink: 'syz.4.970': attribute type 4 has an invalid length. [ 263.308564][ T8769] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.966'. [ 263.466820][ C1] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff88803a265000: rx timeout, send abort [ 263.941608][ T8795] bridge_slave_0: left allmulticast mode [ 263.941638][ T8795] bridge_slave_0: left promiscuous mode [ 263.941881][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.966889][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88803a265000: abort rx timeout. Force session deactivation [ 264.064288][ T8795] bridge_slave_1: left allmulticast mode [ 264.064317][ T8795] bridge_slave_1: left promiscuous mode [ 264.064534][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.219566][ T8795] bond0: (slave bond_slave_0): Releasing backup interface [ 264.314997][ T8795] bond0: (slave bond_slave_1): Releasing backup interface [ 264.451840][ T8795] team0: Port device team_slave_0 removed [ 264.535201][ T8795] team0: Port device team_slave_1 removed [ 264.539965][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.539992][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.593829][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.593872][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.193742][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 265.341314][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 265.345617][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.345646][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.345681][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 265.345701][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.402325][ T9] usb 6-1: config 0 descriptor?? [ 265.467150][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.841848][ T9] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 265.952949][ T5945] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 266.107851][ T5945] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 266.107879][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.118181][ T5945] usb 1-1: config 0 descriptor?? [ 266.154112][ T9] usb 6-1: USB disconnect, device number 4 [ 267.121963][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 267.227394][ T8851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.482036][ T8855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.483941][ T8855] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 267.491086][ T8855] bond1: (slave vti0): Error -95 calling set_mac_address [ 267.603613][ T5945] pegasus 1-1:0.0: can't reset MAC [ 267.603973][ T5945] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 267.630625][ T5945] usb 1-1: USB disconnect, device number 12 [ 268.162948][ T8871] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 268.162988][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1000'. [ 268.208117][ T8871] dummy0: entered promiscuous mode [ 268.210122][ T8871] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 268.478380][ T8883] tipc: Failed to remove unknown binding: 66,3,3/0:9504513/9504514 [ 268.956529][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'. [ 269.230103][ T8894] vlan2: entered promiscuous mode [ 269.230125][ T8894] bridge0: entered promiscuous mode [ 269.510124][ T8911] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 269.747949][ T8919] bond1: (slave geneve2): making interface the new active one [ 269.767352][ T8919] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 269.767621][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.767686][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.767717][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 269.767749][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 270.030857][ T8934] overlayfs: failed to clone upperpath [ 270.091518][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 270.243268][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 270.266121][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 270.266150][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.266166][ T9] usb 6-1: Product: syz [ 270.266179][ T9] usb 6-1: Manufacturer: syz [ 270.266191][ T9] usb 6-1: SerialNumber: syz [ 270.302234][ T9] usb 6-1: config 0 descriptor?? [ 270.497613][ T8947] fuse: Bad value for 'fd' [ 270.530964][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.775578][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 270.801101][ T9] usb 6-1: USB disconnect, device number 5 [ 271.312718][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 271.888258][ T8989] fuse: Bad value for 'fd' [ 272.248533][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 272.327847][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 273.931993][ T9067] fuse: Bad value for 'fd' [ 275.068858][ T9098] netlink: 'syz.0.1070': attribute type 10 has an invalid length. [ 275.131811][ T9098] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 275.264621][ T9106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.264639][ T9106] IPv6: NLM_F_CREATE should be set when creating new route [ 276.282313][ T5984] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 276.436733][ T5984] usb 1-1: config 0 has no interfaces? [ 276.439714][ T5984] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.439739][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.439755][ T5984] usb 1-1: Product: syz [ 276.439767][ T5984] usb 1-1: Manufacturer: syz [ 276.455772][ T5984] usb 1-1: config 0 descriptor?? [ 276.692203][ T5904] usb 1-1: USB disconnect, device number 13 [ 276.898793][ T9165] overlayfs: failed to clone upperpath [ 277.141475][ T9173] pim6reg: entered allmulticast mode [ 277.150900][ T9173] pim6reg: left allmulticast mode [ 277.167048][ T9175] fuse: Bad value for 'fd' [ 277.556499][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 277.873796][ T37] audit: type=1326 audit(1756122444.189:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x7fc00000 [ 278.433601][ T37] audit: type=1326 audit(1756122444.749:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9189 comm="syz.3.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f709dbcade9 code=0x7fc00000 [ 278.751356][ T5904] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 278.932226][ T5904] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 278.932254][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.932271][ T5904] usb 1-1: Product: syz [ 278.932283][ T5904] usb 1-1: Manufacturer: syz [ 278.932296][ T5904] usb 1-1: SerialNumber: syz [ 278.947170][ T5904] usb 1-1: config 0 descriptor?? [ 279.238590][ T5904] usb 1-1: USB disconnect, device number 14 [ 279.506511][ T9224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.636709][ T9228] loop2: detected capacity change from 0 to 7 [ 279.652831][ T9228] Dev loop2: unable to read RDB block 7 [ 279.652889][ T9228] loop2: unable to read partition table [ 279.653124][ T9228] loop2: partition table beyond EOD, truncated [ 279.653140][ T9228] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.873287][ T9233] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 279.879684][ T9] IPVS: starting estimator thread 0... [ 280.001664][ T9239] IPVS: using max 8 ests per chain, 19200 per kthread [ 280.034591][ T37] audit: type=1326 audit(1756122446.359:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.034889][ T37] audit: type=1326 audit(1756122446.359:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.038502][ T37] audit: type=1326 audit(1756122446.359:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.039352][ T37] audit: type=1326 audit(1756122446.359:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.040050][ T37] audit: type=1326 audit(1756122446.359:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.040361][ T37] audit: type=1326 audit(1756122446.359:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.040616][ T37] audit: type=1326 audit(1756122446.359:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.041116][ T37] audit: type=1326 audit(1756122446.359:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.0.1129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f495570ebe9 code=0x7ffc0000 [ 280.379617][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'. [ 280.789563][ T9269] syz.0.1137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 280.857413][ T9274] fuse: Bad value for 'fd' [ 281.066976][ T9277] cgroup: fork rejected by pids controller in /syz0 [ 282.681294][ T5904] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 282.724100][ T1365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.724132][ T1365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 282.934245][ T5904] usb 6-1: config index 0 descriptor too short (expected 44306, got 18) [ 282.934271][ T5904] usb 6-1: config 0 has too many interfaces: 140, using maximum allowed: 32 [ 282.934289][ T5904] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 140 [ 282.934307][ T5904] usb 6-1: config 0 has no interface number 0 [ 282.934352][ T5904] usb 6-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.22 [ 282.934371][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.939767][ T5904] usb 6-1: config 0 descriptor?? [ 282.964382][ T5904] usb-storage 6-1:0.33: USB Mass Storage device detected [ 283.411910][ T5904] usb 6-1: USB disconnect, device number 6 [ 283.589679][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.625455][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.656555][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.679170][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.680787][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.855462][ T1365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.855484][ T1365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.633497][ T1365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.633530][ T1365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.341308][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1168'. [ 285.346352][ T1365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.346382][ T1365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 285.803864][ T59] Bluetooth: hci1: command tx timeout [ 286.818639][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 287.711240][ T5984] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 287.861433][ T59] Bluetooth: hci1: command tx timeout [ 287.881421][ T5984] usb 7-1: Using ep0 maxpacket: 8 [ 287.901803][ T5984] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.901860][ T5984] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 287.901880][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.941113][ T5984] usb 7-1: config 0 descriptor?? [ 287.966861][ T5984] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 288.716192][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 289.406533][ T5984] gspca_vc032x: reg_w err -71 [ 289.406625][ T5984] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 289.409864][ T5984] usb 7-1: USB disconnect, device number 6 [ 289.672168][ T1365] bond1 (unregistering): (slave geneve2): Releasing active interface [ 289.941287][ T59] Bluetooth: hci1: command tx timeout [ 290.411298][ T5904] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 290.591579][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 290.600616][ T5904] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 290.600639][ T5904] usb 7-1: config 0 has no interface number 0 [ 290.600683][ T5904] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 290.600697][ T5904] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 290.607546][ T5904] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 290.607572][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 290.607590][ T5904] usb 7-1: Product: syz [ 290.607602][ T5904] usb 7-1: SerialNumber: syz [ 290.618781][ T5904] usb 7-1: config 0 descriptor?? [ 290.636910][ T5904] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 290.650124][ T5904] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input13 [ 290.894970][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.897450][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.900203][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.902426][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.903167][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.903401][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.903628][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.903876][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.904102][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.904342][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 290.933054][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 290.933176][ T5904] usb 7-1: USB disconnect, device number 7 [ 291.010801][ T5904] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 291.232244][ T1365] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 291.257000][ T1365] bond0 (unregistering): Released all slaves [ 291.280135][ T1365] bond1 (unregistering): Released all slaves [ 291.367256][ T9374] gtp0: entered promiscuous mode [ 291.901393][ T5904] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 292.021715][ T59] Bluetooth: hci1: command tx timeout [ 292.071294][ T5904] usb 6-1: Using ep0 maxpacket: 8 [ 292.079090][ T5904] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.079115][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.079132][ T5904] usb 6-1: Product: syz [ 292.079145][ T5904] usb 6-1: Manufacturer: syz [ 292.079157][ T5904] usb 6-1: SerialNumber: syz [ 292.096272][ T5904] usb 6-1: config 0 descriptor?? [ 292.338565][ T5904] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 293.376292][ T5904] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 293.403446][ T5904] usb 6-1: USB disconnect, device number 7 [ 293.467328][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1207'. [ 293.621978][ T9446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.707645][ T9449] overlayfs: failed to clone upperpath [ 293.775360][ T9446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.990645][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 293.992012][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.992039][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.992051][ T59] Workqueue: hci3 hci_rx_work [ 293.992091][ T59] Call Trace: [ 293.992099][ T59] [ 293.992108][ T59] dump_stack_lvl+0x189/0x250 [ 293.992142][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.992172][ T59] ? __pfx__printk+0x10/0x10 [ 293.992200][ T59] ? kernfs_path_from_node+0x2c/0x280 [ 293.992221][ T59] ? kernfs_path_from_node+0x243/0x280 [ 293.992238][ T59] ? kernfs_path_from_node+0x2c/0x280 [ 293.992261][ T59] sysfs_create_dir_ns+0x259/0x280 [ 293.992292][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 293.992315][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 293.992346][ T59] ? rt_spin_unlock+0x65/0x80 [ 293.992372][ T59] kobject_add_internal+0x5a5/0xb50 [ 293.992410][ T59] kobject_add+0x155/0x220 [ 293.992441][ T59] ? __pfx_kobject_add+0x10/0x10 [ 293.992474][ T59] ? get_device_parent+0x370/0x3a0 [ 293.992507][ T59] device_add+0x408/0xb50 [ 293.992540][ T59] hci_conn_add_sysfs+0xd5/0x1e0 [ 293.992573][ T59] le_conn_complete_evt+0xc3a/0x1220 [ 293.992608][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 293.992642][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.992667][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.992697][ T59] ? skb_pull_data+0xfb/0x200 [ 293.992722][ T59] hci_le_conn_complete_evt+0x187/0x450 [ 293.992754][ T59] hci_event_packet+0x78f/0x1200 [ 293.992788][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 293.992814][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 293.992842][ T59] ? __pfx_migrate_enable+0x10/0x10 [ 293.992874][ T59] ? hci_send_to_monitor+0xe2/0x570 [ 293.992899][ T59] hci_rx_work+0x46a/0xe80 [ 293.992924][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 293.992956][ T59] process_scheduled_works+0xade/0x17b0 [ 293.993010][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.993054][ T59] worker_thread+0x8a0/0xda0 [ 293.993107][ T59] kthread+0x711/0x8a0 [ 293.993141][ T59] ? __pfx_worker_thread+0x10/0x10 [ 293.993166][ T59] ? __pfx_kthread+0x10/0x10 [ 293.993202][ T59] ? __pfx_kthread+0x10/0x10 [ 293.993232][ T59] ret_from_fork+0x3fc/0x770 [ 293.993260][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 293.993290][ T59] ? __switch_to_asm+0x39/0x70 [ 293.993308][ T59] ? __switch_to_asm+0x33/0x70 [ 293.993325][ T59] ? __pfx_kthread+0x10/0x10 [ 293.993357][ T59] ret_from_fork_asm+0x1a/0x30 [ 293.993392][ T59] [ 293.993548][ T59] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 293.993590][ T59] Bluetooth: hci3: failed to register connection device [ 294.433075][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.433243][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.433496][ T9320] bridge_slave_0: entered allmulticast mode [ 294.467624][ T9320] bridge_slave_0: entered promiscuous mode [ 294.578515][ T9460] loop2: detected capacity change from 0 to 7 [ 294.588733][ T9460] loop2: p1 [ 294.588756][ T9460] loop2: partition table partially beyond EOD, truncated [ 294.588829][ T9460] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 294.681457][ T1365] hsr_slave_0: left promiscuous mode [ 294.721716][ T1365] hsr_slave_1: left promiscuous mode [ 294.935967][ T1365] veth1_macvtap: left promiscuous mode [ 294.937183][ T1365] veth0_macvtap: left promiscuous mode [ 294.937494][ T1365] veth1_vlan: left promiscuous mode [ 294.937910][ T1365] veth0_vlan: left promiscuous mode [ 295.781358][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 295.931410][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 295.933501][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 295.933522][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.939085][ T9] usb 6-1: config 0 descriptor?? [ 295.960299][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 297.405932][ T9] usb 6-1: USB disconnect, device number 8 [ 298.034916][ T9490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.914336][ T9517] fuse: Bad value for 'fd' [ 302.582576][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.582758][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.583026][ T9320] bridge_slave_1: entered allmulticast mode [ 302.585695][ T9320] bridge_slave_1: entered promiscuous mode [ 302.798308][ T5945] kernel write not supported for file bpf-prog (pid: 5945 comm: kworker/1:6) [ 303.514934][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.537636][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.072904][ T9320] team0: Port device team_slave_0 added [ 304.098484][ T9320] team0: Port device team_slave_1 added [ 304.578568][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.578585][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.578608][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.580939][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.580952][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.580975][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.029676][ T9320] hsr_slave_0: entered promiscuous mode [ 305.034346][ T9320] hsr_slave_1: entered promiscuous mode [ 306.747461][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 306.747480][ T37] audit: type=1326 audit(1756122473.049:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9570 comm="syz.5.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678881ebe9 code=0x7fc00000 [ 306.991010][ T9577] sctp: [Deprecated]: syz.5.1255 (pid 9577) Use of int in max_burst socket option. [ 306.991010][ T9577] Use struct sctp_assoc_value instead [ 307.491229][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 308.333530][ T9575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.334425][ T9597] overlayfs: failed to clone upperpath [ 308.415810][ T9575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.458888][ T9575] bond0 (unregistering): Released all slaves [ 308.697866][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 309.127034][ T9320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.189926][ T9320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.245955][ T9320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.333902][ T9320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.722106][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.778779][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.807306][ T9635] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 309.829172][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.829593][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.878682][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.878873][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.625524][ T9654] fuse: Bad value for 'fd' [ 310.822713][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.083254][ T9320] veth0_vlan: entered promiscuous mode [ 311.184043][ T9320] veth1_vlan: entered promiscuous mode [ 311.328527][ T9320] veth0_macvtap: entered promiscuous mode [ 311.381753][ T9320] veth1_macvtap: entered promiscuous mode [ 311.730669][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.745957][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.824833][ T1365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.834805][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.840216][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.848862][ T1365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.640122][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.640144][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.803052][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.803072][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.298706][ T9725] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 314.471415][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 314.621416][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 314.624319][ T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 314.624344][ T9] usb 1-1: config 1 has no interface number 0 [ 314.624394][ T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 314.624418][ T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 314.624440][ T9] usb 1-1: config 1 interface 105 has no altsetting 0 [ 314.643311][ T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 314.643341][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.643359][ T9] usb 1-1: Product: syz [ 314.643371][ T9] usb 1-1: Manufacturer: syz [ 314.643384][ T9] usb 1-1: SerialNumber: syz [ 314.672716][ T9729] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.684693][ T9723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.686471][ T9723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.829722][ T9732] capability: warning: `syz.5.1311' uses 32-bit capabilities (legacy support in use) [ 315.195074][ T9723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 315.195187][ T9723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 315.602502][ T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 315.603188][ T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 315.741453][ T9] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4a:85:d4:9a:99:30 [ 315.811557][ T31] usb 1-1: USB disconnect, device number 15 [ 315.813427][ T31] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 315.922819][ T9749] 9pnet_fd: Insufficient options for proto=fd [ 316.076561][ T31] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 316.076717][ T31] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 316.076857][ T31] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 316.871359][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 317.026930][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 317.026958][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.045376][ T9] usb 1-1: config 0 descriptor?? [ 317.055718][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 317.262086][ T9] gspca_spca508: reg_read err -32 [ 317.266578][ T9] gspca_spca508: reg_read err -32 [ 317.273206][ T9] gspca_spca508: reg_read err -32 [ 317.276945][ T9] gspca_spca508: reg_read err -32 [ 317.281818][ T9] gspca_spca508: reg_read err -32 [ 317.317087][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.317154][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.351572][ T46] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 317.492059][ T9] gspca_spca508: reg write: error -71 [ 317.492166][ T9] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 317.502438][ T9] usb 1-1: USB disconnect, device number 16 [ 317.525508][ T46] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 317.525537][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.570598][ T46] usb 6-1: config 0 descriptor?? [ 317.587836][ T46] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 318.023227][ T9795] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 318.835576][ T46] usb 6-1: USB disconnect, device number 9 [ 319.387408][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 321.222882][ T9833] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 323.637427][ T9877] 9pnet_fd: Insufficient options for proto=fd [ 324.527905][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 325.865087][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1393'. [ 325.865425][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1393'. [ 330.166052][ T5984] IPVS: starting estimator thread 0... [ 330.271750][T10022] IPVS: using max 7 ests per chain, 16800 per kthread [ 333.486711][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'. [ 333.591615][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1462'. [ 333.600019][T10076] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.629729][T10076] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.629778][T10076] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.629811][T10076] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.175453][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175495][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175523][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175550][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175576][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175603][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175630][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 338.175668][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'. [ 340.292103][T10255] sctp: [Deprecated]: syz.4.1520 (pid 10255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.292103][T10255] Use struct sctp_sack_info instead [ 342.002765][ T37] audit: type=1326 audit(1756122508.329:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10277 comm="syz.5.1527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f678881ebe9 code=0x0 [ 342.067409][T10281] overlayfs: failed to clone upperpath [ 342.514682][ T37] audit: type=1326 audit(1756122508.839:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10248 comm="syz.3.1517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f709dc2ebe9 code=0x0 [ 348.289672][T10385] tipc: Started in network mode [ 348.289696][T10385] tipc: Node identity 7, cluster identity 4711 [ 348.289708][T10385] tipc: Node number set to 7 [ 349.175623][T10411] __nla_validate_parse: 42 callbacks suppressed [ 349.175644][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1581'. [ 349.175805][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1581'. [ 349.836857][T10431] overlayfs: failed to clone upperpath [ 350.556444][ T8780] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 350.728789][ T8780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.728818][ T8780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.728855][ T8780] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 350.728875][ T8780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.774777][ T8780] usb 1-1: config 0 descriptor?? [ 351.145285][ T37] audit: type=1326 audit(1756122517.459:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.6.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37bfeebe9 code=0x7fc00000 [ 351.786066][ T8780] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 351.816902][ T37] audit: type=1326 audit(1756122518.139:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.6.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37bf8ade9 code=0x7fc00000 [ 351.816951][ T37] audit: type=1326 audit(1756122518.139:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.6.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd37bf8aeaf code=0x7fc00000 [ 351.816981][ T37] audit: type=1326 audit(1756122518.139:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10466 comm="syz.6.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd37bfeebe9 code=0x7fc00000 [ 351.928439][ T8780] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 351.959401][ T8780] usb 1-1: USB disconnect, device number 17 [ 352.379340][T10494] overlayfs: failed to clone upperpath [ 352.450317][T10498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.450345][T10498] overlayfs: failed to set xattr on upper [ 352.450353][T10498] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.450361][T10498] overlayfs: ...falling back to uuid=null. [ 355.000445][T10562] mmap: syz.6.1636 (10562) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 356.256782][T10586] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 356.632576][T10601] 9pnet_fd: Insufficient options for proto=fd [ 357.036992][T10613] bond_slave_1: entered promiscuous mode [ 357.037592][T10613] veth0_to_bridge: entered promiscuous mode [ 357.038476][T10611] veth0_to_bridge: left promiscuous mode [ 357.038919][T10611] bond_slave_1: left promiscuous mode [ 357.668451][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 357.677272][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1663'. [ 358.789852][T10651] IPv6: addrconf: prefix option has invalid lifetime [ 359.024773][T10655] overlayfs: failed to clone upperpath [ 359.774545][T10680] sctp: [Deprecated]: syz.3.1681 (pid 10680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.774545][T10680] Use struct sctp_sack_info instead [ 361.476166][ T9928] ================================================================== [ 361.476187][ T9928] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x92/0x190 [ 361.476215][ T9928] Read of size 8 at addr ffff888058866760 by task syz.5.1391/9928 [ 361.476234][ T9928] [ 361.476245][ T9928] CPU: 1 UID: 0 PID: 9928 Comm: syz.5.1391 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 361.476265][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.476277][ T9928] Call Trace: [ 361.476284][ T9928] [ 361.476291][ T9928] dump_stack_lvl+0x189/0x250 [ 361.476314][ T9928] ? __kasan_check_byte+0x12/0x40 [ 361.476336][ T9928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.476356][ T9928] ? lock_release+0x4b/0x3e0 [ 361.476379][ T9928] ? __virt_addr_valid+0x4a5/0x5c0 [ 361.476404][ T9928] print_report+0xca/0x240 [ 361.476423][ T9928] ? __list_del_entry_valid_or_report+0x92/0x190 [ 361.476442][ T9928] kasan_report+0x118/0x150 [ 361.476463][ T9928] ? __list_del_entry_valid_or_report+0x92/0x190 [ 361.476487][ T9928] __list_del_entry_valid_or_report+0x92/0x190 [ 361.476508][ T9928] bt_accept_unlink+0x39/0x240 [ 361.476527][ T9928] l2cap_sock_teardown_cb+0x17e/0x460 [ 361.476552][ T9928] l2cap_chan_del+0xb5/0x5e0 [ 361.476573][ T9928] ? l2cap_conn_del+0x37c/0x680 [ 361.476592][ T9928] l2cap_conn_del+0x388/0x680 [ 361.476612][ T9928] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 361.476630][ T9928] hci_conn_hash_flush+0x10a/0x230 [ 361.476653][ T9928] hci_dev_close_sync+0xaef/0x1330 [ 361.476676][ T9928] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 361.476695][ T9928] ? mutex_lock_nested+0x154/0x1d0 [ 361.476710][ T9928] ? hci_unregister_dev+0x212/0x510 [ 361.476728][ T9928] hci_unregister_dev+0x21a/0x510 [ 361.476746][ T9928] vhci_release+0x83/0xe0 [ 361.476785][ T9928] ? __pfx_vhci_release+0x10/0x10 [ 361.476802][ T9928] __fput+0x45b/0xa80 [ 361.476824][ T9928] task_work_run+0x1d4/0x260 [ 361.476846][ T9928] ? __pfx_task_work_run+0x10/0x10 [ 361.476861][ T9928] ? do_exit+0x6b0/0x2300 [ 361.476876][ T9928] ? kmem_cache_free+0x195/0x510 [ 361.476898][ T9928] do_exit+0x6b5/0x2300 [ 361.476912][ T9928] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 361.476935][ T9928] ? __lock_acquire+0xab9/0xd20 [ 361.476954][ T9928] ? __pfx_do_exit+0x10/0x10 [ 361.476968][ T9928] ? rt_mutex_slowunlock+0x493/0x8a0 [ 361.476985][ T9928] ? rt_spin_lock+0x1bb/0x2c0 [ 361.477005][ T9928] do_group_exit+0x21c/0x2d0 [ 361.477023][ T9928] get_signal+0x125e/0x1310 [ 361.477053][ T9928] arch_do_signal_or_restart+0x9a/0x750 [ 361.477073][ T9928] ? __pfx_get_timespec64+0x10/0x10 [ 361.477095][ T9928] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.477122][ T9928] ? exit_to_user_mode_loop+0x40/0x110 [ 361.477144][ T9928] exit_to_user_mode_loop+0x75/0x110 [ 361.477164][ T9928] do_syscall_64+0x2bd/0x3b0 [ 361.477185][ T9928] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.477204][ T9928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.477221][ T9928] ? clear_bhb_loop+0x60/0xb0 [ 361.477239][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.477256][ T9928] RIP: 0033:0x7f67888514a5 [ 361.477271][ T9928] Code: Unable to access opcode bytes at 0x7f678885147b. [ 361.477281][ T9928] RSP: 002b:00007f6786a7df80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 361.477300][ T9928] RAX: fffffffffffffdfc RBX: 00007f6788a45fa0 RCX: 00007f67888514a5 [ 361.477313][ T9928] RDX: 00007f6786a7dfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.477325][ T9928] RBP: 00007f67888a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 361.477336][ T9928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 361.477347][ T9928] R13: 00007f6788a46038 R14: 00007f6788a45fa0 R15: 00007fff0e80a938 [ 361.477368][ T9928] [ 361.477373][ T9928] [ 361.477377][ T9928] Allocated by task 1365: [ 361.477386][ T9928] kasan_save_track+0x3e/0x80 [ 361.477403][ T9928] __kasan_kmalloc+0x93/0xb0 [ 361.477419][ T9928] __kmalloc_noprof+0x1ef/0x430 [ 361.477437][ T9928] ___neigh_create+0x722/0x2360 [ 361.477453][ T9928] ip6_finish_output2+0xb51/0x1720 [ 361.477469][ T9928] ndisc_send_skb+0xb54/0x1440 [ 361.477487][ T9928] ndisc_send_ns+0xcb/0x150 [ 361.477504][ T9928] addrconf_dad_work+0xb7b/0x15a0 [ 361.477523][ T9928] process_scheduled_works+0xade/0x17b0 [ 361.477541][ T9928] worker_thread+0x8a0/0xda0 [ 361.477558][ T9928] kthread+0x711/0x8a0 [ 361.477576][ T9928] ret_from_fork+0x3fc/0x770 [ 361.477593][ T9928] ret_from_fork_asm+0x1a/0x30 [ 361.477608][ T9928] [ 361.477612][ T9928] The buggy address belongs to the object at ffff888058866000 [ 361.477612][ T9928] which belongs to the cache kmalloc-2k of size 2048 [ 361.477627][ T9928] The buggy address is located 784 bytes to the right of [ 361.477627][ T9928] allocated 1104-byte region [ffff888058866000, ffff888058866450) [ 361.477645][ T9928] [ 361.477649][ T9928] The buggy address belongs to the physical page: [ 361.477670][ T9928] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58860 [ 361.477689][ T9928] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 361.477702][ T9928] flags: 0x80000000000040(head|node=0|zone=1) [ 361.477720][ T9928] page_type: f5(slab) [ 361.477736][ T9928] raw: 0080000000000040 ffff888019842000 ffffea0000a48200 dead000000000002 [ 361.477749][ T9928] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 361.477769][ T9928] head: 0080000000000040 ffff888019842000 ffffea0000a48200 dead000000000002 [ 361.477783][ T9928] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 361.477797][ T9928] head: 0080000000000003 ffffea0001621801 00000000ffffffff 00000000ffffffff [ 361.477810][ T9928] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 361.477818][ T9928] page dumped because: kasan: bad access detected [ 361.477826][ T9928] page_owner tracks the page as allocated [ 361.477832][ T9928] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 88314312539, free_ts 0 [ 361.477866][ T9928] post_alloc_hook+0x240/0x2a0 [ 361.477887][ T9928] get_page_from_freelist+0x2119/0x21b0 [ 361.477902][ T9928] __alloc_frozen_pages_noprof+0x181/0x370 [ 361.477917][ T9928] alloc_pages_mpol+0xd1/0x380 [ 361.477935][ T9928] allocate_slab+0x8a/0x370 [ 361.477950][ T9928] ___slab_alloc+0x8d1/0xdd0 [ 361.477969][ T9928] __kmalloc_cache_noprof+0xe6/0x320 [ 361.477988][ T9928] rtnl_newlink+0xed/0x1c70 [ 361.478004][ T9928] rtnetlink_rcv_msg+0x7cc/0xb70 [ 361.478020][ T9928] netlink_rcv_skb+0x205/0x470 [ 361.478036][ T9928] netlink_unicast+0x843/0xa10 [ 361.478050][ T9928] netlink_sendmsg+0x805/0xb30 [ 361.478066][ T9928] __sock_sendmsg+0x219/0x270 [ 361.478081][ T9928] __sys_sendto+0x3c7/0x520 [ 361.478097][ T9928] __x64_sys_sendto+0xde/0x100 [ 361.478114][ T9928] do_syscall_64+0xfa/0x3b0 [ 361.478132][ T9928] page_owner free stack trace missing [ 361.478139][ T9928] [ 361.478143][ T9928] Memory state around the buggy address: [ 361.478152][ T9928] ffff888058866600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.478164][ T9928] ffff888058866680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.478175][ T9928] >ffff888058866700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.478187][ T9928] ^ [ 361.478197][ T9928] ffff888058866780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.478209][ T9928] ffff888058866800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.478217][ T9928] ================================================================== [ 361.519711][ T9928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 361.519734][ T9928] CPU: 1 UID: 0 PID: 9928 Comm: syz.5.1391 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 361.519754][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.519772][ T9928] Call Trace: [ 361.519779][ T9928] [ 361.519786][ T9928] dump_stack_lvl+0x99/0x250 [ 361.519814][ T9928] ? __asan_memcpy+0x40/0x70 [ 361.519830][ T9928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.519850][ T9928] ? __pfx__printk+0x10/0x10 [ 361.519871][ T9928] vpanic+0x281/0x750 [ 361.519891][ T9928] ? preempt_schedule+0xae/0xc0 [ 361.519908][ T9928] ? __pfx_vpanic+0x10/0x10 [ 361.519926][ T9928] ? preempt_schedule_common+0x83/0xd0 [ 361.519943][ T9928] ? preempt_schedule+0xae/0xc0 [ 361.519960][ T9928] ? __pfx_preempt_schedule+0x10/0x10 [ 361.519980][ T9928] panic+0xb9/0xc0 [ 361.519999][ T9928] ? __pfx_panic+0x10/0x10 [ 361.520020][ T9928] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 361.520043][ T9928] ? __list_del_entry_valid_or_report+0x92/0x190 [ 361.520062][ T9928] check_panic_on_warn+0x89/0xb0 [ 361.520079][ T9928] ? __list_del_entry_valid_or_report+0x92/0x190 [ 361.520097][ T9928] end_report+0x78/0x160 [ 361.520117][ T9928] kasan_report+0x129/0x150 [ 361.520138][ T9928] ? __list_del_entry_valid_or_report+0x92/0x190 [ 361.520161][ T9928] __list_del_entry_valid_or_report+0x92/0x190 [ 361.520182][ T9928] bt_accept_unlink+0x39/0x240 [ 361.520204][ T9928] l2cap_sock_teardown_cb+0x17e/0x460 [ 361.520229][ T9928] l2cap_chan_del+0xb5/0x5e0 [ 361.520251][ T9928] ? l2cap_conn_del+0x37c/0x680 [ 361.520272][ T9928] l2cap_conn_del+0x388/0x680 [ 361.520294][ T9928] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 361.520315][ T9928] hci_conn_hash_flush+0x10a/0x230 [ 361.520338][ T9928] hci_dev_close_sync+0xaef/0x1330 [ 361.520362][ T9928] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 361.520382][ T9928] ? mutex_lock_nested+0x154/0x1d0 [ 361.520398][ T9928] ? hci_unregister_dev+0x212/0x510 [ 361.520417][ T9928] hci_unregister_dev+0x21a/0x510 [ 361.520435][ T9928] vhci_release+0x83/0xe0 [ 361.520454][ T9928] ? __pfx_vhci_release+0x10/0x10 [ 361.520470][ T9928] __fput+0x45b/0xa80 [ 361.520491][ T9928] task_work_run+0x1d4/0x260 [ 361.520510][ T9928] ? __pfx_task_work_run+0x10/0x10 [ 361.520526][ T9928] ? do_exit+0x6b0/0x2300 [ 361.520541][ T9928] ? kmem_cache_free+0x195/0x510 [ 361.520564][ T9928] do_exit+0x6b5/0x2300 [ 361.520579][ T9928] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 361.520601][ T9928] ? __lock_acquire+0xab9/0xd20 [ 361.520623][ T9928] ? __pfx_do_exit+0x10/0x10 [ 361.520636][ T9928] ? rt_mutex_slowunlock+0x493/0x8a0 [ 361.520654][ T9928] ? rt_spin_lock+0x1bb/0x2c0 [ 361.520675][ T9928] do_group_exit+0x21c/0x2d0 [ 361.520693][ T9928] get_signal+0x125e/0x1310 [ 361.520723][ T9928] arch_do_signal_or_restart+0x9a/0x750 [ 361.520744][ T9928] ? __pfx_get_timespec64+0x10/0x10 [ 361.520772][ T9928] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.520799][ T9928] ? exit_to_user_mode_loop+0x40/0x110 [ 361.520822][ T9928] exit_to_user_mode_loop+0x75/0x110 [ 361.520842][ T9928] do_syscall_64+0x2bd/0x3b0 [ 361.520862][ T9928] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.520882][ T9928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.520898][ T9928] ? clear_bhb_loop+0x60/0xb0 [ 361.520917][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.520933][ T9928] RIP: 0033:0x7f67888514a5 [ 361.520948][ T9928] Code: Unable to access opcode bytes at 0x7f678885147b. [ 361.520957][ T9928] RSP: 002b:00007f6786a7df80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 361.520975][ T9928] RAX: fffffffffffffdfc RBX: 00007f6788a45fa0 RCX: 00007f67888514a5 [ 361.520986][ T9928] RDX: 00007f6786a7dfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.520997][ T9928] RBP: 00007f67888a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 361.521007][ T9928] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 361.521018][ T9928] R13: 00007f6788a46038 R14: 00007f6788a45fa0 R15: 00007fff0e80a938 [ 361.521037][ T9928] [ 361.521349][ T9928] Kernel Offset: disabled