last executing test programs: 6m41.187142298s ago: executing program 4 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 6m40.51227988s ago: executing program 4 (id=377): epoll_create1(0x0) r0 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0) 6m39.282270455s ago: executing program 4 (id=385): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6m37.765890192s ago: executing program 4 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40894) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 6m37.418394136s ago: executing program 4 (id=393): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030307a92"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, 0x0, 0x0) 6m35.951015938s ago: executing program 4 (id=399): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0xfffffffe, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 6m34.540732158s ago: executing program 32 (id=399): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0xfffffffe, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 2m51.55094762s ago: executing program 3 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) close(r0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2, 0x1, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 2m47.388043816s ago: executing program 3 (id=1102): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) openat2(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/cgroup.procs\x00', &(0x7f0000000440)={0x0, 0x0, 0x2c}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x83) r1 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pivot_root(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m46.000207883s ago: executing program 3 (id=1106): ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m43.210244363s ago: executing program 3 (id=1112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x2004, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000040)=0x13e) 2m38.85609221s ago: executing program 3 (id=1123): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) 2m37.480119094s ago: executing program 3 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, 0x0) 2m22.371450449s ago: executing program 33 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, 0x0) 1m4.559731449s ago: executing program 5 (id=1314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 1m0.66451885s ago: executing program 5 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000e27f000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500), &(0x7f00000003c0)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 58.91013682s ago: executing program 5 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x20004004) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0303000000000000000006000000040003"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000040), 0x4) 56.504053424s ago: executing program 5 (id=1331): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) unshare(0x8000400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x44054}, 0x8010) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) 56.096512837s ago: executing program 5 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) 54.48396364s ago: executing program 5 (id=1335): openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 38.191463066s ago: executing program 34 (id=1335): openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0x10f, @time={0xf2ee}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 22.577621042s ago: executing program 6 (id=1385): pipe2$watch_queue(0x0, 0x80) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000) 15.29671388s ago: executing program 6 (id=1398): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.556531488s ago: executing program 6 (id=1400): openat(0xffffffffffffff9c, 0x0, 0x42, 0xa8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 12.29099032s ago: executing program 1 (id=1402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r3) 11.776143708s ago: executing program 1 (id=1403): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @local}, 0x14) 11.475559132s ago: executing program 1 (id=1404): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) getdents(r1, &(0x7f0000000500)=""/205, 0xcd) 11.176223059s ago: executing program 1 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 10.501325978s ago: executing program 2 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 10.235538766s ago: executing program 2 (id=1409): syz_genetlink_get_family_id$wireguard(0xfffffffffffffffc, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000200)=r3) socket(0x10, 0x3, 0x0) 10.030256702s ago: executing program 0 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) 8.906763719s ago: executing program 2 (id=1411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) 8.456124573s ago: executing program 0 (id=1412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) syz_open_dev$I2C(0x0, 0x0, 0x60000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 8.370959811s ago: executing program 1 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 8.106821078s ago: executing program 6 (id=1414): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.051507526s ago: executing program 0 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) 5.051092136s ago: executing program 6 (id=1416): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 4.962891267s ago: executing program 1 (id=1417): syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2c2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x23e}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 3.945694224s ago: executing program 0 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x18) open$dir(&(0x7f0000000100)='./file0\x00', 0x1afc40, 0x0) 3.785154198s ago: executing program 2 (id=1419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 2.688551729s ago: executing program 0 (id=1420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 2.168121175s ago: executing program 2 (id=1421): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 376.084288ms ago: executing program 2 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r3, 0x402, 0x17) fcntl$notify(r3, 0x402, 0x0) 360.101832ms ago: executing program 0 (id=1423): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 0s ago: executing program 6 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 80.304910][ T5822] cgroup: Unknown subsys name 'net' [ 80.531749][ T5822] cgroup: Unknown subsys name 'cpuset' [ 80.587724][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.394051][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.506416][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.511000][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.516073][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.517545][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.538801][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.642806][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.652521][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.662163][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.667912][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.668680][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.672612][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.673489][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.676407][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.679262][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.685793][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.688611][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.689711][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.690772][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.691803][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.692899][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.733916][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.735923][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.736863][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.738542][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.739328][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.886372][ T1237] cfg80211: failed to load regulatory.db [ 87.585334][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.729784][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.848183][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.919150][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.925022][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.489434][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.490726][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.491077][ T5845] bridge_slave_0: entered allmulticast mode [ 88.492758][ T5845] bridge_slave_0: entered promiscuous mode [ 88.568521][ T5850] Bluetooth: hci0: command tx timeout [ 88.610563][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.610702][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.610893][ T5845] bridge_slave_1: entered allmulticast mode [ 88.613031][ T5845] bridge_slave_1: entered promiscuous mode [ 88.797103][ T5850] Bluetooth: hci4: command tx timeout [ 88.797110][ T5153] Bluetooth: hci3: command tx timeout [ 88.881351][ T5153] Bluetooth: hci1: command tx timeout [ 88.881533][ T5850] Bluetooth: hci2: command tx timeout [ 88.956373][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.956481][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.956632][ T5834] bridge_slave_0: entered allmulticast mode [ 88.980303][ T5834] bridge_slave_0: entered promiscuous mode [ 89.039662][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.039800][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.039992][ T5841] bridge_slave_0: entered allmulticast mode [ 89.042719][ T5841] bridge_slave_0: entered promiscuous mode [ 89.188613][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.188772][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.188955][ T5834] bridge_slave_1: entered allmulticast mode [ 89.191742][ T5834] bridge_slave_1: entered promiscuous mode [ 89.201115][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.201989][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.202116][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.202280][ T5841] bridge_slave_1: entered allmulticast mode [ 89.204881][ T5841] bridge_slave_1: entered promiscuous mode [ 89.501870][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.579253][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.579391][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.579594][ T5839] bridge_slave_0: entered allmulticast mode [ 89.582668][ T5839] bridge_slave_0: entered promiscuous mode [ 89.586528][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.586663][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.586841][ T5840] bridge_slave_0: entered allmulticast mode [ 89.590810][ T5840] bridge_slave_0: entered promiscuous mode [ 89.850561][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.850689][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.850857][ T5839] bridge_slave_1: entered allmulticast mode [ 89.852630][ T5839] bridge_slave_1: entered promiscuous mode [ 89.853718][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.853850][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.853961][ T5840] bridge_slave_1: entered allmulticast mode [ 89.855410][ T5840] bridge_slave_1: entered promiscuous mode [ 89.981208][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.064872][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.201889][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.204407][ T5845] team0: Port device team_slave_0 added [ 90.212637][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.439586][ T5845] team0: Port device team_slave_1 added [ 90.531832][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.536500][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.637213][ T5850] Bluetooth: hci0: command tx timeout [ 90.783030][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.787003][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.792533][ T5834] team0: Port device team_slave_0 added [ 90.877224][ T5850] Bluetooth: hci4: command tx timeout [ 90.877256][ T5850] Bluetooth: hci3: command tx timeout [ 90.882132][ T5841] team0: Port device team_slave_0 added [ 90.957298][ T5153] Bluetooth: hci2: command tx timeout [ 90.957335][ T5153] Bluetooth: hci1: command tx timeout [ 91.060673][ T5834] team0: Port device team_slave_1 added [ 91.240223][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.240239][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.240263][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.245393][ T5841] team0: Port device team_slave_1 added [ 91.528302][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.528313][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.528327][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.530007][ T5839] team0: Port device team_slave_0 added [ 91.531994][ T5840] team0: Port device team_slave_0 added [ 91.733397][ T5839] team0: Port device team_slave_1 added [ 91.735179][ T5840] team0: Port device team_slave_1 added [ 91.736713][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.736723][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.736736][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.754020][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.754034][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.754057][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.929192][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.929208][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.929231][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.930774][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.930785][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.930807][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.208921][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.208936][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.208959][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.309696][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.309712][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.309736][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.408516][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.408532][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.408554][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.411152][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.411164][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.411176][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.419261][ T5845] hsr_slave_0: entered promiscuous mode [ 92.420575][ T5845] hsr_slave_1: entered promiscuous mode [ 92.717577][ T5850] Bluetooth: hci0: command tx timeout [ 92.802508][ T5834] hsr_slave_0: entered promiscuous mode [ 92.805981][ T5834] hsr_slave_1: entered promiscuous mode [ 92.806603][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 92.806690][ T5834] Cannot create hsr debugfs directory [ 92.833860][ T5841] hsr_slave_0: entered promiscuous mode [ 92.834660][ T5841] hsr_slave_1: entered promiscuous mode [ 92.835164][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.835186][ T5841] Cannot create hsr debugfs directory [ 92.957345][ T5153] Bluetooth: hci4: command tx timeout [ 92.957475][ T5850] Bluetooth: hci3: command tx timeout [ 93.037304][ T5153] Bluetooth: hci2: command tx timeout [ 93.037399][ T5850] Bluetooth: hci1: command tx timeout [ 93.286637][ T5839] hsr_slave_0: entered promiscuous mode [ 93.288271][ T5839] hsr_slave_1: entered promiscuous mode [ 93.289150][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 93.289172][ T5839] Cannot create hsr debugfs directory [ 93.299721][ T5840] hsr_slave_0: entered promiscuous mode [ 93.301113][ T5840] hsr_slave_1: entered promiscuous mode [ 93.301990][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 93.302012][ T5840] Cannot create hsr debugfs directory [ 94.797422][ T5850] Bluetooth: hci0: command tx timeout [ 94.963915][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.994465][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.025007][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.037281][ T5153] Bluetooth: hci4: command tx timeout [ 95.037325][ T5850] Bluetooth: hci3: command tx timeout [ 95.083324][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.117628][ T5153] Bluetooth: hci2: command tx timeout [ 95.117671][ T5850] Bluetooth: hci1: command tx timeout [ 95.214935][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.268345][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.311352][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.350641][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.508248][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.544401][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.583354][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.653444][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.810750][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.846293][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.882882][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.940489][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.046421][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.104068][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.157970][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.189462][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.239755][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.312287][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.374804][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.375310][ T4022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.418976][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.450628][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.450803][ T3983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.545654][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.608918][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.609150][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.653036][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.667994][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.668137][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.778466][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.782217][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.868501][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.874607][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.952470][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.952698][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.022086][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.072716][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.094529][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.094785][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.163004][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.163160][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.253596][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.326548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.338091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.384481][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.411107][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.411255][ T4022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.580028][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.802334][ T5845] veth0_vlan: entered promiscuous mode [ 97.896153][ T5845] veth1_vlan: entered promiscuous mode [ 98.006103][ T5834] veth0_vlan: entered promiscuous mode [ 98.088360][ T5834] veth1_vlan: entered promiscuous mode [ 98.183539][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.195036][ T5845] veth0_macvtap: entered promiscuous mode [ 98.231119][ T5845] veth1_macvtap: entered promiscuous mode [ 98.288933][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.356157][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.393119][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.431758][ T5834] veth0_macvtap: entered promiscuous mode [ 98.457986][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.497667][ T5834] veth1_macvtap: entered promiscuous mode [ 98.526073][ T4022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.550388][ T4022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.584485][ T4022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.604637][ T4022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.726402][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.803148][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.858635][ T5839] veth0_vlan: entered promiscuous mode [ 98.874730][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.889064][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.896451][ T5840] veth0_vlan: entered promiscuous mode [ 98.900574][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.906636][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.943842][ T5839] veth1_vlan: entered promiscuous mode [ 99.045071][ T5840] veth1_vlan: entered promiscuous mode [ 99.074086][ T3983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.074107][ T3983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.140563][ T5841] veth0_vlan: entered promiscuous mode [ 99.277453][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.277472][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.319054][ T5841] veth1_vlan: entered promiscuous mode [ 99.357432][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.357451][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.419541][ T5839] veth0_macvtap: entered promiscuous mode [ 99.437847][ T5840] veth0_macvtap: entered promiscuous mode [ 99.489174][ T5839] veth1_macvtap: entered promiscuous mode [ 99.493156][ T5840] veth1_macvtap: entered promiscuous mode [ 99.513385][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.513404][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.618733][ T5841] veth0_macvtap: entered promiscuous mode [ 99.691583][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.700367][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.709106][ T5841] veth1_macvtap: entered promiscuous mode [ 99.778453][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.790048][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.883493][ T86] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.890574][ T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.897103][ T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.920278][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930654][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.952251][ T86] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.964950][ T86] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.019588][ T86] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.034207][ T86] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.036351][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.261676][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.278371][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.300892][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.340565][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.420841][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.437160][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 100.489934][ T9] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 100.490022][ T9] usb 3-1: config 11 has no interface number 0 [ 100.490731][ T9] usb 3-1: config 11 interface 95 has no altsetting 0 [ 100.535803][ T9] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 100.535822][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.535833][ T9] usb 3-1: Product: syz [ 100.535840][ T9] usb 3-1: Manufacturer: syz [ 100.535847][ T9] usb 3-1: SerialNumber: syz [ 101.015939][ T9] usb 3-1: USB disconnect, device number 2 [ 101.036559][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.036579][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.286184][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.286198][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.532966][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.532986][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.674359][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.674378][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.912212][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.912233][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.214690][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.214711][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.147752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.374144][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.905019][ T5992] [U]  [ 103.905068][ T5992] [U] K{‘ [ 103.905576][ T5992] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 103.908386][ T5992] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 103.909293][ T5992] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 103.913342][ T5992] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 104.032885][ T5992] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 104.034493][ T5992] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 104.036427][ T5992] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 104.102389][ T5992] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 104.118424][ T5992] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 104.120387][ T5992] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 104.120583][ T5992] [U] 22½“Æ©ÐÛ©X?0;3U± [ 104.123572][ T5992] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 104.124494][ T5992] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 104.125316][ T5992] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 104.125743][ T5992] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 104.127437][ T5992] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 104.127500][ T5992] [U] ¹ EC [ 104.129113][ T5992] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 104.166988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.562974][ T5986] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 104.856987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.918098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.947011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.947149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.950085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.003569][ T6000] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 105.126439][ T6002] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 105.376986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.947348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.257004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.358343][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.328178][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.133236][ T5153] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.133331][ T5153] Bluetooth: hci3: Injecting HCI hardware error event [ 113.134776][ T5850] Bluetooth: hci3: hardware error 0x00 [ 113.377076][ T6056] capability: warning: `syz.2.28' uses deprecated v2 capabilities in a way that may be insecure [ 113.391802][ T6058] binder: 6057:6058 ioctl c0306201 200000000240 returned -14 [ 114.628020][ T6077] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.527098][ T5850] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 116.441652][ T6090] evm: overlay not supported [ 120.400223][ T6131] loop2: detected capacity change from 0 to 7 [ 120.511736][ T6131] Dev loop2: unable to read RDB block 7 [ 120.511791][ T6131] loop2: unable to read partition table [ 120.512024][ T6131] loop2: partition table beyond EOD, truncated [ 120.547124][ T6131] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.075394][ T6143] syz_tun: entered allmulticast mode [ 121.130360][ T6142] syz_tun: left allmulticast mode [ 121.158879][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.319088][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.319298][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 121.325310][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 121.355403][ T5902] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 121.355431][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.355449][ T5902] usb 5-1: Product: syz [ 121.355462][ T5902] usb 5-1: Manufacturer: syz [ 121.355476][ T5902] usb 5-1: SerialNumber: syz [ 121.410737][ T5902] usb 5-1: config 0 descriptor?? [ 121.429769][ T5902] hub 5-1:0.0: bad descriptor, ignoring hub [ 121.429808][ T5902] hub 5-1:0.0: probe with driver hub failed with error -5 [ 121.435257][ T5902] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.508365][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 121.510658][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.510681][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.510699][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.562075][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.562105][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.562124][ T9] usb 4-1: Product: syz [ 121.562138][ T9] usb 4-1: Manufacturer: syz [ 121.562151][ T9] usb 4-1: SerialNumber: syz [ 122.350135][ T9] usb 4-1: 0:2 : does not exist [ 123.791883][ T9] usb 4-1: USB disconnect, device number 2 [ 123.905196][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 124.055445][ T31] usb 5-1: USB disconnect, device number 2 [ 125.724523][ T6182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.724539][ T6182] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 126.036069][ T6182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.045734][ T6182] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 126.304338][ T6182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.304360][ T6182] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 126.357624][ T6190] process 'syz.4.67' launched './file0' with NULL argv: empty string added [ 126.588475][ T6182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.588498][ T6182] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 127.061731][ T37] audit: type=1800 audit(2000000021.890:2): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.67" name="/" dev="fuse" ino=3 res=0 errno=0 [ 127.256883][ T5851] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.422755][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.422812][ T5851] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.422835][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.460809][ T5851] usb 1-1: config 0 descriptor?? [ 127.504121][ T5851] pwc: Askey VC010 type 2 USB webcam detected. [ 127.667662][ T1237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.817920][ T1237] usb 3-1: Using ep0 maxpacket: 16 [ 127.821671][ T1237] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.821704][ T1237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.821736][ T1237] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 127.821758][ T1237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.882467][ T1237] usb 3-1: config 0 descriptor?? [ 127.909590][ T5851] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.910966][ T5851] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.911928][ T5851] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.912847][ T5851] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.913693][ T5851] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.914757][ T5851] pwc: recv_control_msg error -32 req 04 val 1400 [ 128.122839][ T5851] pwc: recv_control_msg error -71 req 02 val 2100 [ 128.124395][ T5851] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.124951][ T5851] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.125432][ T5851] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.125975][ T5851] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.126486][ T5851] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.127155][ T5851] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.129074][ T5851] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.129658][ T5851] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.158300][ T5851] pwc: Registered as video103. [ 128.191132][ T5851] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 128.289639][ T5851] usb 1-1: USB disconnect, device number 2 [ 129.055149][ T1237] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 129.345203][ T1237] usb 3-1: USB disconnect, device number 3 [ 130.270395][ T6222] fido_id[6222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 132.980859][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980916][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.305078][ T6308] Failed to get privilege flags for destination (handle=0x2:0x0) [ 138.393017][ T993] IPVS: starting estimator thread 0... [ 138.527345][ T6310] IPVS: using max 7 ests per chain, 16800 per kthread [ 138.599499][ T37] audit: type=1400 audit(2000000033.420:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6311 comm="syz.3.106" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 139.367191][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 147.009321][ T6396] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.737212][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.890266][ T31] usb 4-1: config 0 has no interfaces? [ 147.900742][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.900779][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.900798][ T31] usb 4-1: Product: syz [ 147.900811][ T31] usb 4-1: Manufacturer: syz [ 147.900824][ T31] usb 4-1: SerialNumber: syz [ 147.947384][ T31] usb 4-1: config 0 descriptor?? [ 148.842997][ T10] usb 4-1: USB disconnect, device number 3 [ 149.780872][ T6428] kvm: emulating exchange as write [ 149.999357][ T6288] wlan1: Trigger new scan to find an IBSS to join [ 151.508268][ T5850] block nbd3: Receive control failed (result -32) [ 151.528974][ T6441] block nbd3: shutting down sockets [ 153.998185][ T3983] wlan1: Trigger new scan to find an IBSS to join [ 154.937063][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.037990][ T1393] wlan1: Creating new IBSS network, BSSID 66:01:76:33:37:47 [ 155.117864][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 155.120094][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.120109][ T10] usb 4-1: config 0 has no interface number 0 [ 155.120134][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 155.120145][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 155.123712][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 155.123729][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.123739][ T10] usb 4-1: Product: syz [ 155.123746][ T10] usb 4-1: Manufacturer: syz [ 155.123753][ T10] usb 4-1: SerialNumber: syz [ 155.237363][ T10] usb 4-1: config 0 descriptor?? [ 155.417783][ T6500] Zero length message leads to an empty skb [ 155.580832][ T10] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 155.605085][ T10] cx231xx 4-1:0.1: Failed to read PCB config [ 155.605306][ T10] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 155.630535][ T10] usb 4-1: USB disconnect, device number 4 [ 156.626385][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.746972][ T6514] netlink: 'syz.2.172': attribute type 6 has an invalid length. [ 156.777865][ T6514] bridge1: entered promiscuous mode [ 156.777884][ T6514] bridge1: entered allmulticast mode [ 157.174703][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 157.184728][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.184753][ T10] usb 4-1: config 0 has no interface number 0 [ 157.184796][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 157.184815][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 157.202785][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 157.202815][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.202832][ T10] usb 4-1: Product: syz [ 157.202846][ T10] usb 4-1: Manufacturer: syz [ 157.202858][ T10] usb 4-1: SerialNumber: syz [ 157.226782][ T10] usb 4-1: config 0 descriptor?? [ 157.469888][ T10] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 157.477440][ T10] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 157.571781][ T1416] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.577947][ T1416] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.577989][ T1416] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.578020][ T1416] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.589515][ T10] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 157.589972][ T10] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 157.590389][ T10] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 157.590825][ T10] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 157.591244][ T10] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 157.591262][ T10] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -32 [ 157.676450][ T6529] binder: BINDER_SET_CONTEXT_MGR already set [ 157.676466][ T6529] binder: 6528:6529 ioctl 4018620d 200000004a80 returned -16 [ 157.972900][ T10] i2c i2c-2: Added multiplexed i2c bus 4 [ 158.012790][ T10] i2c i2c-2: Added multiplexed i2c bus 5 [ 158.042628][ T10] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 158.042654][ T10] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 158.672098][ T10] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 158.729206][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 158.729231][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 158.737278][ T10] usb 4-1: USB disconnect, device number 5 [ 159.220926][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.369250][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 159.371322][ T10] usb 4-1: config 0 has no interfaces? [ 159.371356][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 159.371378][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.435557][ T10] usb 4-1: config 0 descriptor?? [ 159.506545][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.670036][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 159.676057][ T9] usb 3-1: config 0 has no interfaces? [ 159.697755][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 159.697783][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.697802][ T9] usb 3-1: Product: syz [ 159.697814][ T9] usb 3-1: Manufacturer: syz [ 159.697827][ T9] usb 3-1: SerialNumber: syz [ 159.755332][ T9] usb 3-1: config 0 descriptor?? [ 159.826489][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 159.864333][ T6540] syz_tun: entered promiscuous mode [ 159.864578][ T6540] vlan2: entered promiscuous mode [ 160.052125][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 160.421749][ T6561] sctp: [Deprecated]: syz.0.198 (pid 6561) Use of int in maxseg socket option. [ 160.421749][ T6561] Use struct sctp_assoc_value instead [ 160.447376][ T31] usb 4-1: USB disconnect, device number 6 [ 160.547746][ T6548] syz_tun: entered promiscuous mode [ 160.566799][ T6548] syz_tun: left promiscuous mode [ 161.372618][ T10] usb 3-1: USB disconnect, device number 4 [ 166.796432][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 166.947117][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 166.951481][ T5843] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 166.951499][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.951509][ T5843] usb 2-1: Product: syz [ 166.951516][ T5843] usb 2-1: Manufacturer: syz [ 166.951524][ T5843] usb 2-1: SerialNumber: syz [ 166.997642][ T5843] r8152-cfgselector 2-1: Unknown version 0x0000 [ 166.997666][ T5843] r8152-cfgselector 2-1: config 0 descriptor?? [ 167.242653][ T5843] r8152-cfgselector 2-1: Unknown version 0x0000 [ 167.243118][ T5843] r8152-cfgselector 2-1: bad CDC descriptors [ 167.325338][ T5843] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 168.791490][ T6652] binder: 6651:6652 unknown command 0 [ 168.791510][ T6652] binder: 6651:6652 ioctl c0306201 200000000080 returned -22 [ 175.227022][ T6709] binder: 6708:6709 ioctl c0306201 200000000080 returned -14 [ 175.571837][ T6711] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.466768][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 176.985997][ T6734] netlink: 558 bytes leftover after parsing attributes in process `syz.0.249'. [ 178.563684][ T6749] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 178.565729][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.570512][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.656500][ T6749] bridge0: entered allmulticast mode [ 182.166694][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.197006][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 183.199614][ T5902] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.199644][ T5902] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.206422][ T5902] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.206453][ T5902] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 183.206473][ T5902] usb 5-1: Product: syz [ 183.206488][ T5902] usb 5-1: Manufacturer: syz [ 183.320230][ T5902] hub 5-1:4.0: USB hub found [ 183.653590][ T5902] hub 5-1:4.0: 2 ports detected [ 185.059470][ T6769] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.093786][ T5902] hub 5-1:4.0: activate --> -90 [ 185.346169][ T37] audit: type=1326 audit(2000000080.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7fc00000 [ 185.374156][ T37] audit: type=1326 audit(2000000080.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7fc00000 [ 185.432848][ T37] audit: type=1326 audit(2000000080.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7fc00000 [ 185.537359][ T9] usb 5-1: USB disconnect, device number 3 [ 185.567636][ T37] audit: type=1326 audit(2000000080.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7fc00000 [ 185.975189][ T37] audit: type=1326 audit(2000000080.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7fc00000 [ 186.823877][ T6845] netlink: 64 bytes leftover after parsing attributes in process `syz.2.279'. [ 187.038751][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 187.198324][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 187.199964][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.199978][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.199988][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.200025][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.200036][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.200048][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.200071][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.200082][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.203066][ T31] usb 5-1: config 0 descriptor?? [ 187.397097][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.484370][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 187.498858][ T31] usb 5-1: USB disconnect, device number 4 [ 187.547063][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 187.552081][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.552112][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.552148][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 187.552171][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.636281][ T9] usb 3-1: config 0 descriptor?? [ 187.832573][ T31] usblp0: removed [ 188.057612][ T6870] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 188.167682][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.173077][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 188.327897][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 188.341364][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 188.341390][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.341409][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.341467][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.341487][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.341510][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.341551][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.341572][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.426966][ T9] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 188.455148][ T6872] ======================================================= [ 188.455148][ T6872] WARNING: The mand mount option has been deprecated and [ 188.455148][ T6872] and is ignored by this kernel. Remove the mand [ 188.455148][ T6872] option from the mount to silence this warning. [ 188.455148][ T6872] ======================================================= [ 188.542426][ T31] usb 5-1: config 0 descriptor?? [ 188.607229][ T9] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 188.804319][ T9] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 188.805420][ T9] ft260 0003:0403:6030.0002: failed to retrieve status: -32 [ 188.869158][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 189.021029][ T1237] usb 5-1: USB disconnect, device number 5 [ 189.032640][ T6862] i2c i2c-1: adapter quirk: too many messages (addr 0x0003, size 0, read) [ 189.037295][ T31] usb 3-1: USB disconnect, device number 5 [ 189.076339][ T1237] usblp0: removed [ 189.623656][ T6887] binder: 6886:6887 unknown command 0 [ 189.623670][ T6887] binder: 6886:6887 ioctl c0306201 200000000080 returned -22 [ 193.903090][ T6943] binder: 6941:6943 unknown command 0 [ 193.903118][ T6943] binder: 6941:6943 ioctl c0306201 200000000080 returned -22 [ 194.407250][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407322][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.159610][ T6957] mmap: syz.1.318 (6957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.181269][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 196.694259][ T31] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 196.760918][ T31] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.807206][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.959125][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.986350][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 197.986367][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 197.986377][ T9] usb 3-1: Product: syz [ 197.986385][ T9] usb 3-1: Manufacturer: syz [ 197.986392][ T9] usb 3-1: SerialNumber: syz [ 198.204573][ T9] kernel write not supported for file /hidraw0 (pid: 9 comm: kworker/0:0) [ 198.357750][ T9] usb 3-1: USB disconnect, device number 6 [ 199.216138][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 199.246679][ T7027] af_packet: tpacket_rcv: packet too big, clamped from 417 to 4294967272. macoff=96 [ 199.498278][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.526362][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 199.593510][ T7031] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 199.605966][ T7031] macvtap1: entered allmulticast mode [ 199.606021][ T7031] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 199.655164][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.655230][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 199.664719][ T5902] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 199.664769][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.664802][ T5902] usb 4-1: Product: syz [ 199.664827][ T5902] usb 4-1: Manufacturer: syz [ 199.664853][ T5902] usb 4-1: SerialNumber: syz [ 199.713799][ T5902] usb 4-1: config 0 descriptor?? [ 200.025051][ T7026] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 200.025077][ T7026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.068155][ T7026] vhci_hcd vhci_hcd.0: Device attached [ 200.073738][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 200.073891][ T7037] bridge_slave_1: left allmulticast mode [ 200.073918][ T7037] bridge_slave_1: left promiscuous mode [ 200.079089][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.081676][ T7035] vhci_hcd: connection closed [ 200.115910][ T57] vhci_hcd: stop threads [ 200.121603][ T5902] hub 4-1:0.0: bad descriptor, ignoring hub [ 200.121643][ T5902] hub 4-1:0.0: probe with driver hub failed with error -5 [ 200.124546][ T57] vhci_hcd: release socket [ 200.124617][ T57] vhci_hcd: disconnect device [ 200.190862][ T5902] usb 4-1: USB disconnect, device number 7 [ 200.218711][ T7037] bridge_slave_0: left allmulticast mode [ 200.218744][ T7037] bridge_slave_0: left promiscuous mode [ 200.219035][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.910241][ T7063] binder: 7062:7063 ioctl c0306201 200000000080 returned -14 [ 205.029051][ T7085] binder: BINDER_SET_CONTEXT_MGR already set [ 205.029060][ T7085] binder: 7083:7085 ioctl 4018620d 200000000040 returned -16 [ 205.534328][ T7088] input: syz1 as /devices/virtual/input/input6 [ 210.140228][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 210.140253][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 210.556624][ T7134] overlayfs: failed to clone upperpath [ 212.415880][ T5902] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 212.415914][ T5902] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 212.451051][ T5902] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.03 Device [syz0] on syz0 [ 213.251225][ T7163] syz.2.379 (7163) used greatest stack depth: 16168 bytes left [ 216.236482][ T6779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.322710][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.396'. [ 218.017066][ T7218] syz_tun: entered allmulticast mode [ 218.564755][ T6775] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.693642][ T6775] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.250090][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.266652][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.299841][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.335086][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.336304][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.362485][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.363476][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.364016][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.365567][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.366480][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.693166][ T6775] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.332357][ T6775] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.636320][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.296191][ T6775] bridge_slave_1: left allmulticast mode [ 222.310669][ T6775] bridge_slave_1: left promiscuous mode [ 222.342203][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.477188][ T5153] Bluetooth: hci3: command tx timeout [ 222.517197][ T6775] bridge_slave_0: left allmulticast mode [ 222.521653][ T6775] bridge_slave_0: left promiscuous mode [ 222.521918][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.747075][ T5843] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.387218][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 223.389367][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.389396][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.389434][ T5843] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 223.389457][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.421577][ T5843] usb 3-1: config 0 descriptor?? [ 223.871841][ T5843] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 224.061198][ T5843] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 224.264113][ T5843] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 224.464844][ T5843] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 224.465536][ T5843] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 224.557047][ T5153] Bluetooth: hci3: command tx timeout [ 224.807081][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.232227][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.387713][ T5902] usb 3-1: USB disconnect, device number 7 [ 225.923301][ T7285] overlayfs: failed to clone upperpath [ 226.637131][ T5153] Bluetooth: hci3: command tx timeout [ 228.717462][ T5153] Bluetooth: hci3: command tx timeout [ 230.223867][ T7291] syz.3.424 (7291): drop_caches: 2 [ 230.516925][ T7309] binder: 7305:7309 unknown command 0 [ 230.516949][ T7309] binder: 7305:7309 ioctl c0306201 200000000080 returned -22 [ 230.924522][ T7309] binder: BINDER_SET_CONTEXT_MGR already set [ 230.924537][ T7309] binder: 7305:7309 ioctl 4018620d 200000000040 returned -16 [ 231.682510][ T37] audit: type=1326 audit(2000000126.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.3.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa61fd3ec29 code=0x0 [ 231.754781][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 231.755342][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 231.851972][ T7319] ceph: No mds server is up or the cluster is laggy [ 232.010974][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 232.012921][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 232.241689][ T37] audit: type=1326 audit(2000000126.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7325 comm="syz.1.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x0 [ 233.962849][ T6775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.039476][ T6775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.362717][ T7348] mmap: syz.1.443 (7348): VmData 45834240 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 234.388983][ T6775] bond0 (unregistering): Released all slaves [ 235.687543][ T7230] chnl_net:caif_netlink_parms(): no params data found [ 236.017483][ T5916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 236.179465][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.179499][ T5916] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.179539][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.179561][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.193860][ T7354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 236.208218][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.874645][ T7371] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 236.874645][ T7371] program syz.0.452 not setting count and/or reply_len properly [ 238.885328][ T5916] usb 4-1: USB disconnect, device number 8 [ 239.340290][ T37] audit: type=1804 audit(2000000134.180:11): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.456" name="bus" dev="ramfs" ino=13256 res=1 errno=0 [ 239.390819][ T7386] Invalid ELF header magic: != ELF [ 239.796400][ T7393] overlayfs: failed to clone upperpath [ 239.832208][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.832366][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.832599][ T7230] bridge_slave_0: entered allmulticast mode [ 239.835360][ T7230] bridge_slave_0: entered promiscuous mode [ 239.899756][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.903576][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.903826][ T7230] bridge_slave_1: entered allmulticast mode [ 239.906718][ T7230] bridge_slave_1: entered promiscuous mode [ 240.547276][ T6775] hsr_slave_0: left promiscuous mode [ 240.607051][ T6775] hsr_slave_1: left promiscuous mode [ 240.608258][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.608347][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.751991][ T6775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.752026][ T6775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.830463][ T6775] veth1_macvtap: left promiscuous mode [ 241.830735][ T6775] veth0_macvtap: left promiscuous mode [ 241.831048][ T6775] veth1_vlan: left promiscuous mode [ 241.831389][ T6775] veth0_vlan: left promiscuous mode [ 244.445131][ T7442] binder: 7441:7442 unknown command 0 [ 244.445145][ T7442] binder: 7441:7442 ioctl c0306201 200000000080 returned -22 [ 247.468267][ T6288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.247692][ T6775] team0 (unregistering): Port device team_slave_1 removed [ 249.848859][ T6775] team0 (unregistering): Port device team_slave_0 removed [ 251.620973][ T7490] ref_ctr_offset mismatch. inode: 0x1f7 offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0 [ 254.413685][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 254.615238][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.661244][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.914946][ T37] audit: type=1326 audit(2000000149.750:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.914978][ T37] audit: type=1326 audit(2000000149.750:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915000][ T37] audit: type=1326 audit(2000000149.750:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915020][ T37] audit: type=1326 audit(2000000149.750:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915041][ T37] audit: type=1326 audit(2000000149.750:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915061][ T37] audit: type=1326 audit(2000000149.750:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915082][ T37] audit: type=1326 audit(2000000149.750:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915103][ T37] audit: type=1326 audit(2000000149.750:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915131][ T37] audit: type=1326 audit(2000000149.750:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 254.915152][ T37] audit: type=1326 audit(2000000149.750:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10c571ec29 code=0x7ffc0000 [ 255.668280][ T7230] team0: Port device team_slave_0 added [ 255.674761][ T7230] team0: Port device team_slave_1 added [ 255.849064][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849145][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.552941][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.552957][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.552980][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.555311][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.555323][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.555344][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.349057][ T7230] hsr_slave_0: entered promiscuous mode [ 257.362245][ T7230] hsr_slave_1: entered promiscuous mode [ 257.365547][ T7230] debugfs: 'hsr0' already exists in 'hsr' [ 257.365572][ T7230] Cannot create hsr debugfs directory [ 258.617076][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 258.770998][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 258.802906][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.802932][ T5902] usb 3-1: config 0 has no interfaces? [ 258.855880][ T5902] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 258.855918][ T5902] usb 3-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 258.855937][ T5902] usb 3-1: Manufacturer: syz [ 258.922730][ T5902] usb 3-1: config 0 descriptor?? [ 259.031824][ T7230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.087714][ T7230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.138921][ T7230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.307627][ T7230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.849835][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.050849][ T7230] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.161172][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.163580][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.173951][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.174100][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.303862][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.447721][ T7275] usb 3-1: USB disconnect, device number 8 [ 265.253553][ T7230] veth0_vlan: entered promiscuous mode [ 265.301125][ T7230] veth1_vlan: entered promiscuous mode [ 265.589688][ T7613] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 265.667944][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 265.903006][ T7618] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 265.970899][ T7619] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 266.046838][ T7230] veth0_macvtap: entered promiscuous mode [ 266.459794][ T7230] veth1_macvtap: entered promiscuous mode [ 266.771074][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.898224][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.968523][ T6768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.974193][ T6768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.976559][ T6768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.004660][ T6768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.207153][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.207173][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.510542][ T6775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.510564][ T6775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.800190][ T37] kauditd_printk_skb: 27 callbacks suppressed [ 268.800208][ T37] audit: type=1326 audit(2000000163.640:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61fd3ec29 code=0x7ffc0000 [ 268.800798][ T37] audit: type=1326 audit(2000000163.640:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa61fd3ec29 code=0x7ffc0000 [ 268.801120][ T37] audit: type=1326 audit(2000000163.640:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61fd3ec29 code=0x7ffc0000 [ 268.803279][ T37] audit: type=1326 audit(2000000163.640:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa61fd3d6df code=0x7ffc0000 [ 268.803846][ T37] audit: type=1326 audit(2000000163.640:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61fd3ec29 code=0x7ffc0000 [ 268.804622][ T37] audit: type=1326 audit(2000000163.640:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7655 comm="syz.3.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61fd3ec29 code=0x7ffc0000 [ 269.254923][ T7658] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 269.525897][ T7679] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 269.582074][ T7679] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 270.679953][ T7697] kernel profiling enabled (shift: 63) [ 270.679974][ T7697] profiling shift: 63 too large [ 271.447217][ T5824] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 271.607012][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 271.611988][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 271.612020][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.616294][ T5824] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.616321][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.616339][ T5824] usb 4-1: Product: syz [ 271.616352][ T5824] usb 4-1: Manufacturer: syz [ 271.616366][ T5824] usb 4-1: SerialNumber: syz [ 271.681341][ T5824] usb 4-1: config 0 descriptor?? [ 271.684732][ T5824] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.684754][ T5824] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 273.226396][ T5824] em28xx 4-1:0.0: unknown em28xx chip ID (98) [ 273.353279][ T7726] fuse: Bad value for 'fd' [ 273.434447][ T5824] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 274.568595][ T5824] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 274.568628][ T5824] em28xx 4-1:0.0: No AC97 audio processor [ 274.648898][ T10] usb 4-1: USB disconnect, device number 9 [ 274.651626][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 274.833638][ T10] em28xx 4-1:0.0: Freeing device [ 275.413635][ T37] audit: type=1326 audit(2000000170.250:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7760 comm="syz.0.578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x0 [ 275.804024][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.984117][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.315848][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b857c00: rx timeout, send abort [ 276.388353][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.736636][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.923449][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b857c00: abort rx timeout. Force session deactivation [ 277.137273][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.278933][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.307278][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.423152][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.006711][ T5153] Bluetooth: hci3: link tx timeout [ 278.007965][ T5153] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.603475][ T6776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.676745][ T5153] Bluetooth: hci3: link tx timeout [ 278.676765][ T5153] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.768710][ T5153] Bluetooth: hci3: link tx timeout [ 278.768730][ T5153] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.967087][ T5824] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 279.026036][ T7791] 9pnet_fd: Insufficient options for proto=fd [ 279.122879][ T5824] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 279.122909][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.122928][ T5824] usb 4-1: Product: syz [ 279.122943][ T5824] usb 4-1: Manufacturer: syz [ 279.122956][ T5824] usb 4-1: SerialNumber: syz [ 280.077024][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 280.298260][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.392116][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.552751][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.629373][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.775334][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.894191][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.232477][ T5824] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 282.232525][ T5824] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 282.233552][ T5824] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 282.864079][ T5824] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 282.911295][ T5824] usb 4-1: USB disconnect, device number 10 [ 283.345304][ T7827] netlink: 'syz.3.602': attribute type 4 has an invalid length. [ 283.377701][ T7827] netlink: 'syz.3.602': attribute type 4 has an invalid length. [ 283.774223][ T7838] overlayfs: upper fs does not support file handles, falling back to index=off. [ 284.379549][ T7848] overlayfs: failed to clone upperpath [ 285.206073][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 285.206109][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 285.273708][ T7854] syz_tun: entered promiscuous mode [ 285.316673][ T7854] erspan0: entered promiscuous mode [ 287.261183][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 287.487175][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 287.659114][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 287.661925][ T5825] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 287.661952][ T5825] usb 6-1: config 0 has no interface number 0 [ 287.662002][ T5825] usb 6-1: config 0 interface 89 has no altsetting 0 [ 287.665568][ T5825] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 287.665595][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.665614][ T5825] usb 6-1: Product: syz [ 287.665628][ T5825] usb 6-1: Manufacturer: syz [ 287.665641][ T5825] usb 6-1: SerialNumber: syz [ 287.672503][ T5825] usb 6-1: config 0 descriptor?? [ 287.766290][ T5825] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 287.766326][ T5825] em28xx 6-1:0.89: Video interface 89 found: bulk [ 288.666005][ T7884] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 288.919778][ T5825] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 288.950679][ T7886] gretap1: entered promiscuous mode [ 288.981299][ T7886] bond2: (slave gretap1): making interface the new active one [ 288.988502][ T7886] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 289.787421][ T5825] em28xx 6-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 289.787441][ T5825] em28xx 6-1:0.89: failed to read eeprom (err=-5) [ 289.787482][ T5825] em28xx 6-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 290.037085][ T5825] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 290.037114][ T5825] em28xx 6-1:0.89: analog set to bulk mode. [ 290.077432][ T5824] em28xx 6-1:0.89: Registering V4L2 extension [ 290.084571][ T5825] usb 6-1: USB disconnect, device number 2 [ 290.111290][ T5825] em28xx 6-1:0.89: Disconnecting em28xx [ 290.230364][ T5824] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 290.230385][ T5824] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 290.230397][ T5824] em28xx 6-1:0.89: No AC97 audio processor [ 290.304249][ T5824] usb 6-1: Decoder not found [ 290.304264][ T5824] em28xx 6-1:0.89: failed to create media graph [ 290.304294][ T5824] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 290.345727][ T5824] em28xx 6-1:0.89: Registering snapshot button... [ 290.371194][ T5824] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input7 [ 290.400621][ T5824] em28xx 6-1:0.89: Remote control support is not available for this card. [ 290.401554][ T5825] em28xx 6-1:0.89: Closing input extension [ 290.402454][ T5825] em28xx 6-1:0.89: Deregistering snapshot button [ 290.791425][ T5825] em28xx 6-1:0.89: Freeing device [ 291.231514][ T7915] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7915] [ 293.840835][ T7941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 294.312256][ T7945] binder: 7944:7945 unknown command 0 [ 294.312270][ T7945] binder: 7944:7945 ioctl c0306201 200000000080 returned -22 [ 296.463791][ T7969] overlayfs: failed to clone upperpath [ 296.748210][ T7973] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 296.898219][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.652'. [ 296.904410][ T7973] bond1: entered promiscuous mode [ 296.904428][ T7973] bond1: entered allmulticast mode [ 297.037950][ T7977] geneve2: entered allmulticast mode [ 297.115850][ T7977] bond1: (slave geneve2): making interface the new active one [ 297.115875][ T7977] geneve2: entered promiscuous mode [ 297.129526][ T7977] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 297.135901][ T7978] bond1: left promiscuous mode [ 297.137640][ T7978] geneve2: left promiscuous mode [ 297.137851][ T7978] bond1: left allmulticast mode [ 297.175522][ T7978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.779630][ T8011] overlayfs: failed to clone upperpath [ 302.387024][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 302.567018][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 302.569281][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.569319][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.569357][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 302.569379][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.581676][ T9] usb 4-1: config 0 descriptor?? [ 303.321441][ T9] ft260 0003:0403:6030.0006: unknown main item tag 0x7 [ 303.381074][ T9] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 303.582855][ T9] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 303.783824][ T9] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 303.784556][ T9] ft260 0003:0403:6030.0006: failed to retrieve status: -32 [ 304.029473][ T1237] usb 4-1: USB disconnect, device number 11 [ 306.809982][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 307.964718][ T37] audit: type=1326 audit(2000000202.800:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 307.964773][ T37] audit: type=1326 audit(2000000202.800:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.019592][ T37] audit: type=1326 audit(2000000202.860:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.019641][ T37] audit: type=1326 audit(2000000202.860:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.019680][ T37] audit: type=1326 audit(2000000202.860:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.023807][ T37] audit: type=1326 audit(2000000202.860:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.023839][ T37] audit: type=1326 audit(2000000202.860:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.024359][ T37] audit: type=1326 audit(2000000202.860:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd09765e82b code=0x7ffc0000 [ 308.024407][ T37] audit: type=1326 audit(2000000202.860:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 308.025038][ T37] audit: type=1326 audit(2000000202.860:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09765ec29 code=0x7ffc0000 [ 309.692969][ T6768] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.776689][ T8150] overlayfs: failed to clone upperpath [ 315.362711][ T8177] overlayfs: failed to clone upperpath [ 318.158747][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.158792][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.283864][ T8248] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 322.736802][ T8262] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 326.698467][ T8262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.763261][ T8266] vlan2: entered allmulticast mode [ 326.763283][ T8266] macvtap0: entered allmulticast mode [ 326.763295][ T8266] veth0_macvtap: entered allmulticast mode [ 326.808202][ T8266] bond1: (slave vlan2): making interface the new active one [ 326.822479][ T8266] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 327.146207][ T8276] binder: 8275:8276 ioctl c0306201 200000000080 returned -14 [ 327.564571][ T8284] smc: adding net device pimreg with user defined pnetid SYZ2 [ 327.600172][ T8284] pimreg: entered allmulticast mode [ 332.237031][ T5851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 332.486958][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 332.809023][ T5851] usb 6-1: config 0 has no interfaces? [ 332.809048][ T5851] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.809060][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.811964][ T5851] usb 6-1: config 0 descriptor?? [ 333.824228][ T9] usb 6-1: USB disconnect, device number 3 [ 334.601779][ T8359] bridge0: left allmulticast mode [ 337.255150][ T8406] overlayfs: failed to clone upperpath [ 340.873695][ T3983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.624947][ T8455] 9pnet_fd: Insufficient options for proto=fd [ 346.518392][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'. [ 352.330605][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.000179][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.211232][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 353.660092][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.460730][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.585029][ T8652] tmpfs: Unsupported parameter 'huge' [ 358.402946][ T8666] overlayfs: failed to clone upperpath [ 359.223646][ T8676] netlink: zone id is out of range [ 359.237595][ T8676] netlink: zone id is out of range [ 359.238021][ T8676] netlink: zone id is out of range [ 359.238263][ T8676] netlink: zone id is out of range [ 359.238390][ T8676] netlink: zone id is out of range [ 359.239399][ T8676] netlink: zone id is out of range [ 359.239485][ T8676] netlink: zone id is out of range [ 359.239749][ T8676] netlink: zone id is out of range [ 359.241159][ T8676] netlink: zone id is out of range [ 359.242212][ T8676] netlink: zone id is out of range [ 361.477613][ T8688] kvm: kvm [8687]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x3030303030303030 [ 362.690491][ T8711] overlayfs: failed to clone upperpath [ 375.239132][ T86] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.449626][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.449708][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.517234][ T8978] JFS: charset not found [ 402.496147][ T9020] tipc: Started in network mode [ 402.496173][ T9020] tipc: Node identity 4, cluster identity 4711 [ 402.496185][ T9020] tipc: Node number set to 4 [ 404.388763][ T9050] binder: 9049:9050 ioctl c018620c 200000000280 returned -22 [ 404.893033][ T9037] syz.0.971 (9037): drop_caches: 2 [ 406.391492][ T6772] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.725300][ T9075] netfs: Couldn't get user pages (rc=-14) [ 410.131307][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 410.131349][ T37] audit: type=1326 audit(2000000304.970:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.0.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09765ec29 code=0x7fc00000 [ 412.534367][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.893335][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.617541][ T9152] netlink: 'syz.2.1010': attribute type 1 has an invalid length. [ 413.962617][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.043915][ T9158] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 414.046272][ T9158] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 414.119316][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.439343][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.790997][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.035924][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.408593][ T9160] gretap1: entered promiscuous mode [ 415.432297][ T9160] bond2: (slave gretap1): making interface the new active one [ 415.432820][ T9160] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 415.935489][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.535506][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.668614][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.259049][ T37] audit: type=1326 audit(2000000312.030:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.3.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61fd3ec29 code=0x0 [ 425.967536][ T9258] ref_ctr increment failed for inode: 0x4b4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803580f080 [ 426.812263][ T9258] uprobe: syz.3.1043:9258 failed to unregister, leaking uprobe [ 427.657530][ T9258] uprobe: syz.3.1043:9258 failed to unregister, leaking uprobe [ 428.773770][ T37] audit: type=1800 audit(2000000323.570:78): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1051" name="bus" dev="ramfs" ino=19395 res=0 errno=0 [ 429.493998][ T9301] netfs: Couldn't get user pages (rc=-14) [ 429.821421][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 432.312602][ T9328] overlayfs: failed to clone upperpath [ 438.340201][ T6779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.337680][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.362463][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.715739][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036a76400: rx timeout, send abort [ 441.215853][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036a76400: abort rx timeout. Force session deactivation [ 441.653827][ T5825] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 441.796926][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 442.007078][ T5825] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.007111][ T5825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.007135][ T5825] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.007158][ T5825] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.007213][ T5825] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.007235][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.030049][ T5825] usb 4-1: GET_CAPABILITIES returned 0 [ 444.030098][ T5825] usbtmc 4-1:16.0: can't read capabilities [ 444.395271][ T5902] usb 4-1: USB disconnect, device number 12 [ 446.845974][ T9459] sit0: entered allmulticast mode [ 446.945263][ T9459] sit0: entered promiscuous mode [ 447.305098][ T9466] batman_adv: batadv0: Adding interface: dummy0 [ 447.305115][ T9466] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.305146][ T9466] batman_adv: batadv0: Interface activated: dummy0 [ 447.756883][ T9466] net_ratelimit: 5 callbacks suppressed [ 447.756931][ T9466] batadv0: mtu less than device minimum [ 447.881746][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 447.935921][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 447.990566][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.023173][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.031988][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.040967][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.049892][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.058748][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.067375][ T9466] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 452.771563][ T9509] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1118'. [ 455.156948][ T5916] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 455.292851][ T9521] netfs: Couldn't get user pages (rc=-14) [ 455.292870][ T9521] netfs: Zero-sized read [R=4] [ 456.670142][ T5916] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 456.670172][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.670190][ T5916] usb 6-1: Product: syz [ 456.670202][ T5916] usb 6-1: Manufacturer: syz [ 456.670215][ T5916] usb 6-1: SerialNumber: syz [ 456.678979][ T5916] usb 6-1: config 0 descriptor?? [ 456.699078][ T5916] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 456.854244][ T5916] sonixb 6-1:0.0: Error reading register 00: -71 [ 456.916108][ T5916] usb 6-1: USB disconnect, device number 4 [ 462.816652][ T37] audit: type=1804 audit(2000000357.640:79): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1141" name="file0" dev="ramfs" ino=20738 res=1 errno=0 [ 470.051918][ T6779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 472.470964][ T9646] Invalid ELF header magic: != ELF [ 474.122372][ T9668] uprobe: syz.5.1167:9668 failed to unregister, leaking uprobe [ 474.153858][ T9671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 474.192657][ T9671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 474.210440][ T9671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.211501][ T9671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.212143][ T9671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.973948][ T9673] net_ratelimit: 10 callbacks suppressed [ 474.973969][ T9673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.335041][ T5850] Bluetooth: hci5: command tx timeout [ 476.796195][ T9670] chnl_net:caif_netlink_parms(): no params data found [ 478.463690][ T5850] Bluetooth: hci5: command tx timeout [ 480.760280][ T5850] Bluetooth: hci5: command tx timeout [ 481.761861][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 481.897906][ T5843] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 482.785889][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.797198][ T5850] Bluetooth: hci5: command tx timeout [ 482.826930][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 482.831059][ T5843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.831083][ T5843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 482.831159][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 482.831184][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 482.831226][ T5843] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 482.831248][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.854724][ T5843] hub 6-1:1.0: bad descriptor, ignoring hub [ 482.854761][ T5843] hub 6-1:1.0: probe with driver hub failed with error -5 [ 482.855672][ T5843] cdc_wdm 6-1:1.0: skipping garbage [ 482.855685][ T5843] cdc_wdm 6-1:1.0: skipping garbage [ 483.123489][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.123928][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.124819][ T5843] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 483.124847][ T5843] cdc_wdm 6-1:1.0: Unknown control protocol [ 483.160462][ T5843] usb 6-1: USB disconnect, device number 5 [ 484.331602][ T9718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.462889][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.463032][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.463282][ T9670] bridge_slave_0: entered allmulticast mode [ 485.471739][ T9670] bridge_slave_0: entered promiscuous mode [ 486.291536][ T9726] syz_tun: entered promiscuous mode [ 486.436575][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.436709][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.437219][ T9670] bridge_slave_1: entered allmulticast mode [ 486.454620][ T9670] bridge_slave_1: entered promiscuous mode [ 487.400966][ T9670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.421678][ T9670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.105683][ T9670] team0: Port device team_slave_0 added [ 490.129534][ T9670] team0: Port device team_slave_1 added [ 491.207023][ T9775] netlink: 'syz.5.1196': attribute type 3 has an invalid length. [ 492.547292][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.547304][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.547323][ T9670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.549064][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.549073][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.549085][ T9670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.454343][ T9670] hsr_slave_0: entered promiscuous mode [ 496.467351][ T9670] hsr_slave_1: entered promiscuous mode [ 496.468388][ T9670] debugfs: 'hsr0' already exists in 'hsr' [ 496.468411][ T9670] Cannot create hsr debugfs directory [ 501.717762][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717837][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.829146][ T6776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.975253][ T9670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.721800][ T9670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 502.787069][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 502.852079][ T9670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 502.993193][ T9670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.152063][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 505.547661][ T9670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.674077][ T9670] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.722829][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.726255][ T6776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.800185][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.800276][ T6769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.650757][ T9888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1225'. [ 510.142095][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.646987][ T1237] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 511.919951][ T1237] usb 6-1: device not accepting address 6, error -71 [ 513.912008][ T9941] overlayfs: failed to clone upperpath [ 514.404494][ T9670] veth0_vlan: entered promiscuous mode [ 514.439485][ T9670] veth1_vlan: entered promiscuous mode [ 514.620902][ T9951] sctp: [Deprecated]: syz.0.1240 (pid 9951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.620902][ T9951] Use struct sctp_sack_info instead [ 514.694957][ T9670] veth0_macvtap: entered promiscuous mode [ 514.792392][ T9670] veth1_macvtap: entered promiscuous mode [ 514.859121][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.034856][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.089756][ T6769] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.103717][ T6769] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.137012][ T6769] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.188988][ T6769] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.762886][ T6769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.762907][ T6769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.599769][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.599789][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.896058][ T9977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1248'. [ 521.697691][ T37] audit: type=1326 audit(2000000416.530:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.697747][ T37] audit: type=1326 audit(2000000416.530:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.731444][ T37] audit: type=1326 audit(2000000416.540:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.731496][ T37] audit: type=1326 audit(2000000416.570:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.731534][ T37] audit: type=1326 audit(2000000416.570:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.732526][ T37] audit: type=1326 audit(2000000416.570:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.732573][ T37] audit: type=1326 audit(2000000416.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.732610][ T37] audit: type=1326 audit(2000000416.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.737714][ T37] audit: type=1326 audit(2000000416.580:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 521.737762][ T37] audit: type=1326 audit(2000000416.580:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.6.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 527.164558][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 527.164576][ T37] audit: type=1804 audit(2000000421.940:123): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.1267" name="/newroot/129/bus/bus" dev="overlay" ino=735 res=1 errno=0 [ 527.967236][ T37] audit: type=1326 audit(2000000422.800:124): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10030 comm="syz.6.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 527.967289][ T37] audit: type=1326 audit(2000000422.800:125): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10030 comm="syz.6.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 527.967328][ T37] audit: type=1326 audit(2000000422.800:126): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10030 comm="syz.6.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 527.967367][ T37] audit: type=1326 audit(2000000422.800:127): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=10030 comm="syz.6.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb8ccec29 code=0x7ffc0000 [ 530.236078][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1272'. [ 531.745554][ T37] audit: type=1800 audit(2000000426.550:128): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1277" name="/" dev="9p" ino=2 res=0 errno=0 [ 531.791036][T10068] netfs: Couldn't get user pages (rc=-14) [ 533.002294][T10084] Set syz0 is full, maxelem 0 reached [ 533.379324][ T3983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 534.309750][T10085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.562451][T10118] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 536.562530][ T6773] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.562574][ T6773] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.562609][ T6773] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.562642][ T6773] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.615457][T10130] overlayfs: failed to resolve './file0': -2 [ 542.583239][T10159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.133836][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 552.313894][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 552.491373][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1322'. [ 563.136095][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.136141][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.442578][ T6776] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 573.532457][T10369] netlink: 'syz.1.1358': attribute type 1 has an invalid length. [ 579.006192][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 579.034961][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 579.036445][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 579.047414][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 579.048358][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 581.376054][ T5850] Bluetooth: hci6: command tx timeout [ 583.702081][ T9671] Bluetooth: hci6: command tx timeout [ 585.765708][ T9671] Bluetooth: hci6: command tx timeout [ 586.695562][T10399] chnl_net:caif_netlink_parms(): no params data found [ 588.784039][ T9671] Bluetooth: hci6: command tx timeout [ 591.630059][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.630212][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.630466][T10399] bridge_slave_0: entered allmulticast mode [ 591.641486][T10399] bridge_slave_0: entered promiscuous mode [ 591.745582][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.745721][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.745963][T10399] bridge_slave_1: entered allmulticast mode [ 591.823264][T10399] bridge_slave_1: entered promiscuous mode [ 592.587451][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.607254][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.064812][T10399] team0: Port device team_slave_0 added [ 596.093757][T10399] team0: Port device team_slave_1 added [ 596.324348][T10528] can: request_module (can-proto-0) failed. [ 597.540221][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.540233][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.540245][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.541622][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.541630][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.541642][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.280304][ T6288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 600.393716][T10399] hsr_slave_0: entered promiscuous mode [ 600.394544][T10399] hsr_slave_1: entered promiscuous mode [ 600.395036][T10399] debugfs: 'hsr0' already exists in 'hsr' [ 600.395051][T10399] Cannot create hsr debugfs directory [ 600.968874][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 601.229329][T10560] netlink: 'syz.1.1403': attribute type 7 has an invalid length. [ 601.229350][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 601.529106][T10562] overlayfs: failed to clone upperpath [ 602.732939][T10399] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 602.804737][T10399] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.978199][T10399] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 603.111983][T10399] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 604.263653][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.395525][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.439094][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.439275][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.647671][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.647814][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.958463][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 609.425173][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 609.425204][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.425225][ T9] usb 7-1: Product: syz [ 609.425239][ T9] usb 7-1: Manufacturer: syz [ 609.425252][ T9] usb 7-1: SerialNumber: syz [ 610.146175][ T9] usb 7-1: config 0 descriptor?? [ 610.178977][ T9] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 610.421685][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.459981][T10626] input: syz1 as /devices/virtual/input/input8 [ 610.688761][ T9] sonixb 7-1:0.0: Error reading register 00: -110 [ 611.131019][ T9] usb 7-1: USB disconnect, device number 2 [ 612.967563][ T38] INFO: task syz-executor:5839 blocked for more than 143 seconds. [ 612.967676][ T38] Not tainted syzkaller #0 [ 612.967687][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.967695][ T38] task:syz-executor state:D stack:21640 pid:5839 tgid:5839 ppid:1 task_flags:0x400140 flags:0x00004004 [ 612.967805][ T38] Call Trace: [ 612.967813][ T38] [ 612.967825][ T38] __schedule+0x16f3/0x4c20 [ 612.967935][ T38] ? __lock_acquire+0xab9/0xd20 [ 612.968011][ T38] ? __pfx___schedule+0x10/0x10 [ 612.968052][ T38] ? schedule+0x91/0x360 [ 612.968129][ T38] schedule+0x165/0x360 [ 612.968155][ T38] v9fs_evict_inode+0x170/0x320 [ 612.968226][ T38] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 612.968249][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 612.968318][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 612.968397][ T38] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 612.968420][ T38] evict+0x501/0x9c0 [ 612.968493][ T38] ? __pfx_evict+0x10/0x10 [ 612.968518][ T38] ? iput+0x6d8/0x9d0 [ 612.968593][ T38] __dentry_kill+0x209/0x660 [ 612.968667][ T38] ? dput+0x37/0x2b0 [ 612.968692][ T38] dput+0x19f/0x2b0 [ 612.968757][ T38] shrink_dcache_for_umount+0xa0/0x170 [ 612.968781][ T38] generic_shutdown_super+0x67/0x2c0 [ 612.968848][ T38] kill_anon_super+0x3b/0x70 [ 612.968869][ T38] v9fs_kill_super+0x4c/0x90 [ 612.968894][ T38] deactivate_locked_super+0xb9/0x130 [ 612.968966][ T38] cleanup_mnt+0x425/0x4c0 [ 612.968986][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.969056][ T38] task_work_run+0x1d4/0x260 [ 612.969078][ T38] ? __pfx_task_work_run+0x10/0x10 [ 612.969094][ T38] ? __x64_sys_umount+0x122/0x160 [ 612.969164][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 612.969191][ T38] exit_to_user_mode_loop+0xec/0x110 [ 612.969257][ T38] do_syscall_64+0x2bd/0x3b0 [ 612.969274][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.969297][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.969365][ T38] ? clear_bhb_loop+0x60/0xb0 [ 612.969388][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.969454][ T38] RIP: 0033:0x7fa61fd3ff57 [ 612.969477][ T38] RSP: 002b:00007ffe19aa71d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 612.969495][ T38] RAX: 0000000000000000 RBX: 00007fa61fdc1c2d RCX: 00007fa61fd3ff57 [ 612.969551][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe19aa7290 [ 612.969564][ T38] RBP: 00007ffe19aa7290 R08: 0000000000000000 R09: 0000000000000000 [ 612.969575][ T38] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe19aa8320 [ 612.969587][ T38] R13: 00007fa61fdc1c2d R14: 000000000006f1be R15: 00007ffe19aa8360 [ 612.969767][ T38] [ 612.969870][ T38] [ 612.969870][ T38] Showing all locks held in the system: [ 612.969926][ T38] 1 lock held by khungtaskd/38: [ 612.969937][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 612.970094][ T38] 1 lock held by jbd2/sda1-8/5166: [ 612.970105][ T38] #0: ffff888033cb6108 (&journal->j_state_lock){++++}-{3:3}, at: kjournald2+0x407/0x750 [ 612.970194][ T38] 2 locks held by getty/5594: [ 612.970205][ T38] #0: ffff88823bf448a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 612.970297][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 612.970387][ T38] 1 lock held by syz-executor/5834: [ 612.970398][ T38] 1 lock held by syz-executor/5839: [ 612.970408][ T38] #0: ffff88806cc340d0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 612.970503][ T38] 2 locks held by kworker/u8:15/6288: [ 612.970513][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 612.970608][ T38] #1: ffffc900061efbc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 612.970698][ T38] 2 locks held by kworker/u8:32/6778: [ 612.970752][ T38] #0: ffff888141389138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 612.970839][ T38] #1: ffffc9000de8fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 612.970885][ T38] 6 locks held by kworker/u8:36/6783: [ 612.970948][ T38] 4 locks held by syz-executor/9670: [ 612.970962][ T38] 1 lock held by syz.1.1417/10612: [ 612.970972][ T38] 3 locks held by syz.2.1422/10638: [ 612.970981][ T38] #0: ffff8880318656c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x19f/0x3d0 [ 612.971067][ T38] #1: ffff888033cb0600 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f7/0x1190 [ 612.971158][ T38] #2: ffff888033cb6108 (&journal->j_state_lock){++++}-{3:3}, at: start_this_handle+0x3a1/0x21c0 [ 612.971246][ T38] 7 locks held by syz.0.1423/10640: [ 612.971258][ T38] 2 locks held by modprobe/10642: [ 612.971269][ T38] [ 612.971273][ T38] ============================================= [ 612.971273][ T38] [ 612.971287][ T38] NMI backtrace for cpu 1 [ 612.971307][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.971327][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.971337][ T38] Call Trace: [ 612.971344][ T38] [ 612.971351][ T38] dump_stack_lvl+0x189/0x250 [ 612.971377][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.971400][ T38] ? __pfx__printk+0x10/0x10 [ 612.971430][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 612.971455][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 612.971479][ T38] ? __pfx__printk+0x10/0x10 [ 612.971502][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 612.971525][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 612.971549][ T38] watchdog+0xf93/0xfe0 [ 612.971575][ T38] ? watchdog+0x1de/0xfe0 [ 612.971609][ T38] kthread+0x70e/0x8a0 [ 612.971636][ T38] ? __pfx_watchdog+0x10/0x10 [ 612.971655][ T38] ? __pfx_kthread+0x10/0x10 [ 612.971683][ T38] ? __pfx_kthread+0x10/0x10 [ 612.971707][ T38] ret_from_fork+0x436/0x7d0 [ 612.971732][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 612.971758][ T38] ? __switch_to_asm+0x39/0x70 [ 612.971774][ T38] ? __switch_to_asm+0x33/0x70 [ 612.971788][ T38] ? __pfx_kthread+0x10/0x10 [ 612.971813][ T38] ret_from_fork_asm+0x1a/0x30 [ 612.971845][ T38] [ 612.971852][ T38] Sending NMI from CPU 1 to CPUs 0: [ 612.971875][ C0] NMI backtrace for cpu 0 [ 612.971888][ C0] CPU: 0 UID: 0 PID: 10643 Comm: syz.2.1422 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.971905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.971913][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 612.971931][ C0] Code: 20 16 62 8b 48 c7 c6 60 16 62 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 fe 24 ff 06 48 89 44 24 08 [ 612.971942][ C0] RSP: 0018:ffffc9000d56f4d0 EFLAGS: 00000092 [ 612.971956][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c38b0a66512e7900 [ 612.971966][ C0] RDX: 0000000000000000 RSI: ffffffff8d21ae96 RDI: ffffffff8b621680 [ 612.971976][ C0] RBP: ffffffff8af9484a R08: 0000000000000000 R09: ffffffff8af9484a [ 612.971987][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: 0000000000000000 [ 612.971997][ C0] R13: ffff88806d63df98 R14: 0000000000000001 R15: 0000000000000046 [ 612.972007][ C0] FS: 00007fb2f1d4d6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 612.972020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.972031][ C0] CR2: 00007fb2f1d4dd58 CR3: 00000000293f0000 CR4: 00000000003526f0 [ 612.972045][ C0] Call Trace: [ 612.972050][ C0] [ 612.972056][ C0] ? rt_mutex_slowunlock+0xaa/0x2e0 [ 612.972077][ C0] lock_acquire+0x130/0x360 [ 612.972100][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 612.972118][ C0] ? rt_mutex_slowunlock+0xaa/0x2e0 [ 612.972134][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 612.972152][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 612.972170][ C0] ? rt_spin_lock+0x1bb/0x2c0 [ 612.972188][ C0] rt_mutex_slowunlock+0xaa/0x2e0 [ 612.972204][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 612.972226][ C0] __unix_dgram_recvmsg+0xa03/0xd60 [ 612.972246][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 612.972268][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 612.972284][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 612.972301][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 612.972320][ C0] ____sys_recvmsg+0x3ab/0x470 [ 612.972338][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 612.972358][ C0] ? import_iovec+0x74/0xa0 [ 612.972376][ C0] ___sys_recvmsg+0x1b5/0x510 [ 612.972390][ C0] ? trace_irq_disable+0x37/0x110 [ 612.972408][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 612.972434][ C0] ? __might_fault+0xb0/0x130 [ 612.972454][ C0] do_recvmmsg+0x30d/0x770 [ 612.972472][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 612.972486][ C0] ? handle_mm_fault+0xdb/0x3400 [ 612.972508][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 612.972528][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 612.972544][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 612.972561][ C0] ? do_syscall_64+0xbe/0x3b0 [ 612.972576][ C0] do_syscall_64+0xfa/0x3b0 [ 612.972588][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.972606][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.972620][ C0] ? clear_bhb_loop+0x60/0xb0 [ 612.972636][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.972650][ C0] RIP: 0033:0x7fb2f3b0ec29 [ 612.972662][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.972673][ C0] RSP: 002b:00007fb2f1d4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 612.972688][ C0] RAX: ffffffffffffffda RBX: 00007fb2f3d56090 RCX: 00007fb2f3b0ec29 [ 612.972699][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 612.972709][ C0] RBP: 00007fb2f3b91e41 R08: 0000000000000000 R09: 0000000000000000 [ 612.972718][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 612.972727][ C0] R13: 00007fb2f3d56128 R14: 00007fb2f3d56090 R15: 00007ffc04deaf58 [ 612.972744][ C0] [ 612.972926][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 612.972939][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.972957][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.972967][ T38] Call Trace: [ 612.972973][ T38] [ 612.972981][ T38] dump_stack_lvl+0x99/0x250 [ 612.973004][ T38] ? __asan_memcpy+0x40/0x70 [ 612.973024][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.973047][ T38] ? __pfx__printk+0x10/0x10 [ 612.973078][ T38] vpanic+0x281/0x750 [ 612.973104][ T38] ? __pfx_vpanic+0x10/0x10 [ 612.973124][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 612.973142][ T38] ? preempt_schedule+0xae/0xc0 [ 612.973166][ T38] ? preempt_schedule_common+0x83/0xd0 [ 612.973195][ T38] panic+0xb9/0xc0 [ 612.973217][ T38] ? __pfx_panic+0x10/0x10 [ 612.973241][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 612.973266][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 612.973290][ T38] watchdog+0xfd2/0xfe0 [ 612.973315][ T38] ? watchdog+0x1de/0xfe0 [ 612.973342][ T38] kthread+0x70e/0x8a0 [ 612.973368][ T38] ? __pfx_watchdog+0x10/0x10 [ 612.973389][ T38] ? __pfx_kthread+0x10/0x10 [ 612.973417][ T38] ? __pfx_kthread+0x10/0x10 [ 612.973442][ T38] ret_from_fork+0x436/0x7d0 [ 612.973466][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 612.973493][ T38] ? __switch_to_asm+0x39/0x70 [ 612.973508][ T38] ? __switch_to_asm+0x33/0x70 [ 612.973523][ T38] ? __pfx_kthread+0x10/0x10 [ 612.973547][ T38] ret_from_fork_asm+0x1a/0x30 [ 612.973580][ T38] [ 612.973857][ T38] Kernel Offset: disabled