last executing test programs: 16m19.728217314s ago: executing program 32 (id=1251): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x9, @raw_data="06233e7bea6ace9303a6aa42c6928974d665a6a5e38a6404523a050d4f9e0ea0722a83e718cf5682c398122fa021036cb2d9eaac27256f38e6542820b6925474bea8a2c329ee4c844643b17481cc2a3e7751f3a0e228e91e711c3f007898fb156a69f69d7c8632f3785959c4ad7569fcaa426ac7a62361529e09133aaff6109db6b6fc7c1516b7428f2d7785cebfc5cc0fcda650917532b647e48c81bb0cbcdfb68127e8c4c9db0f658c3637158b5036178a0de6e921c1ac979008ccb7cf29df4f9c942bf6317af1"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 15m40.646509775s ago: executing program 33 (id=1436): socket$inet(0x2, 0x3, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 15m9.649966973s ago: executing program 6 (id=1668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15m8.465579558s ago: executing program 6 (id=1676): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, r2) r3 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='fdinfo/4\x00') 15m7.87935887s ago: executing program 6 (id=1682): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) sendto(r1, 0x0, 0x0, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 15m7.368496923s ago: executing program 6 (id=1685): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb) 15m7.00263098s ago: executing program 6 (id=1690): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='\n', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x3, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 15m6.023569021s ago: executing program 6 (id=1695): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 15m5.578597954s ago: executing program 34 (id=1695): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 14m11.122108547s ago: executing program 4 (id=2001): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000003c0)={[&(0x7f0000000000)=')\xb6$,%.-]\x00']}, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 14m10.213474108s ago: executing program 4 (id=2006): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x524a043a, 0x8001, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x40, 0x5}}, 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 14m9.168753098s ago: executing program 4 (id=2016): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x0, 0x88) 14m8.6979418s ago: executing program 4 (id=2018): pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 14m7.754170553s ago: executing program 4 (id=2021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f00000000c0)="a4f4de87c6e89abd7ae7e6b8550f9923917c9d38e14418e7c765214e9ace3100b34d00f9bf2b7ed43e9c00", 0x2b}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e8376c212ffb76f895aadedcf3f70bddcc347473dba5602d7734c4e9a2054cd3763acbb7fe82155d4a50e6a72d917b22b16ea8abd987834b4b1b04556e5442b1b643fa842a08ab5d860715b250447170c8d30829730a53974b6554a6454bab2eeda2966cc13a02a2b2c2e157ccd1795bcbc9c7bec370d9f492745b7c03c5ba21a45ff6bbba0", 0xc6c}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 14m6.207020546s ago: executing program 4 (id=2034): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 14m5.73589699s ago: executing program 35 (id=2034): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 14m3.628774765s ago: executing program 5 (id=2054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 14m2.386728582s ago: executing program 5 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 14m1.36796854s ago: executing program 5 (id=2066): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="68c8e4", 0x3}, {&(0x7f0000000340)="c600d40e9155852155ab0911a5066fde92cb367daa147d0000000080c1eebb30e430b3", 0x23}], 0x2) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 14m1.156237723s ago: executing program 5 (id=2069): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) pipe2(&(0x7f00000000c0), 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) 14m0.938807901s ago: executing program 5 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x40000a0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 13m55.850964595s ago: executing program 5 (id=2099): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x874fd42a7836ef6f, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13m55.305028108s ago: executing program 36 (id=2099): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x874fd42a7836ef6f, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13m24.496378362s ago: executing program 2 (id=2218): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x29) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x1c}) sendmmsg$inet6(r0, &(0x7f0000000080), 0x1, 0x8090) 13m24.333250082s ago: executing program 2 (id=2219): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x73bd80, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000002100001000a0c10000000e6ff224e0000", 0x58}, {0x0}], 0x2) writev(r0, &(0x7f0000000280)=[{0x0}], 0x1) 13m23.053986121s ago: executing program 2 (id=2223): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x6}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x2, [@union={0xf, 0x0, 0x0, 0x5, 0x1, 0x7}, @func_proto, @datasec={0x7, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x7, 0x5235}, {0x5, 0x0, 0xc}, {0x1, 0xfffffffc, 0x9}, {0x5, 0x6, 0x9}, {0x2, 0x4, 0x42}, {0x5, 0x3, 0x5}, {0x3, 0x80000001}, {0x2, 0x7, 0x1}], 'n'}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}]}}, 0x0, 0xba, 0x0, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 13m22.82882949s ago: executing program 2 (id=2224): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 13m22.609877953s ago: executing program 2 (id=2225): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) 13m18.006808845s ago: executing program 2 (id=2228): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) 13m17.428071953s ago: executing program 37 (id=2228): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) 12m27.499551077s ago: executing program 1 (id=2335): epoll_create1(0x80000) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x9, 0x307}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) signalfd4(r0, &(0x7f0000003b80)={[0x8]}, 0x8, 0x80000) 12m27.367493413s ago: executing program 1 (id=2336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 12m26.2665417s ago: executing program 1 (id=2337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m25.713288178s ago: executing program 1 (id=2340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r3, 0x1, 0x8, 0x1}) 12m24.569270839s ago: executing program 1 (id=2341): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x7, 0x0, 0x0, 0x10}) 12m24.330676982s ago: executing program 1 (id=2344): syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 12m9.052476031s ago: executing program 38 (id=2344): syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.441823794s ago: executing program 0 (id=3400): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newspdinfo={0x14, 0x24, 0x300, 0x70bd29, 0x25dfdbfc, 0x67}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x20004810) 2.261270162s ago: executing program 0 (id=3404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 1.893533457s ago: executing program 0 (id=3411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f", 0x19}, {0x0}], 0x2) 1.868374855s ago: executing program 9 (id=3413): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x22, 0x401, 0x1, 0x6dc4, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x806, 0x401, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x4, 0x3, 0x395, 0x8000008b, 0xfffffffe, 0xa, 0xfffffff5, 0x1, 0x3, 0x0, 0x0, 0x4, 0x8000000, 0xdffffff9]}) 1.823955692s ago: executing program 8 (id=3414): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x4040000) recvfrom$unix(r0, 0x0, 0x0, 0x40000010, 0x0, 0x0) 1.713309075s ago: executing program 8 (id=3415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x1, 0x78bd27, 0xa6, {0x0, 0x0, 0x0, r1, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.600010651s ago: executing program 9 (id=3417): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0xffffff04, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"0000e0ffffffffffffff00a700"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 1.46547546s ago: executing program 9 (id=3418): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) fsync(r0) 1.384900287s ago: executing program 9 (id=3419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.307501386s ago: executing program 8 (id=3421): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) 1.282481611s ago: executing program 0 (id=3422): r0 = socket$kcm(0x2, 0xa, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.132742676s ago: executing program 8 (id=3425): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0xe1bd4000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1.084713061s ago: executing program 9 (id=3426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.031978074s ago: executing program 0 (id=3427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf251a00000004002280070021"], 0x28}, 0x1, 0x0, 0x0, 0x802}, 0x44000) 952.435018ms ago: executing program 8 (id=3430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000bc0)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 875.651465ms ago: executing program 9 (id=3431): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x7) 848.777869ms ago: executing program 0 (id=3432): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 775.966864ms ago: executing program 3 (id=3433): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1ff, 0x2}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x7f, 0x35, 0x89}}, @rdma_dest={0x18, 0x114, 0x2, {0x7de2, 0x9}}], 0x70}, 0x0) 742.699564ms ago: executing program 7 (id=3434): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000002c0)={0x2, 0x200, 0x80, 0x0, 0x1}) 732.577957ms ago: executing program 3 (id=3435): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8, 0x4, 0x1, 0xee3, 0x2, 0x4, 0x6a}, 0x0, 0x0, 0x0, 0x0) 704.149034ms ago: executing program 8 (id=3436): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0xff, 0x2810, 0x0, 0x0}, {0x3, 0x6020, 0x0, 0x0}, {0x0, 0x4001, 0x0, 0x0}], 0x3}) 547.959193ms ago: executing program 7 (id=3437): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 547.611084ms ago: executing program 3 (id=3438): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)="f7d0912b85f98ed59cbbe1eb97824e8c5d3035ec961274f85a78", 0x1a}], 0x1}}], 0x3, 0x8008805) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)='J', 0x1}], 0x1}}], 0x1, 0x0) 509.304525ms ago: executing program 3 (id=3439): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x9) connect$can_bcm(r0, &(0x7f0000000000), 0x10) 466.846348ms ago: executing program 7 (id=3440): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 415.137512ms ago: executing program 3 (id=3441): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0006}]}) io_setup(0x1, &(0x7f00000001c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 300.463671ms ago: executing program 7 (id=3442): r0 = syz_open_dev$media(&(0x7f0000000140), 0x4fca, 0x101000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 299.688009ms ago: executing program 7 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e0080000000ffffffffffff08021100000013610680c4c90000000400000000000064000100080026006c09000008000c006400000008000d000000000008000e"], 0x64}}, 0x0) 46.500922ms ago: executing program 3 (id=3444): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x7a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x10800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) socket(0x10, 0x803, 0x0) 0s ago: executing program 7 (id=3445): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x2, 0x2d1, 0xffffff34, 0xfffff1aa, 0x33bb, 0x3, 0x6}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): 921.539015][T13546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.784177][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.784312][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.784555][T13559] bridge_slave_1: entered allmulticast mode [ 921.786596][T13559] bridge_slave_1: entered promiscuous mode [ 921.856997][T13546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.857401][T13617] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.857483][T13617] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.857639][T13617] bridge_slave_0: entered allmulticast mode [ 921.859119][T13617] bridge_slave_0: entered promiscuous mode [ 921.863760][T13581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.078161][T13617] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.078321][T13617] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.078556][T13617] bridge_slave_1: entered allmulticast mode [ 922.104312][T13617] bridge_slave_1: entered promiscuous mode [ 922.111554][T13581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.607967][T13559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.625103][T13546] team0: Port device team_slave_0 added [ 922.845497][T13559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.848068][T13546] team0: Port device team_slave_1 added [ 922.851626][T13617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.988571][T13581] team0: Port device team_slave_0 added [ 923.161859][T13617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.245402][T13581] team0: Port device team_slave_1 added [ 923.555771][T13559] team0: Port device team_slave_0 added [ 923.704909][T13546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.704922][T13546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.704934][T13546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.964876][T13559] team0: Port device team_slave_1 added [ 923.966169][T13546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.966185][T13546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.966213][T13546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.026969][T13617] team0: Port device team_slave_0 added [ 924.114117][T13581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.114128][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.114140][T13581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.184402][T13617] team0: Port device team_slave_1 added [ 924.321242][T13581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.321260][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.321279][T13581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.515058][T13559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.515072][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.515088][T13559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.644579][T13559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.644598][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.644626][T13559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.827879][T13617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.827892][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.827904][T13617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.013859][T13617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.013878][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.013907][T13617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.418322][T13581] hsr_slave_0: entered promiscuous mode [ 925.419093][T13581] hsr_slave_1: entered promiscuous mode [ 925.419610][T13581] debugfs: 'hsr0' already exists in 'hsr' [ 925.419626][T13581] Cannot create hsr debugfs directory [ 925.861944][T13559] hsr_slave_0: entered promiscuous mode [ 925.864153][T13559] hsr_slave_1: entered promiscuous mode [ 925.865216][T13559] debugfs: 'hsr0' already exists in 'hsr' [ 925.865242][T13559] Cannot create hsr debugfs directory [ 926.268226][T13617] hsr_slave_0: entered promiscuous mode [ 926.270172][T13617] hsr_slave_1: entered promiscuous mode [ 926.271154][T13617] debugfs: 'hsr0' already exists in 'hsr' [ 926.271181][T13617] Cannot create hsr debugfs directory [ 926.407142][T12888] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 926.445228][T12888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 926.447327][T12888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 926.450745][T12888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 926.452343][T12888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 928.523178][T12888] Bluetooth: hci2: command tx timeout [ 931.505094][T12888] Bluetooth: hci2: command tx timeout [ 931.512835][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.513020][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.963056][T13741] chnl_net:caif_netlink_parms(): no params data found [ 933.565183][ T5126] Bluetooth: hci2: command tx timeout [ 933.574896][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 933.878819][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 934.010939][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 934.585038][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 934.587826][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 935.981166][ T5814] Bluetooth: hci2: command tx timeout [ 937.251716][ T5814] Bluetooth: hci3: command tx timeout [ 938.033726][T13784] fuse: Bad value for 'fd' [ 938.919390][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.919621][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.919909][T13741] bridge_slave_0: entered allmulticast mode [ 938.927524][T13741] bridge_slave_0: entered promiscuous mode [ 938.939322][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.939556][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.939774][T13741] bridge_slave_1: entered allmulticast mode [ 938.942526][T13741] bridge_slave_1: entered promiscuous mode [ 939.145559][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.168180][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.323249][ T5814] Bluetooth: hci3: command tx timeout [ 939.909653][T13741] team0: Port device team_slave_0 added [ 940.869301][T12888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 940.891657][T12888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 940.893906][T12888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 940.895100][T12888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 940.895977][T12888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 940.930440][T13741] team0: Port device team_slave_1 added [ 941.532525][T12888] Bluetooth: hci3: command tx timeout [ 942.982795][ T5814] Bluetooth: hci4: command tx timeout [ 943.612981][ T5814] Bluetooth: hci3: command tx timeout [ 945.192742][ T5814] Bluetooth: hci4: command tx timeout [ 945.317008][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.317029][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.317059][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.385262][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.385349][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.385380][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.295074][ T5814] Bluetooth: hci4: command tx timeout [ 947.303888][T13816] binder: Bad value for 'stats' [ 948.219030][T13820] overlayfs: overlapping lowerdir path [ 948.275608][T13821] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 949.322851][ T5814] Bluetooth: hci4: command tx timeout [ 949.689740][T13741] hsr_slave_0: entered promiscuous mode [ 949.691045][T13741] hsr_slave_1: entered promiscuous mode [ 949.691677][T13741] debugfs: 'hsr0' already exists in 'hsr' [ 949.691699][T13741] Cannot create hsr debugfs directory [ 949.802271][T13765] chnl_net:caif_netlink_parms(): no params data found [ 950.888000][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.888267][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.888534][T13765] bridge_slave_0: entered allmulticast mode [ 950.891413][T13765] bridge_slave_0: entered promiscuous mode [ 951.036048][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.036201][T13765] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.036839][T13765] bridge_slave_1: entered allmulticast mode [ 951.038350][T13765] bridge_slave_1: entered promiscuous mode [ 951.347352][ T9435] hid_parser_main: 8 callbacks suppressed [ 951.347379][ T9435] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 951.358156][ T9435] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 951.607341][T12888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.623601][T12888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.626633][T12888] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.652316][T12888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.668034][T12888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 951.911143][T13765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.969369][T13765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.969598][ T1008] bridge_slave_1: left allmulticast mode [ 951.969618][ T1008] bridge_slave_1: left promiscuous mode [ 951.969792][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.034848][ T1008] bridge_slave_0: left allmulticast mode [ 952.034882][ T1008] bridge_slave_0: left promiscuous mode [ 952.035242][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.098868][ T1008] bridge_slave_1: left allmulticast mode [ 952.098903][ T1008] bridge_slave_1: left promiscuous mode [ 952.099189][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.174849][ T1008] bridge_slave_0: left allmulticast mode [ 952.174884][ T1008] bridge_slave_0: left promiscuous mode [ 952.175148][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.395510][ T1008] bridge_slave_1: left allmulticast mode [ 952.395530][ T1008] bridge_slave_1: left promiscuous mode [ 952.395677][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.465175][ T1008] bridge_slave_0: left allmulticast mode [ 953.465208][ T1008] bridge_slave_0: left promiscuous mode [ 953.465513][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.723194][ T5814] Bluetooth: hci5: command tx timeout [ 954.116787][ T1008] bridge_slave_1: left allmulticast mode [ 954.116823][ T1008] bridge_slave_1: left promiscuous mode [ 954.117107][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.474344][ T1008] bridge_slave_0: left allmulticast mode [ 955.474376][ T1008] bridge_slave_0: left promiscuous mode [ 955.474648][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.325444][ T1008] bridge_slave_1: left allmulticast mode [ 956.325477][ T1008] bridge_slave_1: left promiscuous mode [ 956.325761][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.438118][ T5814] Bluetooth: hci5: command tx timeout [ 956.514703][ T1008] bridge_slave_0: left allmulticast mode [ 956.514735][ T1008] bridge_slave_0: left promiscuous mode [ 956.514992][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.943574][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.023745][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.085006][ T1008] bond0 (unregistering): Released all slaves [ 957.293535][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.373447][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.444895][ T1008] bond0 (unregistering): Released all slaves [ 958.443170][ T5814] Bluetooth: hci5: command tx timeout [ 959.263635][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.323512][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.345021][ T1008] bond0 (unregistering): Released all slaves [ 960.522928][ T5814] Bluetooth: hci5: command tx timeout [ 961.193605][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.253587][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.333587][ T1008] bond0 (unregistering): Released all slaves [ 963.133846][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.213516][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.274681][ T1008] bond0 (unregistering): Released all slaves [ 963.470425][T13854] tipc: Started in network mode [ 963.470451][T13854] tipc: Node identity 4, cluster identity 4711 [ 963.470465][T13854] tipc: Node number set to 4 [ 965.134614][T13765] team0: Port device team_slave_0 added [ 965.149966][T13795] chnl_net:caif_netlink_parms(): no params data found [ 965.195919][T13765] team0: Port device team_slave_1 added [ 966.424539][T13765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.424558][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.424585][T13765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.849901][ T37] audit: type=1326 audit(1761169070.938:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 966.850767][ T37] audit: type=1326 audit(1761169070.938:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 966.851576][ T37] audit: type=1326 audit(1761169070.938:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 966.851942][ T37] audit: type=1326 audit(1761169070.938:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 966.853140][ T37] audit: type=1326 audit(1761169070.938:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 966.975187][T13765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.975198][T13765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.975210][T13765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.028252][ T37] audit: type=1326 audit(1761169071.058:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 967.028292][ T37] audit: type=1326 audit(1761169071.118:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 967.028758][ T37] audit: type=1326 audit(1761169071.118:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 967.128620][ T37] audit: type=1326 audit(1761169071.218:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 967.129372][ T37] audit: type=1326 audit(1761169071.218:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13870 comm="syz.7.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60dedefc9 code=0x7ffc0000 [ 967.778888][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.778991][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.779173][T13795] bridge_slave_0: entered allmulticast mode [ 967.780641][T13795] bridge_slave_0: entered promiscuous mode [ 967.794499][T13765] hsr_slave_0: entered promiscuous mode [ 967.795990][T13765] hsr_slave_1: entered promiscuous mode [ 967.797052][T13765] debugfs: 'hsr0' already exists in 'hsr' [ 967.797128][T13765] Cannot create hsr debugfs directory [ 967.808132][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.808290][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.808519][T13795] bridge_slave_1: entered allmulticast mode [ 967.811433][T13795] bridge_slave_1: entered promiscuous mode [ 967.864551][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.904557][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.023307][ T1008] hsr_slave_0: left promiscuous mode [ 968.045674][ T1008] hsr_slave_1: left promiscuous mode [ 968.046619][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.093936][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.292996][ T1008] hsr_slave_0: left promiscuous mode [ 968.324609][ T1008] hsr_slave_1: left promiscuous mode [ 968.325264][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.363638][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.523459][ T1008] hsr_slave_0: left promiscuous mode [ 968.542968][ T1008] hsr_slave_1: left promiscuous mode [ 968.547749][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.583705][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.723634][ T1008] hsr_slave_0: left promiscuous mode [ 968.743085][ T1008] hsr_slave_1: left promiscuous mode [ 968.743948][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.794081][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.353562][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 971.818204][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 976.493529][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 976.663518][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 977.824586][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 977.983988][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 980.934775][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 981.083674][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 983.813842][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 983.973520][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 986.363679][T13904] veth0_to_team: entered promiscuous mode [ 986.579918][T13795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.797310][T13795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.668503][T12888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 988.719842][T12888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 988.733149][T12888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 988.734538][T12888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 988.735365][T12888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 989.943141][T13915] ALSA: mixer_oss: invalid OSS volume './file0' [ 989.963800][T13795] team0: Port device team_slave_0 added [ 989.986692][T13795] team0: Port device team_slave_1 added [ 990.338239][T13795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.338259][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.338286][T13795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.372957][T13795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.372976][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.373001][T13795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.727745][T13835] chnl_net:caif_netlink_parms(): no params data found [ 991.111981][T12888] Bluetooth: hci1: command tx timeout [ 992.229887][T13795] hsr_slave_0: entered promiscuous mode [ 992.230617][T13795] hsr_slave_1: entered promiscuous mode [ 992.231143][T13795] debugfs: 'hsr0' already exists in 'hsr' [ 992.231159][T13795] Cannot create hsr debugfs directory [ 992.397508][T11463] Bluetooth: hci2: Frame reassembly failed (-84) [ 992.829890][T11463] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 993.682185][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.682380][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.699504][ T5814] Bluetooth: hci1: command tx timeout [ 994.179116][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.179243][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.179357][T13835] bridge_slave_0: entered allmulticast mode [ 994.180712][T13835] bridge_slave_0: entered promiscuous mode [ 994.267013][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.267251][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.267944][T13835] bridge_slave_1: entered allmulticast mode [ 994.271755][T13835] bridge_slave_1: entered promiscuous mode [ 994.443163][T12888] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 994.443178][ T5814] Bluetooth: hci2: command 0x1003 tx timeout [ 994.801442][T13938] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2729'. [ 995.182456][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.206049][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 996.240688][ T5126] Bluetooth: hci1: command tx timeout [ 996.246270][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 996.248538][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 996.250470][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 996.589648][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.676692][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2730'. [ 998.284887][ T5814] Bluetooth: hci1: command tx timeout [ 998.365212][ T5814] Bluetooth: hci2: command tx timeout [ 999.514300][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.483200][ T5814] Bluetooth: hci2: command tx timeout [ 1000.995673][T13835] team0: Port device team_slave_0 added [ 1001.523100][ T9435] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1001.898211][ T9435] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 1002.038073][ T9435] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1002.038146][ T9435] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1002.038204][ T9435] usb 8-1: Product: syz [ 1002.038272][ T9435] usb 8-1: Manufacturer: syz [ 1002.038332][ T9435] usb 8-1: SerialNumber: syz [ 1002.240736][ T9435] usb 8-1: config 0 descriptor?? [ 1002.529083][ T5814] Bluetooth: hci2: command tx timeout [ 1003.606376][T13835] team0: Port device team_slave_1 added [ 1004.004794][T12888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1004.012952][T12888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1004.026559][T12888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1004.043127][T12888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1004.044791][T12888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1004.087987][ T5888] usb 8-1: USB disconnect, device number 13 [ 1004.604399][ T5814] Bluetooth: hci2: command tx timeout [ 1004.756521][T13967] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1006.126260][ T5814] Bluetooth: hci3: command tx timeout [ 1006.274399][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.274413][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.274425][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.275987][T13913] chnl_net:caif_netlink_parms(): no params data found [ 1006.345230][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.345242][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.345255][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.557547][ T5814] block nbd7: Receive control failed (result -32) [ 1007.580855][T13976] block nbd7: shutting down sockets [ 1007.857421][T13835] hsr_slave_0: entered promiscuous mode [ 1007.859157][T13835] hsr_slave_1: entered promiscuous mode [ 1007.860275][T13835] debugfs: 'hsr0' already exists in 'hsr' [ 1007.860303][T13835] Cannot create hsr debugfs directory [ 1008.134264][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.134358][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.134469][T13913] bridge_slave_0: entered allmulticast mode [ 1008.135851][T13913] bridge_slave_0: entered promiscuous mode [ 1008.282791][ T5814] Bluetooth: hci3: command tx timeout [ 1008.518646][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.518715][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.518828][T13913] bridge_slave_1: entered allmulticast mode [ 1008.520323][T13913] bridge_slave_1: entered promiscuous mode [ 1008.903183][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.975873][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.626261][T13913] team0: Port device team_slave_0 added [ 1010.698581][T13913] team0: Port device team_slave_1 added [ 1010.811182][ T5814] Bluetooth: hci3: command tx timeout [ 1012.008911][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.008932][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.008970][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.112957][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.112978][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.113008][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.193663][T13940] chnl_net:caif_netlink_parms(): no params data found [ 1013.152731][ T5814] Bluetooth: hci3: command tx timeout [ 1013.226513][T12888] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.366720][T12888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.381467][T12888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.383965][T12888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.400368][T12888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1014.631325][T13913] hsr_slave_0: entered promiscuous mode [ 1014.643429][T13913] hsr_slave_1: entered promiscuous mode [ 1014.644623][T13913] debugfs: 'hsr0' already exists in 'hsr' [ 1014.644650][T13913] Cannot create hsr debugfs directory [ 1014.675678][T13959] chnl_net:caif_netlink_parms(): no params data found [ 1016.446261][ T5814] Bluetooth: hci4: command tx timeout [ 1017.736129][T14026] input: syz1 as /devices/virtual/input/input29 [ 1018.526934][ T5814] Bluetooth: hci4: command tx timeout [ 1019.550283][T14030] binder: 14028:14030 ioctl 4018620d 0 returned -22 [ 1020.544812][T13940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.545561][T13940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.546423][T13940] bridge_slave_0: entered allmulticast mode [ 1020.606400][T13940] bridge_slave_0: entered promiscuous mode [ 1020.611599][ T5814] Bluetooth: hci4: command tx timeout [ 1020.815361][T13940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.815525][T13940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.815767][T13940] bridge_slave_1: entered allmulticast mode [ 1020.819172][T13940] bridge_slave_1: entered promiscuous mode [ 1021.509789][T13940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.682906][ T5814] Bluetooth: hci4: command tx timeout [ 1024.776532][T13940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.777094][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.778328][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.778587][T13959] bridge_slave_0: entered allmulticast mode [ 1024.781886][T13959] bridge_slave_0: entered promiscuous mode [ 1024.989779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.887405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.904875][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.905029][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.905252][T13959] bridge_slave_1: entered allmulticast mode [ 1025.933364][T13959] bridge_slave_1: entered promiscuous mode [ 1026.099335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.570321][T14053] NILFS (nbd7): device size too small [ 1026.763525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.286201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.595734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.745059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.550528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.595728][T13940] team0: Port device team_slave_0 added [ 1028.746186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.203550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.235359][T13940] team0: Port device team_slave_1 added [ 1029.354188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.834477][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.038699][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.220159][T14069] netlink: 'syz.7.2750': attribute type 6 has an invalid length. [ 1030.269266][T13940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.269285][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.269315][T13940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.428442][T13940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.428454][T13940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.428466][T13940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.435243][T13959] team0: Port device team_slave_0 added [ 1030.550163][T13959] team0: Port device team_slave_1 added [ 1030.941625][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.941638][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.941654][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.221011][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.221027][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.221042][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.324646][T13940] hsr_slave_0: entered promiscuous mode [ 1031.325427][T13940] hsr_slave_1: entered promiscuous mode [ 1031.325920][T13940] debugfs: 'hsr0' already exists in 'hsr' [ 1031.325934][T13940] Cannot create hsr debugfs directory [ 1032.427865][T13913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1034.351953][T13959] hsr_slave_0: entered promiscuous mode [ 1034.353773][T13959] hsr_slave_1: entered promiscuous mode [ 1034.355029][T13959] debugfs: 'hsr0' already exists in 'hsr' [ 1034.355057][T13959] Cannot create hsr debugfs directory [ 1034.355661][T13913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1034.507481][T13913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1034.728100][T13913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1035.144568][T14006] chnl_net:caif_netlink_parms(): no params data found [ 1040.352531][T14116] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 1041.545274][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.545397][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.545634][T14006] bridge_slave_0: entered allmulticast mode [ 1041.550064][T14006] bridge_slave_0: entered promiscuous mode [ 1041.658148][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.658371][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.658650][T14006] bridge_slave_1: entered allmulticast mode [ 1041.661646][T14006] bridge_slave_1: entered promiscuous mode [ 1042.225726][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.316461][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.700340][T14006] team0: Port device team_slave_0 added [ 1042.711455][ T1008] bridge_slave_1: left allmulticast mode [ 1042.711485][ T1008] bridge_slave_1: left promiscuous mode [ 1042.711770][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.773717][ T1008] bridge_slave_0: left allmulticast mode [ 1042.773735][ T1008] bridge_slave_0: left promiscuous mode [ 1042.773917][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.850232][ T1008] bridge_slave_1: left allmulticast mode [ 1042.850252][ T1008] bridge_slave_1: left promiscuous mode [ 1042.850391][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.945324][ T1008] bridge_slave_0: left allmulticast mode [ 1042.945344][ T1008] bridge_slave_0: left promiscuous mode [ 1042.945494][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.035255][ T1008] bridge_slave_1: left allmulticast mode [ 1043.035274][ T1008] bridge_slave_1: left promiscuous mode [ 1043.035413][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.087416][ T1008] bridge_slave_0: left allmulticast mode [ 1043.087436][ T1008] bridge_slave_0: left promiscuous mode [ 1043.087589][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.205658][ T1008] bridge_slave_1: left allmulticast mode [ 1043.205677][ T1008] bridge_slave_1: left promiscuous mode [ 1043.205816][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.283944][ T1008] bridge_slave_0: left allmulticast mode [ 1043.283964][ T1008] bridge_slave_0: left promiscuous mode [ 1043.284146][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.355509][ T1008] bridge_slave_1: left allmulticast mode [ 1043.355528][ T1008] bridge_slave_1: left promiscuous mode [ 1043.355671][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.424266][ T1008] bridge_slave_0: left allmulticast mode [ 1043.424287][ T1008] bridge_slave_0: left promiscuous mode [ 1043.424470][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.489229][ T1008] bridge_slave_1: left allmulticast mode [ 1043.489250][ T1008] bridge_slave_1: left promiscuous mode [ 1043.489388][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.544458][ T1008] bridge_slave_0: left allmulticast mode [ 1043.544478][ T1008] bridge_slave_0: left promiscuous mode [ 1043.544652][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.854108][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.944323][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.004849][ T1008] bond0 (unregistering): Released all slaves [ 1044.223650][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.304718][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.385578][ T1008] bond0 (unregistering): Released all slaves [ 1044.583686][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.673560][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.734984][ T1008] bond0 (unregistering): Released all slaves [ 1044.964655][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.054451][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.114645][ T1008] bond0 (unregistering): Released all slaves [ 1045.313574][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.404633][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.464982][ T1008] bond0 (unregistering): Released all slaves [ 1045.693492][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.773348][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.854966][ T1008] bond0 (unregistering): Released all slaves [ 1045.882011][T14006] team0: Port device team_slave_1 added [ 1046.948244][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.948352][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.948382][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.104922][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.104978][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.105054][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.236234][T14006] hsr_slave_0: entered promiscuous mode [ 1048.237913][T14006] hsr_slave_1: entered promiscuous mode [ 1048.239068][T14006] debugfs: 'hsr0' already exists in 'hsr' [ 1048.239094][T14006] Cannot create hsr debugfs directory [ 1048.989218][T12888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1048.999191][T12888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1049.169460][T14134] overlayfs: missing 'lowerdir' [ 1049.415629][T12888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1050.030608][T12888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1050.034714][T12888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1050.942906][ T1008] hsr_slave_0: left promiscuous mode [ 1050.962942][ T1008] hsr_slave_1: left promiscuous mode [ 1050.964126][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.023554][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.163958][ T1008] hsr_slave_0: left promiscuous mode [ 1051.202867][ T1008] hsr_slave_1: left promiscuous mode [ 1051.203956][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.288726][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.582891][ T5814] Bluetooth: hci1: command tx timeout [ 1052.753076][ T1008] hsr_slave_0: left promiscuous mode [ 1052.772929][ T1008] hsr_slave_1: left promiscuous mode [ 1052.774013][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.817695][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.952950][ T1008] hsr_slave_0: left promiscuous mode [ 1052.972977][ T1008] hsr_slave_1: left promiscuous mode [ 1052.973839][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.023638][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.183041][ T1008] hsr_slave_0: left promiscuous mode [ 1053.203129][ T1008] hsr_slave_1: left promiscuous mode [ 1053.203846][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.243436][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.382811][ T1008] hsr_slave_0: left promiscuous mode [ 1053.402791][ T1008] hsr_slave_1: left promiscuous mode [ 1053.403479][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.443357][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.616881][ T5814] Bluetooth: hci1: command tx timeout [ 1054.866034][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.866118][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.253517][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1055.434575][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1056.683234][ T5814] Bluetooth: hci1: command tx timeout [ 1057.422268][T12888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1057.441596][T12888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1057.443995][T12888] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1057.445569][T12888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1057.447759][T12888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1058.762781][T12888] Bluetooth: hci1: command tx timeout [ 1059.071091][ T10] IPVS: starting estimator thread 0... [ 1059.163724][T14169] IPVS: using max 1 ests per chain, 2400 per kthread [ 1059.563359][T12888] Bluetooth: hci5: command tx timeout [ 1060.064612][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2769'. [ 1060.913707][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1061.077466][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1061.642959][T12888] Bluetooth: hci5: command tx timeout [ 1062.731077][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1062.759584][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1062.762102][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1062.780436][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1062.781444][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1063.727555][ T5814] Bluetooth: hci5: command tx timeout [ 1064.694152][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1064.843077][ T5814] Bluetooth: hci6: command tx timeout [ 1065.273265][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1065.439632][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2773'. [ 1065.883097][ T5814] Bluetooth: hci5: command tx timeout [ 1066.291370][T14204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2774'. [ 1066.430621][T14205] No memory to map [ 1066.922890][T12888] Bluetooth: hci6: command tx timeout [ 1067.985180][T14209] FAT-fs (loop15): unable to read boot sector [ 1069.002785][T12888] Bluetooth: hci6: command tx timeout [ 1069.019381][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1070.153656][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1070.291803][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2777'. [ 1070.682420][ T31] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1070.842820][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1070.847748][ T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.847772][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1070.847786][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1070.847799][ T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.847824][ T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1070.847837][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.082770][ T31] usb 8-1: GET_CAPABILITIES returned 0 [ 1071.082815][ T31] usbtmc 8-1:16.0: can't read capabilities [ 1071.087119][T12888] Bluetooth: hci6: command tx timeout [ 1071.943809][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1072.105000][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1073.363903][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1073.534031][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1074.474883][T14217] delete_channel: no stack [ 1074.476482][ T31] usb 8-1: USB disconnect, device number 14 [ 1074.669589][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1074.719060][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1074.790178][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1074.803349][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1074.811065][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1074.955740][ T31] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1075.143147][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 1075.149263][ T31] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1075.149295][ T31] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1075.149316][ T31] usb 8-1: Product: syz [ 1075.149331][ T31] usb 8-1: Manufacturer: syz [ 1075.149346][ T31] usb 8-1: SerialNumber: syz [ 1075.203616][ T31] usb 8-1: config 0 descriptor?? [ 1077.054017][T12888] Bluetooth: hci7: command tx timeout [ 1078.341932][ T5888] usb 8-1: USB disconnect, device number 15 [ 1079.141914][T12888] Bluetooth: hci7: command tx timeout [ 1080.020632][T14131] chnl_net:caif_netlink_parms(): no params data found [ 1080.490115][T14156] chnl_net:caif_netlink_parms(): no params data found [ 1080.706919][T14181] chnl_net:caif_netlink_parms(): no params data found [ 1081.243464][T12888] Bluetooth: hci7: command tx timeout [ 1081.345835][T14220] chnl_net:caif_netlink_parms(): no params data found [ 1081.572094][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.572245][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.572504][T14131] bridge_slave_0: entered allmulticast mode [ 1081.638981][T14131] bridge_slave_0: entered promiscuous mode [ 1081.896710][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.896858][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.897023][T14131] bridge_slave_1: entered allmulticast mode [ 1081.898622][T14131] bridge_slave_1: entered promiscuous mode [ 1082.354007][T14156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.354254][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.354481][T14156] bridge_slave_0: entered allmulticast mode [ 1082.357868][T14156] bridge_slave_0: entered promiscuous mode [ 1082.644489][T14156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.644570][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.644694][T14156] bridge_slave_1: entered allmulticast mode [ 1082.646080][T14156] bridge_slave_1: entered promiscuous mode [ 1082.668395][T14268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.696256][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.696487][T14181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.696701][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.696900][T14181] bridge_slave_0: entered allmulticast mode [ 1082.699802][T14181] bridge_slave_0: entered promiscuous mode [ 1082.818321][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.818556][T14181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.818619][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.818721][T14181] bridge_slave_1: entered allmulticast mode [ 1082.820547][T14181] bridge_slave_1: entered promiscuous mode [ 1083.245768][T14156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.323253][T12888] Bluetooth: hci7: command tx timeout [ 1083.606890][T14156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.608142][T14131] team0: Port device team_slave_0 added [ 1083.751342][T14181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.754438][T14131] team0: Port device team_slave_1 added [ 1084.217509][T14275] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1084.267452][T14274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.435350][T14220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.461214][T14220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.475637][T14220] bridge_slave_0: entered allmulticast mode [ 1084.660376][T14220] bridge_slave_0: entered promiscuous mode [ 1084.879567][T14181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.986169][T14220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.986286][T14220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.986478][T14220] bridge_slave_1: entered allmulticast mode [ 1085.989902][T14220] bridge_slave_1: entered promiscuous mode [ 1087.215807][T14156] team0: Port device team_slave_0 added [ 1088.378774][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.378792][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.378821][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.405024][T14156] team0: Port device team_slave_1 added [ 1088.626224][T14181] team0: Port device team_slave_0 added [ 1088.627839][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.627855][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.627884][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.688851][T14220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.767242][T14181] team0: Port device team_slave_1 added [ 1089.956917][T14220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.036794][T14156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.036811][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.036832][T14156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.107013][T14304] ALSA: mixer_oss: invalid OSS volume '' [ 1090.263522][T14156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.263547][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.263576][T14156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.360260][T14181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.360315][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.360344][T14181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.498095][T14220] team0: Port device team_slave_0 added [ 1090.498834][T14181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.498841][T14181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.498853][T14181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.665480][T14220] team0: Port device team_slave_1 added [ 1090.700396][T14131] hsr_slave_0: entered promiscuous mode [ 1090.701503][T14131] hsr_slave_1: entered promiscuous mode [ 1090.702049][T14131] debugfs: 'hsr0' already exists in 'hsr' [ 1090.702062][T14131] Cannot create hsr debugfs directory [ 1094.347258][T14220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.347277][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.347301][T14220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.418686][T14156] hsr_slave_0: entered promiscuous mode [ 1094.419487][T14156] hsr_slave_1: entered promiscuous mode [ 1094.420203][T14156] debugfs: 'hsr0' already exists in 'hsr' [ 1094.420218][T14156] Cannot create hsr debugfs directory [ 1095.370598][T14220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.370618][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.370647][T14220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.444489][T14181] hsr_slave_0: entered promiscuous mode [ 1095.446303][T14181] hsr_slave_1: entered promiscuous mode [ 1095.447482][T14181] debugfs: 'hsr0' already exists in 'hsr' [ 1095.447509][T14181] Cannot create hsr debugfs directory [ 1096.941566][T14329] netlink: 'syz.7.2796': attribute type 10 has an invalid length. [ 1096.941580][T14329] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2796'. [ 1097.000137][T14329] veth0_vlan: entered allmulticast mode [ 1097.001258][T14329] bridge0: port 3(veth0_vlan) entered blocking state [ 1097.001383][T14329] bridge0: port 3(veth0_vlan) entered disabled state [ 1097.005812][T14329] net_ratelimit: 31 callbacks suppressed [ 1097.005831][T14329] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1098.930733][T14220] hsr_slave_0: entered promiscuous mode [ 1098.931551][T14220] hsr_slave_1: entered promiscuous mode [ 1098.932107][T14220] debugfs: 'hsr0' already exists in 'hsr' [ 1098.932122][T14220] Cannot create hsr debugfs directory [ 1099.012873][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1099.173747][ T10] usb 8-1: config 6 has an invalid interface number: 14 but max is 0 [ 1099.173778][ T10] usb 8-1: config 6 has no interface number 0 [ 1099.173834][ T10] usb 8-1: config 6 interface 14 has no altsetting 0 [ 1099.178827][ T10] usb 8-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1099.178858][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.178878][ T10] usb 8-1: Product: syz [ 1099.178892][ T10] usb 8-1: Manufacturer: syz [ 1099.178907][ T10] usb 8-1: SerialNumber: syz [ 1099.576841][ T10] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1099.576892][ T10] command write [95] error -22 [ 1099.580200][ T10] usb 8-1: USB disconnect, device number 16 [ 1100.511957][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2799'. [ 1100.914677][T14346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.986716][T14346] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1105.079544][ T1008] bridge_slave_1: left allmulticast mode [ 1105.079576][ T1008] bridge_slave_1: left promiscuous mode [ 1105.082064][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.140489][ T1008] bridge_slave_0: left allmulticast mode [ 1105.140522][ T1008] bridge_slave_0: left promiscuous mode [ 1105.141392][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.226376][ T1008] bridge_slave_1: left allmulticast mode [ 1105.226397][ T1008] bridge_slave_1: left promiscuous mode [ 1105.226536][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.294455][ T1008] bridge_slave_0: left allmulticast mode [ 1105.294479][ T1008] bridge_slave_0: left promiscuous mode [ 1105.294646][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.375980][ T1008] bridge_slave_1: left allmulticast mode [ 1105.376000][ T1008] bridge_slave_1: left promiscuous mode [ 1105.376148][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.443846][ T1008] bridge_slave_0: left allmulticast mode [ 1105.443867][ T1008] bridge_slave_0: left promiscuous mode [ 1105.444016][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.527508][ T1008] bridge_slave_1: left allmulticast mode [ 1105.527527][ T1008] bridge_slave_1: left promiscuous mode [ 1105.527668][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.604148][ T1008] bridge_slave_0: left allmulticast mode [ 1105.604168][ T1008] bridge_slave_0: left promiscuous mode [ 1105.604371][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.666663][ T1008] bridge_slave_1: left allmulticast mode [ 1105.666682][ T1008] bridge_slave_1: left promiscuous mode [ 1105.666822][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.734115][ T1008] bridge_slave_0: left allmulticast mode [ 1105.734135][ T1008] bridge_slave_0: left promiscuous mode [ 1105.734305][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.652428][T14365] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1106.652484][T14365] CIFS mount error: No usable UNC path provided in device string! [ 1106.652484][T14365] [ 1106.652868][T14365] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1107.403954][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.563511][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.746383][ T1008] bond0 (unregistering): Released all slaves [ 1108.813565][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.893517][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.965335][ T1008] bond0 (unregistering): Released all slaves [ 1109.173514][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.253630][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1109.326875][ T1008] bond0 (unregistering): Released all slaves [ 1109.913715][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.993817][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.120152][ T1008] bond0 (unregistering): Released all slaves [ 1110.144593][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1110.164636][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1110.170986][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1110.194286][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1110.233384][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1110.483661][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.564182][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.624827][ T1008] bond0 (unregistering): Released all slaves [ 1111.347399][T14380] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 1111.867644][T14377] chnl_net:caif_netlink_parms(): no params data found [ 1112.362823][ T5814] Bluetooth: hci2: command tx timeout [ 1112.421420][T14377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.421663][T14377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.422342][T14377] bridge_slave_0: entered allmulticast mode [ 1112.427960][T14377] bridge_slave_0: entered promiscuous mode [ 1112.612954][ T1008] hsr_slave_0: left promiscuous mode [ 1112.652917][ T1008] hsr_slave_1: left promiscuous mode [ 1112.653572][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.676255][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.833095][ T1008] hsr_slave_0: left promiscuous mode [ 1112.852971][ T1008] hsr_slave_1: left promiscuous mode [ 1112.854109][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.893786][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.992894][ T1008] hsr_slave_0: left promiscuous mode [ 1113.042920][ T1008] hsr_slave_1: left promiscuous mode [ 1113.043640][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.066331][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.222814][ T1008] hsr_slave_0: left promiscuous mode [ 1113.243019][ T1008] hsr_slave_1: left promiscuous mode [ 1113.244019][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.305919][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.391099][ T1008] hsr_slave_0: left promiscuous mode [ 1113.423012][ T1008] hsr_slave_1: left promiscuous mode [ 1113.423624][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.453574][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.143736][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1114.323436][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1114.472097][ T5814] Bluetooth: hci2: command tx timeout [ 1115.453504][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1115.623336][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1115.808664][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.808766][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.532846][ T5814] Bluetooth: hci2: command tx timeout [ 1116.733454][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1116.894124][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1117.345130][T12888] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1117.354597][T12888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1117.356517][T12888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1117.358419][T12888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1117.359553][T12888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1118.184272][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1118.353474][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1118.611534][ T5814] Bluetooth: hci2: command tx timeout [ 1119.402862][ T5814] Bluetooth: hci3: command tx timeout [ 1119.555333][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1119.733552][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1120.345391][T14377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.345509][T14377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.345668][T14377] bridge_slave_1: entered allmulticast mode [ 1120.347028][T14377] bridge_slave_1: entered promiscuous mode [ 1120.590302][T14377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.610339][T14377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.935219][T14377] team0: Port device team_slave_0 added [ 1121.024877][T14377] team0: Port device team_slave_1 added [ 1121.482906][ T5814] Bluetooth: hci3: command tx timeout [ 1121.567907][T14377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.567918][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.567937][T14377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.805225][T14377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.805241][T14377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.805255][T14377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.143662][T14377] hsr_slave_0: entered promiscuous mode [ 1122.145433][T14377] hsr_slave_1: entered promiscuous mode [ 1122.146545][T14377] debugfs: 'hsr0' already exists in 'hsr' [ 1122.146572][T14377] Cannot create hsr debugfs directory [ 1123.574897][ T5814] Bluetooth: hci3: command tx timeout [ 1123.731252][T12888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1123.759457][T12888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1123.760926][T12888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1123.765745][T12888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1123.847250][T12888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1123.976640][T14390] chnl_net:caif_netlink_parms(): no params data found [ 1124.228999][T14220] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1124.258121][T14220] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1124.401935][T14220] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1124.553902][T14220] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1124.807209][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.807456][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.807740][T14390] bridge_slave_0: entered allmulticast mode [ 1124.811132][T14390] bridge_slave_0: entered promiscuous mode [ 1124.888652][T14390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.888745][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.888890][T14390] bridge_slave_1: entered allmulticast mode [ 1124.890242][T14390] bridge_slave_1: entered promiscuous mode [ 1125.227018][T14390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.244738][T14390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.534775][T14390] team0: Port device team_slave_0 added [ 1125.539439][T14390] team0: Port device team_slave_1 added [ 1125.658629][T12888] Bluetooth: hci3: command tx timeout [ 1125.796155][T14390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.796170][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.796185][T14390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.825805][T14390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.825822][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.825848][T14390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.882780][T12888] Bluetooth: hci1: command tx timeout [ 1126.211668][T14390] hsr_slave_0: entered promiscuous mode [ 1126.213601][T14390] hsr_slave_1: entered promiscuous mode [ 1126.214676][T14390] debugfs: 'hsr0' already exists in 'hsr' [ 1126.214701][T14390] Cannot create hsr debugfs directory [ 1126.321352][T14396] chnl_net:caif_netlink_parms(): no params data found [ 1126.939676][T14377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1127.041128][T14377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1127.056805][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.057174][T14396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.057427][T14396] bridge_slave_0: entered allmulticast mode [ 1127.060645][T14396] bridge_slave_0: entered promiscuous mode [ 1127.076292][T14377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1127.115426][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.115565][T14396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.115798][T14396] bridge_slave_1: entered allmulticast mode [ 1127.117309][T14396] bridge_slave_1: entered promiscuous mode [ 1127.150278][T14377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1127.379370][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.405284][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.789335][T14396] team0: Port device team_slave_0 added [ 1127.964823][T12888] Bluetooth: hci1: command tx timeout [ 1127.967623][T14396] team0: Port device team_slave_1 added [ 1128.337675][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.337689][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.337708][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.415991][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.416003][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.416015][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.419077][T14220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.882181][T14396] hsr_slave_0: entered promiscuous mode [ 1128.883388][T14396] hsr_slave_1: entered promiscuous mode [ 1128.884365][T14396] debugfs: 'hsr0' already exists in 'hsr' [ 1128.884389][T14396] Cannot create hsr debugfs directory [ 1128.957741][T14220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.215299][ T1624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.215423][ T1624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.301184][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.301263][ T1782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.367591][T14390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1129.437462][T14390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1129.548442][T14390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1129.586542][T14390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1129.841503][ T1008] bridge_slave_1: left allmulticast mode [ 1129.841525][ T1008] bridge_slave_1: left promiscuous mode [ 1129.841769][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.894014][ T1008] bridge_slave_0: left allmulticast mode [ 1129.894033][ T1008] bridge_slave_0: left promiscuous mode [ 1129.894182][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.957245][ T1008] bridge_slave_1: left allmulticast mode [ 1129.957265][ T1008] bridge_slave_1: left promiscuous mode [ 1129.957398][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.013988][ T1008] bridge_slave_0: left allmulticast mode [ 1130.014006][ T1008] bridge_slave_0: left promiscuous mode [ 1130.014183][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.043041][T12888] Bluetooth: hci1: command tx timeout [ 1130.085191][ T1008] bridge_slave_1: left allmulticast mode [ 1130.085212][ T1008] bridge_slave_1: left promiscuous mode [ 1130.085349][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.143733][ T1008] bridge_slave_0: left allmulticast mode [ 1130.143753][ T1008] bridge_slave_0: left promiscuous mode [ 1130.143900][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.433545][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.515218][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.595760][ T1008] bond0 (unregistering): Released all slaves [ 1130.834273][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.944216][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.015344][ T1008] bond0 (unregistering): Released all slaves [ 1131.213486][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.314204][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.384782][ T1008] bond0 (unregistering): Released all slaves [ 1131.564759][T14377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.860663][T14377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.987548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.987747][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.121433][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.121509][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.132685][T12888] Bluetooth: hci1: command tx timeout [ 1132.323016][ T1008] hsr_slave_0: left promiscuous mode [ 1132.352914][ T1008] hsr_slave_1: left promiscuous mode [ 1132.353547][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.395785][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.562832][ T1008] hsr_slave_0: left promiscuous mode [ 1132.603042][ T1008] hsr_slave_1: left promiscuous mode [ 1132.603953][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.624823][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.803151][ T1008] hsr_slave_0: left promiscuous mode [ 1132.822975][ T1008] hsr_slave_1: left promiscuous mode [ 1132.823655][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.873525][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.603356][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1133.784096][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1134.945132][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1135.123502][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1136.025859][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1136.045090][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1136.080278][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1136.082475][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1136.083494][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1136.423409][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1136.594292][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1137.786204][T14390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.131748][T12888] Bluetooth: hci4: command tx timeout [ 1138.153332][T14390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.503939][T14396] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1138.552953][T14396] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1138.606152][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.606466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.607368][T14396] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1138.698713][T14396] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1138.829711][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.829978][T10379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.029428][T14430] chnl_net:caif_netlink_parms(): no params data found [ 1139.261838][T14377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.530929][T14430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.531089][T14430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.531340][T14430] bridge_slave_0: entered allmulticast mode [ 1139.533453][T14430] bridge_slave_0: entered promiscuous mode [ 1139.543327][T14430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.543468][T14430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.543676][T14430] bridge_slave_1: entered allmulticast mode [ 1139.547780][T14430] bridge_slave_1: entered promiscuous mode [ 1139.828976][T14430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.841312][T14430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.080065][T14430] team0: Port device team_slave_0 added [ 1140.160741][T14430] team0: Port device team_slave_1 added [ 1140.202817][T12888] Bluetooth: hci4: command tx timeout [ 1140.396134][T14430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.396148][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.396159][T14430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.401801][T14430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.401826][T14430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.401853][T14430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.660711][T14430] hsr_slave_0: entered promiscuous mode [ 1140.662299][T14430] hsr_slave_1: entered promiscuous mode [ 1140.664554][T14430] debugfs: 'hsr0' already exists in 'hsr' [ 1140.664591][T14430] Cannot create hsr debugfs directory [ 1140.668088][T14377] veth0_vlan: entered promiscuous mode [ 1140.696409][T14390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.874569][T14377] veth1_vlan: entered promiscuous mode [ 1140.878935][T14396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.348788][T14396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.605587][ T1529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.605707][ T1529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.637082][ T1529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.637174][ T1529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.645245][T14377] veth0_macvtap: entered promiscuous mode [ 1141.677838][T14390] veth0_vlan: entered promiscuous mode [ 1141.864475][T14377] veth1_macvtap: entered promiscuous mode [ 1141.898178][T14390] veth1_vlan: entered promiscuous mode [ 1142.147471][T14377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.181435][T14377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.202032][ T1782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.212259][ T1782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.226639][ T1782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.231949][ T1782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.283148][T12888] Bluetooth: hci4: command tx timeout [ 1142.328801][T14390] veth0_macvtap: entered promiscuous mode [ 1142.400832][T14390] veth1_macvtap: entered promiscuous mode [ 1142.747398][T14390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.759962][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.759982][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.790637][ T1008] bridge_slave_1: left allmulticast mode [ 1142.790658][ T1008] bridge_slave_1: left promiscuous mode [ 1142.790867][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.845259][ T1008] bridge_slave_0: left allmulticast mode [ 1142.845278][ T1008] bridge_slave_0: left promiscuous mode [ 1142.845433][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.362901][T12888] Bluetooth: hci4: command tx timeout [ 1144.823278][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.903729][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.927730][ T1008] bond0 (unregistering): Released all slaves [ 1144.976114][T14390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.201436][ T1529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.201529][ T1529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.201543][ T1529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.394677][ T1008] hsr_slave_0: left promiscuous mode [ 1145.433077][ T1008] hsr_slave_1: left promiscuous mode [ 1145.433765][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.484360][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.553578][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 1146.854336][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 1149.504816][ T1529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.509530][ T1529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.626728][ T1529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.659124][T14462] xfrm0: entered promiscuous mode [ 1149.659140][T14462] xfrm0: entered allmulticast mode [ 1149.714797][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.133836][T10380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.133859][T10380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.491441][ T1408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.491463][ T1408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.564920][T14482] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1152.906763][T14482] usb 1-1: Using ep0 maxpacket: 32 [ 1154.036803][T14482] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1154.036838][T14482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.036858][T14482] usb 1-1: Product: syz [ 1154.036872][T14482] usb 1-1: Manufacturer: syz [ 1154.036886][T14482] usb 1-1: SerialNumber: syz [ 1154.044909][T14482] usb 1-1: config 0 descriptor?? [ 1154.060932][T14482] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 1154.105521][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.343662][T14456] usb 1-1: USB disconnect, device number 8 [ 1154.366038][T14396] veth0_vlan: entered promiscuous mode [ 1154.485775][T14430] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1154.524483][T14396] veth1_vlan: entered promiscuous mode [ 1154.531034][T14430] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1154.580809][T14430] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1154.656014][T14430] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1154.853012][T14523] netlink: 'syz.7.2825': attribute type 1 has an invalid length. [ 1154.853039][T14523] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2825'. [ 1154.876436][T14396] veth0_macvtap: entered promiscuous mode [ 1154.933078][T14396] veth1_macvtap: entered promiscuous mode [ 1155.070473][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.366702][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.416217][T13440] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.416301][T13440] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.416358][T13440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.416459][T13440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.730442][T14430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.731548][T14543] netlink: 'syz.7.2834': attribute type 1 has an invalid length. [ 1155.827476][T14546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1156.072511][ T1624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.072536][ T1624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.107857][T14430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.176536][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.176742][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.290826][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.291112][T13440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.350213][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.350237][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.505626][T13541] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1158.662785][T13541] usb 4-1: Using ep0 maxpacket: 16 [ 1158.677879][T13541] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 1158.677906][T13541] usb 4-1: config 0 has no interface number 0 [ 1158.677957][T13541] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1158.686630][T13541] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1158.686663][T13541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.686681][T13541] usb 4-1: Product: syz [ 1158.686694][T13541] usb 4-1: Manufacturer: syz [ 1158.686707][T13541] usb 4-1: SerialNumber: syz [ 1158.692406][T13541] usb 4-1: config 0 descriptor?? [ 1158.713560][T14587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1158.778986][T14590] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2851'. [ 1158.782365][T13541] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1158.984467][T13440] usb 4-1: Failed to submit usb control message: -71 [ 1158.984511][T13440] usb 4-1: unable to send the bmi data to the device: -71 [ 1158.984530][T13440] usb 4-1: unable to get target info from device [ 1158.984546][T13440] usb 4-1: could not get target info (-71) [ 1158.985054][T13440] usb 4-1: could not probe fw (-71) [ 1158.990957][T13541] usb 4-1: USB disconnect, device number 11 [ 1159.054954][T14596] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1159.196652][T14596] bond1 (unregistering): Released all slaves [ 1159.538124][T14430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.558244][T14605] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2857'. [ 1159.843708][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1160.915946][T14624] kAFS: unable to lookup cell 's‡zì' [ 1162.527361][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'. [ 1162.616758][T14430] veth0_vlan: entered promiscuous mode [ 1162.645152][T14430] veth1_vlan: entered promiscuous mode [ 1162.710983][T14430] veth0_macvtap: entered promiscuous mode [ 1162.734529][T14430] veth1_macvtap: entered promiscuous mode [ 1162.752762][T14456] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1162.785898][T14430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.818562][T14430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.859210][ T1529] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.859845][ T1529] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.901271][ T1529] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.903603][ T1529] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.923188][T14456] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.923217][T14456] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1162.924813][T14456] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1162.924841][T14456] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1162.924862][T14456] usb 9-1: SerialNumber: syz [ 1162.979893][ T9435] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1163.007568][T14456] usb 9-1: 0:2 : does not exist [ 1163.122763][ T9435] usb 4-1: Using ep0 maxpacket: 16 [ 1163.128391][ T9435] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1163.128423][ T9435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.128442][ T9435] usb 4-1: Product: syz [ 1163.128456][ T9435] usb 4-1: Manufacturer: syz [ 1163.128472][ T9435] usb 4-1: SerialNumber: syz [ 1163.171435][ T9435] usb 4-1: config 0 descriptor?? [ 1163.191554][ T9435] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1163.218461][T13541] usb 9-1: USB disconnect, device number 2 [ 1163.619993][ T9435] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 1163.620199][ T9435] visor 4-1:0.0: probe with driver visor failed with error -71 [ 1163.646219][ T9435] usb 4-1: USB disconnect, device number 12 [ 1163.722062][T10380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.722085][T10380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.775847][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1163.775872][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1163.843778][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.843791][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.580007][T14706] CIFS mount error: No usable UNC path provided in device string! [ 1164.580007][T14706] [ 1164.580032][T14706] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1166.853616][T14752] openvswitch: netlink: Flow key attr not present in new flow. [ 1168.478931][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1169.343817][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 1169.812088][T14837] netlink: 'syz.9.2956': attribute type 1 has an invalid length. [ 1172.628715][T14878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1172.873061][T14890] netlink: 9188 bytes leftover after parsing attributes in process `syz.7.2978'. [ 1172.895857][T14887] bond1: entered allmulticast mode [ 1173.327631][T14910] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2989'. [ 1173.449625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.660725][T14914] overlayfs: failed to resolve './file0': -2 [ 1173.662165][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.079427][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.603238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.811604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.919171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1175.087954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1175.703027][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3010'. [ 1176.373028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1176.806689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1177.748094][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.748180][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.375140][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 1178.375181][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3033'. [ 1179.368846][T15013] geneve2: entered promiscuous mode [ 1179.368878][T15013] geneve2: entered allmulticast mode [ 1179.490646][T15019] netlink: 'syz.8.3036': attribute type 5 has an invalid length. [ 1181.735664][ T5903] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1181.906174][ T5903] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1181.906207][ T5903] usb 4-1: config 0 has no interface number 0 [ 1181.906290][ T5903] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.906315][ T5903] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1181.906342][ T5903] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1181.906368][ T5903] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1181.906394][ T5903] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1181.906421][ T5903] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1181.906467][ T5903] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1181.906502][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.041623][ T5903] usb 4-1: config 0 descriptor?? [ 1182.051638][T15072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1182.051958][T15072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1182.125590][ T5903] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1183.074751][ T5903] usb 4-1: USB disconnect, device number 13 [ 1183.114643][ T5903] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1183.145131][ T44] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1183.392711][ T44] usb 8-1: Using ep0 maxpacket: 8 [ 1183.395521][ T44] usb 8-1: config index 0 descriptor too short (expected 29970, got 18) [ 1183.395551][ T44] usb 8-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 1183.395570][ T44] usb 8-1: config 0 has an invalid interface number: 187 but max is 167 [ 1183.395590][ T44] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 1183.395611][ T44] usb 8-1: config 0 has no interface number 0 [ 1183.395661][ T44] usb 8-1: config 0 interface 187 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1183.395687][ T44] usb 8-1: config 0 interface 187 has no altsetting 0 [ 1183.399729][ T44] usb 8-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1183.399759][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.399778][ T44] usb 8-1: Product: syz [ 1183.399792][ T44] usb 8-1: Manufacturer: syz [ 1183.399807][ T44] usb 8-1: SerialNumber: syz [ 1183.424856][ T44] usb 8-1: config 0 descriptor?? [ 1183.572944][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1183.745377][ T9435] usb 8-1: USB disconnect, device number 17 [ 1183.925828][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1185.105021][ T31] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1185.105056][ T31] usb 1-1: config 0 has no interface number 0 [ 1185.105127][ T31] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1185.482866][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1185.482898][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.482918][ T31] usb 1-1: Product: syz [ 1185.482934][ T31] usb 1-1: Manufacturer: syz [ 1185.482949][ T31] usb 1-1: SerialNumber: syz [ 1185.527002][ T31] usb 1-1: config 0 descriptor?? [ 1186.092773][T14482] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1186.106332][T15092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1186.513299][ T31] usb 1-1: can't set config #0, error -71 [ 1186.523661][ T31] usb 1-1: USB disconnect, device number 9 [ 1186.609326][T14482] usb 10-1: Using ep0 maxpacket: 16 [ 1186.611821][T14482] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1186.611847][T14482] usb 10-1: config 0 has no interface number 0 [ 1186.611900][T14482] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1186.621869][T14482] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1186.621908][T14482] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1186.621926][T14482] usb 10-1: Product: syz [ 1186.621939][T14482] usb 10-1: SerialNumber: syz [ 1186.635096][T14482] usb 10-1: config 0 descriptor?? [ 1186.670032][T14482] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input31 [ 1186.872508][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.878807][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.879040][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.879262][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.879496][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.879727][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.879954][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.880190][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.880419][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.880648][ C1] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.922967][ T9435] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1187.066757][ C1] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1187.111025][T14482] usb 10-1: USB disconnect, device number 2 [ 1187.125362][ T9435] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1187.125398][ T9435] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1187.125434][ T9435] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1187.128093][ T9435] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1187.128123][ T9435] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.128143][ T9435] usb 8-1: Product: syz [ 1187.128157][ T9435] usb 8-1: Manufacturer: syz [ 1187.128171][ T9435] usb 8-1: SerialNumber: syz [ 1187.208185][ T9435] usb 8-1: config 0 descriptor?? [ 1187.209149][T15126] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1187.209317][T15126] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1187.235631][ T9435] usb 8-1: ucan: probing device on interface #0 [ 1187.246606][T14482] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1188.878781][ T9435] usb 8-1: ucan: failed to retrieve device info [ 1188.878808][ T9435] usb 8-1: ucan: probe failed; try to update the device firmware [ 1189.731163][ T9435] usb 8-1: USB disconnect, device number 18 [ 1189.990987][T15148] netlink: 'syz.3.3090': attribute type 10 has an invalid length. [ 1189.991014][T15148] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1189.995200][T15148] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1189.995218][T15148] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.995254][T15148] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1193.330535][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3112'. [ 1193.473411][T15206] cgroup: release_agent respecified [ 1197.766714][T15263] 9pnet_fd: Insufficient options for proto=fd [ 1198.962968][T15279] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3148'. [ 1199.461361][T12888] Bluetooth: hci4: unexpected cc 0x0c5b length: 5 > 1 [ 1202.818102][T15349] trusted_key: encrypted_key: master key parameter '' is invalid [ 1204.047452][T15359] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1207.410464][T15425] misc userio: The device must be registered before sending interrupts [ 1209.536905][T15458] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1209.854340][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 1209.854361][ T37] audit: type=1326 audit(1761169313.948:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1209.857016][ T37] audit: type=1326 audit(1761169313.948:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1209.859168][ T37] audit: type=1326 audit(1761169313.948:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48b104d810 code=0x7ffc0000 [ 1209.860093][ T37] audit: type=1326 audit(1761169313.948:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1209.860591][ T37] audit: type=1326 audit(1761169313.948:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1209.863766][ T37] audit: type=1326 audit(1761169313.958:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1209.864218][ T37] audit: type=1326 audit(1761169313.958:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1209.999864][ T37] audit: type=1326 audit(1761169314.088:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1210.115645][ T37] audit: type=1326 audit(1761169314.208:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1210.859450][ T5903] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1210.860336][ T37] audit: type=1326 audit(1761169314.948:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15471 comm="syz.9.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48b104ebcb code=0x7ffc0000 [ 1211.015417][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 1211.031548][ T5903] usb 10-1: config 0 has an invalid interface number: 229 but max is 0 [ 1211.031580][ T5903] usb 10-1: config 0 has no interface number 0 [ 1211.146445][ T5903] usb 10-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4 [ 1211.146478][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.146498][ T5903] usb 10-1: Product: syz [ 1211.146513][ T5903] usb 10-1: Manufacturer: syz [ 1211.146528][ T5903] usb 10-1: SerialNumber: syz [ 1211.212029][ T5903] usb 10-1: config 0 descriptor?? [ 1211.223958][ T5903] usb-storage 10-1:0.229: USB Mass Storage device detected [ 1211.443255][ T9435] usb 10-1: USB disconnect, device number 3 [ 1212.379590][ T5903] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1212.542757][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 1212.545445][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.545481][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1212.545503][ T5903] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1212.545527][ T5903] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1212.545550][ T5903] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1212.547123][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1212.547158][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1212.547178][ T5903] usb 1-1: SerialNumber: syz [ 1212.671379][T15484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1212.700596][ T5903] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1212.717252][ T5903] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1212.905399][ T5903] usb 1-1: USB disconnect, device number 10 [ 1214.312707][T13541] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1214.402679][ T5903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1214.572825][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 1214.575736][ T5903] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1214.575766][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.575786][ T5903] usb 1-1: config 0 has no interface number 0 [ 1214.601469][T13541] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.606526][T13541] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1214.606556][T13541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.606575][T13541] usb 4-1: Product: syz [ 1214.606590][T13541] usb 4-1: Manufacturer: syz [ 1214.606604][T13541] usb 4-1: SerialNumber: syz [ 1214.635091][T13541] usb 4-1: config 0 descriptor?? [ 1214.640679][T13541] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 1214.640745][T13541] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 1214.668947][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1214.668983][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.669003][ T5903] usb 1-1: Product: syz [ 1214.669017][ T5903] usb 1-1: Manufacturer: syz [ 1214.669032][ T5903] usb 1-1: SerialNumber: syz [ 1214.732784][ T5903] usb 1-1: config 0 descriptor?? [ 1214.877579][T13541] usb 4-1: USB disconnect, device number 14 [ 1214.944435][ T5903] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1214.944473][ T5903] uvcvideo 1-1:0.105: No valid video chain found. [ 1214.968515][T15551] nfs: Unknown parameter 'ntext' [ 1215.157423][T13541] usb 1-1: USB disconnect, device number 11 [ 1215.375572][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1215.375597][ T37] audit: type=1107 audit(1761169319.448:601): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1216.701434][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3281'. [ 1216.773941][T15583] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1218.741419][ T37] audit: type=1326 audit(1761169322.828:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15621 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1218.741484][ T37] audit: type=1326 audit(1761169322.828:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15621 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1218.741808][ T37] audit: type=1326 audit(1761169322.828:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15621 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1218.742119][ T37] audit: type=1326 audit(1761169322.828:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15621 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1218.839002][ T37] audit: type=1326 audit(1761169322.828:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15621 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b104efc9 code=0x7ffc0000 [ 1219.221541][T15634] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1219.565902][T15644] program syz.7.3307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1219.776144][T15655] lo: MTU too low for tipc bearer [ 1219.776190][T15655] tipc: Enabling of bearer rejected, failed to enable media [ 1219.835005][T14456] IPVS: starting estimator thread 0... [ 1219.972799][T15658] IPVS: using max 6 ests per chain, 14400 per kthread [ 1221.849217][T15687] ptrace attach of "./syz-executor exec"[14377] was attempted by ""[15687] [ 1221.852705][ T31] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1221.925626][T15691] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3327'. [ 1221.925651][T15691] tipc: Invalid UDP bearer configuration [ 1221.925702][T15691] tipc: Enabling of bearer rejected, failed to enable media [ 1222.096524][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1222.233017][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 1222.881634][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.881671][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.881694][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1222.881739][ T31] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1222.881764][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.963113][ T31] usb 8-1: config 0 descriptor?? [ 1223.654251][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654292][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654311][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654333][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654357][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654381][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654407][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654432][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654455][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.654479][ T31] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1223.756126][ T31] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1223.756161][ T31] microsoft 0003:045E:07DA.0017: no inputs found [ 1223.756175][ T31] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 1223.820097][ T9435] usb 8-1: USB disconnect, device number 19 [ 1224.320669][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1224.382769][ T44] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1224.538655][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.538685][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.538719][ T44] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1224.538740][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.587061][ T44] usb 9-1: config 0 descriptor?? [ 1224.673039][ T5903] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1224.838662][ T5903] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1224.838694][ T5903] usb 4-1: config 0 has no interface number 0 [ 1224.838755][ T5903] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1224.838780][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.859183][ T5903] usb 4-1: config 0 descriptor?? [ 1224.870504][ T5903] usb 4-1: selecting invalid altsetting 1 [ 1224.895486][ T5903] dvb_ttusb_budget: ttusb_init_controller: error [ 1224.895511][ T5903] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1226.005765][ T5903] DVB: Unable to find symbol cx22700_attach() [ 1226.173808][ T5903] DVB: Unable to find symbol tda10046_attach() [ 1226.173825][ T5903] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1226.196423][ T5903] usb 4-1: USB disconnect, device number 15 [ 1226.304415][ T44] hid-led 0003:27B8:01ED.0018: probe with driver hid-led failed with error -71 [ 1226.349101][ T44] usb 9-1: USB disconnect, device number 3 [ 1226.486850][T15752] binder: 15751:15752 ioctl 400c620e 200000000000 returned -22 [ 1229.863233][T15798] netlink: 'syz.7.3370': attribute type 1 has an invalid length. [ 1230.333034][T14456] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1231.132806][T14456] usb 1-1: Using ep0 maxpacket: 16 [ 1231.139418][T14456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.139455][T14456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.139478][T14456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.141045][T14456] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1231.141072][T14456] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1231.141093][T14456] usb 1-1: Manufacturer: syz [ 1231.311988][T14456] usb 1-1: config 0 descriptor?? [ 1231.757715][T14456] playstation 0003:054C:0DF2.0019: item fetching failed at offset 4/5 [ 1231.758700][T14456] playstation 0003:054C:0DF2.0019: Parse failed [ 1231.758778][T14456] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 1232.544243][ T9435] usb 1-1: USB disconnect, device number 12 [ 1232.754400][T15833] netlink: 'syz.3.3383': attribute type 1 has an invalid length. [ 1233.274116][ T44] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1233.358635][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1233.358854][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1233.366216][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1233.366455][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1233.431187][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.431205][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.431224][ T44] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1233.431234][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.434824][ T44] usb 10-1: config 0 descriptor?? [ 1233.656222][T13541] libceph: connect (1)[c::]:6789 error -101 [ 1233.656401][T13541] libceph: mon0 (1)[c::]:6789 connect error [ 1233.666362][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1233.831521][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1233.848916][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1233.848984][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.848996][ T31] usb 4-1: Product: syz [ 1233.849004][ T31] usb 4-1: Manufacturer: syz [ 1233.849016][ T31] usb 4-1: SerialNumber: syz [ 1233.885739][ T44] hid_parser_main: 24 callbacks suppressed [ 1233.885771][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.885802][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.885880][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.885904][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.885926][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.885949][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.885971][ T44] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x0 [ 1233.915553][ T44] konepure 0003:1E7D:2DBE.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.9-1/input0 [ 1233.926420][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1233.926446][ T31] r8152-cfgselector 4-1: config 0 descriptor?? [ 1234.116827][ T5903] usb 10-1: USB disconnect, device number 4 [ 1234.163273][ T31] r8152-cfgselector 4-1: Needed 1 retries to read version [ 1234.163330][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1234.163918][ T31] r8152-cfgselector 4-1: bad CDC descriptors [ 1234.183349][T15851] ceph: No mds server is up or the cluster is laggy [ 1234.187701][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1234.187912][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1234.435127][ T31] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 1234.628562][T15865] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1235.241561][T15882] tipc: Started in network mode [ 1235.241596][T15882] tipc: Node identity ac141427, cluster identity 4711 [ 1235.286577][T15882] tipc: Enabled bearer , priority 10 [ 1235.587382][T15900] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1235.587451][T15900] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1235.587634][T15900] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1235.587789][T15900] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1235.587846][T15900] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1235.587903][T15900] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1235.588015][T15900] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 1235.588080][T15900] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1235.588136][T15900] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1235.588191][T15900] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1235.588313][T15900] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1235.590807][T15900] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1235.590866][T15900] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1235.591103][T15900] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1235.591161][T15900] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1235.591218][T15900] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1235.591271][T15900] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1235.591327][T15900] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1235.591381][T15900] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1235.741372][T12888] Bluetooth: hci2: command 0x0406 tx timeout [ 1236.363729][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 1236.441229][T14482] tipc: Node number set to 2886997031 [ 1236.875915][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1236.968788][ T9435] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1237.052428][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 1237.056056][ T5903] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1237.056085][ T5903] usb 1-1: config 179 has no interface number 0 [ 1237.056138][ T5903] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1237.056166][ T5903] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1237.056194][ T5903] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1237.056220][ T5903] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1237.056247][ T5903] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1237.056292][ T5903] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1237.056315][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.067185][T15939] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1237.132362][ T9435] usb 9-1: Using ep0 maxpacket: 8 [ 1237.138325][ T9435] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1237.142284][ T9435] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1237.196598][ T9435] usb 9-1: string descriptor 0 read error: -22 [ 1237.197084][ T9435] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1237.197251][ T9435] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.390950][ T9435] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1237.481594][ T9435] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1237.487715][ T9435] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1237.488189][ T9435] usb 9-1: media controller created [ 1237.721523][ T9435] dvbdev: dv[ 1237.721523][ T9435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1237.737460][ T44] usb 1-1: USB disconnect, device number 13 [ 1237.737519][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1237.737658][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1238.128710][ C0] ================================================================== [ 1238.128731][ C0] BUG: KASAN: slab-use-after-free in __wake_up_common_lock+0x94/0x1e0 [ 1238.128920][ C0] Read of size 8 at addr ffff8880605410d8 by task ktimers/0/16 [ 1238.128939][ C0] [ 1238.128960][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1238.128986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1238.128998][ C0] Call Trace: [ 1238.129007][ C0] [ 1238.129017][ C0] dump_stack_lvl+0x189/0x250 [ 1238.129082][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1238.129131][ C0] ? rcu_is_watching+0x15/0xb0 [ 1238.129177][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.129208][ C0] ? rcu_is_watching+0x15/0xb0 [ 1238.129227][ C0] ? lock_release+0x4b/0x3e0 [ 1238.129253][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1238.129383][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1238.129413][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1238.129444][ C0] print_report+0xca/0x240 [ 1238.129473][ C0] ? __wake_up_common_lock+0x94/0x1e0 [ 1238.129499][ C0] kasan_report+0x118/0x150 [ 1238.129567][ C0] ? __wake_up_common_lock+0x94/0x1e0 [ 1238.129598][ C0] __wake_up_common_lock+0x94/0x1e0 [ 1238.129627][ C0] __usb_hcd_giveback_urb+0x41a/0x5e0 [ 1238.129723][ C0] dummy_timer+0x8a0/0x4610 [ 1238.129809][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1238.129847][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.129895][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1238.129923][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1238.129946][ C0] __hrtimer_run_queues+0x552/0xd40 [ 1238.129996][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1238.130026][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1238.130058][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1238.130080][ C0] handle_softirqs+0x22f/0x710 [ 1238.130122][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1238.130152][ C0] run_ktimerd+0xcf/0x190 [ 1238.130180][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1238.130206][ C0] ? schedule+0x91/0x360 [ 1238.130234][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1238.130269][ C0] smpboot_thread_fn+0x542/0xa60 [ 1238.130296][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1238.130325][ C0] kthread+0x711/0x8a0 [ 1238.130357][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1238.130383][ C0] ? __pfx_kthread+0x10/0x10 [ 1238.130411][ C0] ? rt_spin_unlock+0x150/0x200 [ 1238.130434][ C0] ? rt_spin_unlock+0x161/0x200 [ 1238.130453][ C0] ? __pfx_kthread+0x10/0x10 [ 1238.130484][ C0] ret_from_fork+0x4bc/0x870 [ 1238.130519][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1238.130547][ C0] ? __switch_to_asm+0x39/0x70 [ 1238.130568][ C0] ? __switch_to_asm+0x33/0x70 [ 1238.130589][ C0] ? __pfx_kthread+0x10/0x10 [ 1238.130618][ C0] ret_from_fork_asm+0x1a/0x30 [ 1238.130649][ C0] [ 1238.130657][ C0] [ 1238.130662][ C0] Allocated by task 5903: [ 1238.130673][ C0] kasan_save_track+0x3e/0x80 [ 1238.130697][ C0] __kasan_kmalloc+0x93/0xb0 [ 1238.130719][ C0] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 1238.130744][ C0] xpad_probe+0x428/0x1fd0 [ 1238.130812][ C0] usb_probe_interface+0x668/0xc30 [ 1238.130856][ C0] really_probe+0x26d/0x9e0 [ 1238.130944][ C0] __driver_probe_device+0x18c/0x2f0 [ 1238.130977][ C0] driver_probe_device+0x4f/0x430 [ 1238.131002][ C0] __device_attach_driver+0x2ce/0x530 [ 1238.131029][ C0] bus_for_each_drv+0x254/0x2e0 [ 1238.131048][ C0] __device_attach+0x2bb/0x400 [ 1238.131072][ C0] bus_probe_device+0x188/0x260 [ 1238.131090][ C0] device_add+0x7b6/0xb50 [ 1238.131135][ C0] usb_set_configuration+0x1a87/0x20e0 [ 1238.131155][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1238.131198][ C0] usb_probe_device+0x1c4/0x390 [ 1238.131219][ C0] really_probe+0x26d/0x9e0 [ 1238.131244][ C0] __driver_probe_device+0x18c/0x2f0 [ 1238.131269][ C0] driver_probe_device+0x4f/0x430 [ 1238.131295][ C0] __device_attach_driver+0x2ce/0x530 [ 1238.131321][ C0] bus_for_each_drv+0x254/0x2e0 [ 1238.131340][ C0] __device_attach+0x2bb/0x400 [ 1238.131363][ C0] bus_probe_device+0x188/0x260 [ 1238.131382][ C0] device_add+0x7b6/0xb50 [ 1238.131403][ C0] usb_new_device+0xa29/0x16e0 [ 1238.131452][ C0] hub_event+0x2958/0x4a20 [ 1238.131471][ C0] process_scheduled_works+0xae1/0x17b0 [ 1238.131494][ C0] worker_thread+0x8a0/0xda0 [ 1238.131517][ C0] kthread+0x711/0x8a0 [ 1238.131542][ C0] ret_from_fork+0x4bc/0x870 [ 1238.131563][ C0] ret_from_fork_asm+0x1a/0x30 [ 1238.131582][ C0] [ 1238.131587][ C0] Freed by task 44: [ 1238.131597][ C0] kasan_save_track+0x3e/0x80 [ 1238.131620][ C0] __kasan_save_free_info+0x46/0x50 [ 1238.131639][ C0] __kasan_slab_free+0x5c/0x80 [ 1238.131663][ C0] kfree+0x197/0x950 [ 1238.131683][ C0] xpad_disconnect+0x350/0x480 [ 1238.131700][ C0] usb_unbind_interface+0x26e/0x910 [ 1238.131720][ C0] device_release_driver_internal+0x4d9/0x800 [ 1238.131746][ C0] bus_remove_device+0x355/0x420 [ 1238.131765][ C0] device_del+0x515/0x8e0 [ 1238.131788][ C0] usb_disable_device+0x3e9/0x8a0 [ 1238.131806][ C0] usb_disconnect+0x316/0x940 [ 1238.131832][ C0] hub_event+0x1cf5/0x4a20 [ 1238.131851][ C0] process_scheduled_works+0xae1/0x17b0 [ 1238.131873][ C0] worker_thread+0x8a0/0xda0 [ 1238.131896][ C0] kthread+0x711/0x8a0 [ 1238.131921][ C0] ret_from_fork+0x4bc/0x870 [ 1238.131942][ C0] ret_from_fork_asm+0x1a/0x30 [ 1238.131970][ C0] [ 1238.131975][ C0] The buggy address belongs to the object at ffff888060541000 [ 1238.131975][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1238.131993][ C0] The buggy address is located 216 bytes inside of [ 1238.131993][ C0] freed 1024-byte region [ffff888060541000, ffff888060541400) [ 1238.132015][ C0] [ 1238.132020][ C0] The buggy address belongs to the physical page: [ 1238.132031][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60540 [ 1238.132051][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1238.132069][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 1238.132086][ C0] page_type: f5(slab) [ 1238.132105][ C0] raw: 0080000000000040 ffff88813ff26dc0 dead000000000100 dead000000000122 [ 1238.132123][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1238.132141][ C0] head: 0080000000000040 ffff88813ff26dc0 dead000000000100 dead000000000122 [ 1238.132159][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1238.132177][ C0] head: 0080000000000003 ffffea0001815001 00000000ffffffff 00000000ffffffff [ 1238.132195][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1238.132205][ C0] page dumped because: kasan: bad access detected [ 1238.132217][ C0] page_owner tracks the page as allocated [ 1238.132224][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 29, tgid 29 (ktimers/1), ts 267922534219, free_ts 267696195440 [ 1238.132259][ C0] post_alloc_hook+0x240/0x2a0 [ 1238.132284][ C0] get_page_from_freelist+0x28c0/0x2960 [ 1238.132314][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1238.132343][ C0] alloc_pages_mpol+0xd1/0x380 [ 1238.132370][ C0] allocate_slab+0x96/0x3a0 [ 1238.132389][ C0] ___slab_alloc+0xb12/0x13f0 [ 1238.132406][ C0] __slab_alloc+0xc6/0x1f0 [ 1238.132422][ C0] __kmalloc_noprof+0x14b/0x7d0 [ 1238.132446][ C0] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 1238.132537][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 1238.132595][ C0] cfg80211_inform_single_bss_data+0xd24/0x1ab0 [ 1238.132640][ C0] cfg80211_inform_bss_data+0x203/0x3b40 [ 1238.132684][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 1238.132702][ C0] ieee80211_bss_info_update+0x749/0x9e0 [ 1238.132721][ C0] ieee80211_scan_rx+0x593/0xa20 [ 1238.132739][ C0] ieee80211_rx_list+0x212b/0x2bc0 [ 1238.132781][ C0] page last free pid 9068 tgid 9068 stack trace: [ 1238.132794][ C0] __free_frozen_pages+0xfb6/0x1140 [ 1238.132820][ C0] __put_partials+0x149/0x170 [ 1238.132837][ C0] __slab_free+0x29e/0x370 [ 1238.132856][ C0] qlist_free_all+0x97/0x140 [ 1238.132878][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1238.132901][ C0] __kasan_slab_alloc+0x22/0x80 [ 1238.132925][ C0] kmem_cache_alloc_noprof+0x181/0x6b0 [ 1238.132956][ C0] vm_area_alloc+0x24/0x140 [ 1238.132993][ C0] do_brk_flags+0x33c/0xbb0 [ 1238.133013][ C0] __se_sys_brk+0x9ab/0xb80 [ 1238.133035][ C0] do_syscall_64+0xfa/0xfa0 [ 1238.133081][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.133126][ C0] [ 1238.133131][ C0] Memory state around the buggy address: [ 1238.133142][ C0] ffff888060540f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1238.133156][ C0] ffff888060541000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.133169][ C0] >ffff888060541080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.133179][ C0] ^ [ 1238.133191][ C0] ffff888060541100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.133204][ C0] ffff888060541180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.133214][ C0] ================================================================== [ 1238.133322][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1238.133339][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1238.133362][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1238.133374][ C0] Call Trace: [ 1238.133382][ C0] [ 1238.133390][ C0] dump_stack_lvl+0x99/0x250 [ 1238.133421][ C0] ? __asan_memcpy+0x40/0x70 [ 1238.133443][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.133467][ C0] ? __pfx__printk+0x10/0x10 [ 1238.133494][ C0] vpanic+0x237/0x6d0 [ 1238.133512][ C0] ? __pfx_vpanic+0x10/0x10 [ 1238.133530][ C0] ? preempt_schedule+0xae/0xc0 [ 1238.133553][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1238.133579][ C0] panic+0xb9/0xc0 [ 1238.133597][ C0] ? __pfx_panic+0x10/0x10 [ 1238.133618][ C0] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1238.133646][ C0] ? is_module_address+0x17/0xf0 [ 1238.133669][ C0] ? __wake_up_common_lock+0x94/0x1e0 [ 1238.133695][ C0] check_panic_on_warn+0x89/0xb0 [ 1238.133713][ C0] ? __wake_up_common_lock+0x94/0x1e0 [ 1238.133738][ C0] end_report+0x78/0x160 [ 1238.133765][ C0] kasan_report+0x129/0x150 [ 1238.133793][ C0] ? __wake_up_common_lock+0x94/0x1e0 [ 1238.133823][ C0] __wake_up_common_lock+0x94/0x1e0 [ 1238.133851][ C0] __usb_hcd_giveback_urb+0x41a/0x5e0 [ 1238.133880][ C0] dummy_timer+0x8a0/0x4610 [ 1238.133912][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1238.133957][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.133984][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1238.134011][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1238.134033][ C0] __hrtimer_run_queues+0x552/0xd40 [ 1238.134072][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1238.134101][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1238.134129][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 1238.134150][ C0] handle_softirqs+0x22f/0x710 [ 1238.134178][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1238.134205][ C0] run_ktimerd+0xcf/0x190 [ 1238.134232][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1238.134256][ C0] ? schedule+0x91/0x360 [ 1238.134282][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1238.134311][ C0] smpboot_thread_fn+0x542/0xa60 [ 1238.134337][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1238.134364][ C0] kthread+0x711/0x8a0 [ 1238.134390][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1238.134413][ C0] ? __pfx_kthread+0x10/0x10 [ 1238.134437][ C0] ? rt_spin_unlock+0x150/0x200 [ 1238.134458][ C0] ? rt_spin_unlock+0x161/0x200 [ 1238.134476][ C0] ? __pfx_kthread+0x10/0x10 [ 1238.134526][ C0] ret_from_fork+0x4bc/0x870 [ 1238.134552][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1238.134578][ C0] ? __switch_to_asm+0x39/0x70 [ 1238.134598][ C0] ? __switch_to_asm+0x33/0x70 [ 1238.134618][ C0] ? __pfx_kthread+0x10/0x10 [ 1238.134647][ C0] ret_from_fork_asm+0x1a/0x30 [ 1238.134676][ C0] [ 1238.135084][ C0] Kernel Offset: disabled