last executing test programs: 13.462762195s ago: executing program 2 (id=649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x9, 0x100, {{0x9, 0x4, 0x1, 0x28, 0x24, 0x67, 0x0, 0x0, 0x2b, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x31, [@remote, @loopback]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', r2, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.39171324s ago: executing program 2 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000030000"], 0x50) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) 10.60787497s ago: executing program 2 (id=659): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 9.587101126s ago: executing program 0 (id=663): fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x1, 0x2, 0x10003, 0x7}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 9.482053971s ago: executing program 1 (id=664): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 8.281418408s ago: executing program 1 (id=672): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$9p_unix(0x0, 0x0, &(0x7f0000000500), 0xa0040, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d756e69782c706f73697861636c2c616669643d307830303030303030303030303b666666662c64656275673d3078303030303030303030303030303030312c6d6d61702c006bc1df51e469b20b461e7a0ebf05002bd8b7acc95699665ec915efa0a51392a6ba0bbec6f0f74eaac6faa1af3b8dd1a9a72dc7376183ce9a4fce33544e15d54e5cf1e601852287a0b1e9db1266e747f7cad189a63722104922b7a8d017a4ce1b21e52521c3d7ac0641963508ca44cfd8887521adc089b5c64f2afc5a5829469bda907c5908b45903e11cc07b95caa5d7713f2a1fe150f94549606d55629f57ae0c40"]) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000002c0)='hfsplus\x00', 0xc4, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40) 8.130881964s ago: executing program 3 (id=673): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xaeb, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 7.420945879s ago: executing program 0 (id=677): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x22, &(0x7f00000002c0)="d5", 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = dup(r1) getsockopt$inet_int(r5, 0x0, 0xd, 0x0, &(0x7f0000000400)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) write$UHID_INPUT(r7, &(0x7f0000032680)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.396327953s ago: executing program 2 (id=678): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 4.794055292s ago: executing program 3 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000030000"], 0x50) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) 4.793234658s ago: executing program 2 (id=681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x0, 0x0}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_emit_ethernet(0x89, &(0x7f00000003c0)={@local, @local, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x4f, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x800]}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x2}}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x3, "2c624d3e6c4864c838"}}}}}}}, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{0x6}, 0x5}}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 4.33291529s ago: executing program 3 (id=683): openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0xd0, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x11, 0x80, 0xfffc, 0x0, 0x100, {[@mss={0x2, 0x4, 0xe99}, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x2d, @private=0xa010101, 0x9, "bb15cc"}, @sack={0x5, 0xe, [0xfffffffe, 0xd, 0x1]}, @exp_fastopen={0xfe, 0x4}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"09c93d3a60d55ed6ef18e211652b9c0eef294f7b4f90df9790e5c741e8bd772c550c81944a25943a64868c0ce74e5a58a0b9946ffd3eebaa7c1ed6a8310be4a88adb83a350954444167de5f87fcc0aeba13da2b10aa4738070b549a2de56ef3fa0347bc9722c15165652aa945f56f14147841faf75328b63"}}}}}}, 0x0) 4.254370412s ago: executing program 0 (id=684): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 3.8524116s ago: executing program 3 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) listen(r3, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.8391273s ago: executing program 0 (id=686): syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r1 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.749480195s ago: executing program 4 (id=687): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0xb5d6) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 3.654347291s ago: executing program 0 (id=688): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 3.606873757s ago: executing program 4 (id=689): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6) 3.464530397s ago: executing program 3 (id=690): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xaeb, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 3.218806717s ago: executing program 4 (id=691): socket(0x10, 0x80002, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.154527065s ago: executing program 1 (id=692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 2.904243017s ago: executing program 4 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000030000"], 0x50) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) 2.06332816s ago: executing program 1 (id=694): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x22, &(0x7f00000002c0)="d5", 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = dup(r1) getsockopt$inet_int(r5, 0x0, 0xd, 0x0, &(0x7f0000000400)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) write$UHID_INPUT(r7, &(0x7f0000032680)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.812240662s ago: executing program 4 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0xea000, 0x718bb647156ec3be) linkat(r1, 0x0, r1, &(0x7f0000000180)='./file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='./file0\x00') 618.583346ms ago: executing program 3 (id=696): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xaeb, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 495.847843ms ago: executing program 4 (id=697): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x5, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0xb) 136.255436ms ago: executing program 1 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x80, 0x4, 0x200022c}, 0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, 0x0, 0x1) 64.324045ms ago: executing program 2 (id=699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) shutdown(r1, 0x1) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x2, 0xfffffffd, 0x4}) 63.860074ms ago: executing program 0 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0xffffffffffffffbd) 0s ago: executing program 1 (id=701): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 78.121419][ T5791] cgroup: Unknown subsys name 'net' [ 78.362291][ T5791] cgroup: Unknown subsys name 'cpuset' [ 78.418341][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.078278][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.599359][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.603578][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.605978][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.609849][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.642504][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.644511][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.646421][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.647292][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.676754][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.680109][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.739164][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.744135][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.746158][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.761419][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.762535][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.766175][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.768001][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.768814][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.783998][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.818539][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.824438][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.844829][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.849341][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.851132][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.852178][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.597806][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 84.787796][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 84.998550][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 85.003202][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 85.023480][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 85.448854][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.449970][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.450347][ T5802] bridge_slave_0: entered allmulticast mode [ 85.452038][ T5802] bridge_slave_0: entered promiscuous mode [ 85.538287][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.538393][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.538544][ T5802] bridge_slave_1: entered allmulticast mode [ 85.540188][ T5802] bridge_slave_1: entered promiscuous mode [ 85.698480][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.698668][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.698797][ T5803] bridge_slave_0: entered allmulticast mode [ 85.700259][ T5803] bridge_slave_0: entered promiscuous mode [ 85.758946][ T5815] Bluetooth: hci1: command tx timeout [ 85.788348][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.788487][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.788677][ T5803] bridge_slave_1: entered allmulticast mode [ 85.790467][ T5803] bridge_slave_1: entered promiscuous mode [ 85.837612][ T5815] Bluetooth: hci2: command tx timeout [ 85.837619][ T5123] Bluetooth: hci0: command tx timeout [ 85.928392][ T5815] Bluetooth: hci3: command tx timeout [ 85.928442][ T5123] Bluetooth: hci4: command tx timeout [ 86.012690][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.270834][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.338427][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.338624][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.338810][ T5811] bridge_slave_0: entered allmulticast mode [ 86.340654][ T5811] bridge_slave_0: entered promiscuous mode [ 86.342108][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.342231][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.342443][ T5801] bridge_slave_0: entered allmulticast mode [ 86.344127][ T5801] bridge_slave_0: entered promiscuous mode [ 86.346987][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.347110][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.347267][ T5805] bridge_slave_0: entered allmulticast mode [ 86.351737][ T5805] bridge_slave_0: entered promiscuous mode [ 86.471502][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.471727][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.471862][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.472020][ T5811] bridge_slave_1: entered allmulticast mode [ 86.474011][ T5811] bridge_slave_1: entered promiscuous mode [ 86.475216][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.475332][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.475443][ T5805] bridge_slave_1: entered allmulticast mode [ 86.476871][ T5805] bridge_slave_1: entered promiscuous mode [ 86.518680][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.518801][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.518959][ T5801] bridge_slave_1: entered allmulticast mode [ 86.521694][ T5801] bridge_slave_1: entered promiscuous mode [ 86.611255][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.808587][ T9] cfg80211: failed to load regulatory.db [ 87.040777][ T5802] team0: Port device team_slave_0 added [ 87.380338][ T5802] team0: Port device team_slave_1 added [ 87.384215][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.388421][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.419260][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.421704][ T5803] team0: Port device team_slave_0 added [ 87.490286][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.492381][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.494441][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.496131][ T5803] team0: Port device team_slave_1 added [ 87.829336][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.829349][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.829364][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.837606][ T5815] Bluetooth: hci1: command tx timeout [ 87.917646][ T5815] Bluetooth: hci0: command tx timeout [ 87.927832][ T5815] Bluetooth: hci2: command tx timeout [ 87.997602][ T5815] Bluetooth: hci3: command tx timeout [ 88.007705][ T5815] Bluetooth: hci4: command tx timeout [ 88.159498][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.159515][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.159539][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.331330][ T5811] team0: Port device team_slave_0 added [ 88.333266][ T5805] team0: Port device team_slave_0 added [ 88.335104][ T5801] team0: Port device team_slave_0 added [ 88.335939][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.335952][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.335975][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.355055][ T5811] team0: Port device team_slave_1 added [ 88.358715][ T5805] team0: Port device team_slave_1 added [ 88.360901][ T5801] team0: Port device team_slave_1 added [ 88.363020][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.363034][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.363058][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.852122][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.852135][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.852156][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.853396][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.853410][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.853430][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.938393][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.938410][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.938442][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.941870][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.941884][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.941908][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.943364][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.943376][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.943400][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.955787][ T5802] hsr_slave_0: entered promiscuous mode [ 88.957337][ T5802] hsr_slave_1: entered promiscuous mode [ 88.961989][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.962003][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.962027][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.189723][ T5803] hsr_slave_0: entered promiscuous mode [ 89.190539][ T5803] hsr_slave_1: entered promiscuous mode [ 89.191128][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 89.191210][ T5803] Cannot create hsr debugfs directory [ 89.874454][ T5811] hsr_slave_0: entered promiscuous mode [ 89.875221][ T5811] hsr_slave_1: entered promiscuous mode [ 89.875819][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 89.875837][ T5811] Cannot create hsr debugfs directory [ 89.910564][ T5801] hsr_slave_0: entered promiscuous mode [ 89.911529][ T5801] hsr_slave_1: entered promiscuous mode [ 89.912075][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 89.912095][ T5801] Cannot create hsr debugfs directory [ 89.917172][ T5805] hsr_slave_0: entered promiscuous mode [ 89.917983][ T5815] Bluetooth: hci1: command tx timeout [ 89.949028][ T5805] hsr_slave_1: entered promiscuous mode [ 89.949994][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 89.950017][ T5805] Cannot create hsr debugfs directory [ 89.997761][ T5123] Bluetooth: hci0: command tx timeout [ 89.997852][ T5815] Bluetooth: hci2: command tx timeout [ 90.077793][ T5123] Bluetooth: hci3: command tx timeout [ 90.077886][ T5815] Bluetooth: hci4: command tx timeout [ 91.350313][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.401465][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.441433][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.496106][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.585141][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.625971][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.666061][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.714261][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.827686][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.854892][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.899018][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.952578][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.009833][ T5815] Bluetooth: hci1: command tx timeout [ 92.077843][ T5123] Bluetooth: hci0: command tx timeout [ 92.077884][ T5815] Bluetooth: hci2: command tx timeout [ 92.085191][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.128391][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.157802][ T5123] Bluetooth: hci3: command tx timeout [ 92.157848][ T5815] Bluetooth: hci4: command tx timeout [ 92.165093][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.199983][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.363456][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.404922][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.444168][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.447067][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.498380][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.595029][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.631613][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.635914][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.636672][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.692117][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.692543][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.754126][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.772747][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.796879][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.797180][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.834920][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.835456][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.882452][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.895127][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.935525][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.935645][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.985756][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.985939][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.006560][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.059398][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.059490][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.086357][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.103686][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.104031][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.231912][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.306167][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.306602][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.342245][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.342368][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.457087][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.655947][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.765156][ T5802] veth0_vlan: entered promiscuous mode [ 93.835915][ T5802] veth1_vlan: entered promiscuous mode [ 93.858897][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.951927][ T5803] veth0_vlan: entered promiscuous mode [ 93.973283][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.000069][ T5803] veth1_vlan: entered promiscuous mode [ 94.027034][ T5802] veth0_macvtap: entered promiscuous mode [ 94.054513][ T5802] veth1_macvtap: entered promiscuous mode [ 94.083312][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.122448][ T5801] veth0_vlan: entered promiscuous mode [ 94.170945][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.192993][ T5801] veth1_vlan: entered promiscuous mode [ 94.205037][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.205800][ T5803] veth0_macvtap: entered promiscuous mode [ 94.262857][ T5805] veth0_vlan: entered promiscuous mode [ 94.265185][ T5803] veth1_macvtap: entered promiscuous mode [ 94.269380][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.278476][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.283610][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.290827][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.352396][ T5805] veth1_vlan: entered promiscuous mode [ 94.440584][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.539859][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.565616][ T5801] veth0_macvtap: entered promiscuous mode [ 94.589214][ T1011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.595949][ T5801] veth1_macvtap: entered promiscuous mode [ 94.597264][ T1011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.630987][ T1011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.656898][ T1011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.730908][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.730934][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.766011][ T5805] veth0_macvtap: entered promiscuous mode [ 94.845781][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.855554][ T5805] veth1_macvtap: entered promiscuous mode [ 94.870089][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.870109][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.944889][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.024648][ T1499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.038285][ T1499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.040717][ T5811] veth0_vlan: entered promiscuous mode [ 95.041251][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.041267][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041948][ T1499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.051338][ T1499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.082519][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.116049][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.214057][ T5811] veth1_vlan: entered promiscuous mode [ 95.321492][ T1011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.338536][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.338554][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.339396][ T1011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.344582][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.444738][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.797513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.807490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.817474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.822976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.827452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.837464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.847457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.857462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.867461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.877489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.665963][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.665985][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.720236][ T5811] veth0_macvtap: entered promiscuous mode [ 97.771138][ T5811] veth1_macvtap: entered promiscuous mode [ 97.882996][ T1378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.883016][ T1378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.003133][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.021454][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.021475][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.026047][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.085460][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.123251][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.554881][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.938858][ T1548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.967060][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.967079][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.501979][ T1519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.502001][ T1519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.984708][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.984728][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.180865][ T5806] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.404740][ T5806] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.404773][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.782895][ T5806] usb 3-1: config 0 descriptor?? [ 104.825420][ T5806] cp210x 3-1:0.0: cp210x converter detected [ 105.918119][ T5806] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 105.918822][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 105.919020][ T5806] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 105.919074][ T5806] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 106.422644][ T5806] usb 3-1: cp210x converter now attached to ttyUSB0 [ 106.495320][ T37] audit: type=1326 audit(1765993138.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.1.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35c461f749 code=0x0 [ 106.627824][ T5806] usb 3-1: USB disconnect, device number 2 [ 106.789922][ T5806] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 106.791370][ T5806] cp210x 3-1:0.0: device disconnected [ 107.351524][ T5994] Zero length message leads to an empty skb [ 115.583346][ T6077] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 115.681603][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.867522][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 115.873199][ T9] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.873232][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 115.876760][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.876791][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.876811][ T9] usb 4-1: Product: syz [ 115.876826][ T9] usb 4-1: Manufacturer: syz [ 115.876839][ T9] usb 4-1: SerialNumber: syz [ 116.667213][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 116.667291][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 116.728997][ T9] usb 4-1: USB disconnect, device number 2 [ 118.309814][ T6126] mmap: syz.4.59 (6126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.432992][ T6150] Bluetooth: MGMT ver 1.23 [ 125.497179][ T6213] process 'syz.2.91' launched './file0' with NULL argv: empty string added [ 130.306833][ T6290] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.888557][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888649][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.671403][ T6351] delete_channel: no stack [ 137.684426][ T6258] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.019498][ T6258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.019534][ T6258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.019572][ T6258] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 138.019595][ T6258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.073671][ T6360] block nbd2: NBD_DISCONNECT [ 138.085483][ T6360] block nbd2: Disconnected due to user request. [ 138.085505][ T6360] block nbd2: shutting down sockets [ 138.105280][ T6258] usb 1-1: config 0 descriptor?? [ 139.145997][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 139.347977][ T6337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.439172][ T6258] usbhid 1-1:0.0: can't add hid device: -71 [ 139.439292][ T6258] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.469975][ T6258] usb 1-1: USB disconnect, device number 2 [ 147.558895][ T44] libceph: connect (1)[c::]:6789 error -101 [ 147.559683][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 147.564499][ T44] libceph: connect (1)[c::]:6789 error -101 [ 147.564693][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 147.663336][ T6427] ceph: No mds server is up or the cluster is laggy [ 148.417910][ T44] libceph: connect (1)[c::]:6789 error -101 [ 148.418083][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 148.448841][ T6441] netlink: 52 bytes leftover after parsing attributes in process `syz.1.154'. [ 148.453648][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 149.693940][ T6452] syz.0.159 (6452) used greatest stack depth: 16928 bytes left [ 150.455490][ T6457] delete_channel: no stack [ 151.742616][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 151.742821][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 151.744700][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 151.744892][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 151.831472][ T6462] ceph: No mds server is up or the cluster is laggy [ 154.583782][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.812873][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.812914][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 154.812937][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.824681][ T9] usb 2-1: config 0 descriptor?? [ 155.759659][ T6509] netlink: 52 bytes leftover after parsing attributes in process `syz.4.173'. [ 155.782740][ T9] video4linux radio48: keene_cmd_main failed (-71) [ 155.782766][ T9] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 155.853961][ T9] usb 2-1: USB disconnect, device number 2 [ 155.858922][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.173'. [ 156.823037][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'. [ 160.956886][ T6567] overlayfs: failed to resolve './file0': -2 [ 162.584185][ T6585] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 163.727996][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.317783][ T5925] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.390202][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 164.467491][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 164.470368][ T5925] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 164.470394][ T5925] usb 3-1: config 0 has no interface number 0 [ 164.470441][ T5925] usb 3-1: config 0 interface 184 has no altsetting 0 [ 164.475945][ T5925] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 164.476026][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.476054][ T5925] usb 3-1: Product: syz [ 164.476068][ T5925] usb 3-1: Manufacturer: syz [ 164.476082][ T5925] usb 3-1: SerialNumber: syz [ 164.577206][ T5925] usb 3-1: config 0 descriptor?? [ 164.619294][ T6606] overlayfs: failed to resolve './file0': -2 [ 164.642044][ T5925] smsc75xx v1.0.0 [ 164.702994][ T6607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 164.873318][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 165.341805][ T5925] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 165.341827][ T5925] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.534946][ T5925] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 165.534989][ T5925] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 165.535000][ T5925] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 165.535020][ T5925] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 165.537069][ T5925] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 165.721755][ T5925] usb 3-1: USB disconnect, device number 3 [ 166.500349][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 166.500546][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 166.541416][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 166.541622][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 166.541718][ T6617] ceph: No mds server is up or the cluster is laggy [ 166.730545][ T6575] syz.4.192 (6575): drop_caches: 2 [ 169.450286][ T5879] usb 5-1: device descriptor read/all, error -110 [ 169.658970][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.137635][ T5879] usb 5-1: device descriptor read/64, error -32 [ 171.257872][ T5879] usb usb5-port1: attempt power cycle [ 171.708549][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.728698][ T5879] usb 5-1: device descriptor read/8, error -32 [ 171.800078][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.215'. [ 171.977615][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.997946][ T5879] usb 5-1: device descriptor read/8, error -32 [ 172.098434][ T6576] raw-gadget.0 gadget.4: failed to queue disconnect event [ 172.110545][ T5879] usb usb5-port1: unable to enumerate USB device [ 177.444454][ T6704] block nbd2: NBD_DISCONNECT [ 177.476914][ T6704] block nbd2: Disconnected due to user request. [ 177.480943][ T6704] block nbd2: shutting down sockets [ 177.758278][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.762807][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 177.805278][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.915904][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.957197][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.817565][ T5963] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.099329][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 181.146082][ T5963] usb 1-1: config 252 has an invalid interface number: 213 but max is 0 [ 181.146113][ T5963] usb 1-1: config 252 has no interface number 0 [ 181.146145][ T5963] usb 1-1: config 252 interface 213 has no altsetting 0 [ 181.173129][ T5963] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 181.173159][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.173179][ T5963] usb 1-1: Product: syz [ 181.173192][ T5963] usb 1-1: Manufacturer: syz [ 181.173207][ T5963] usb 1-1: SerialNumber: syz [ 181.186396][ T6743] overlayfs: failed to resolve './file1': -2 [ 181.270644][ T5963] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 181.582769][ T5963] gspca_sn9c2028: read1 error -32 [ 181.586991][ T5963] gspca_sn9c2028: read1 error -71 [ 181.588024][ T5963] gspca_sn9c2028: read1 error -71 [ 181.588131][ T5963] sn9c2028 1-1:252.213: probe with driver sn9c2028 failed with error -71 [ 181.649697][ T5963] usb 1-1: USB disconnect, device number 3 [ 181.814119][ T1380] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.814234][ T1380] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.814256][ T1380] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.814276][ T1380] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.833323][ T6699] syz.4.231 (6699) used greatest stack depth: 14680 bytes left [ 183.279443][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 183.279631][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 183.282702][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 183.282898][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 183.316088][ T6784] ceph: No mds server is up or the cluster is laggy [ 183.377565][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 183.918291][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 183.918493][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 185.060206][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.060241][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.060279][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 185.060302][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.065517][ T9] usb 2-1: config 0 descriptor?? [ 185.585367][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 185.585469][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.654199][ T9] usb 2-1: USB disconnect, device number 3 [ 185.897767][ T6013] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.977322][ T1519] Bluetooth: (null): Too short H5 packet [ 186.261232][ T6816] comedi comedi0: pcl730: I/O port conflict (0x3,4) [ 186.757766][ T6013] usb 3-1: Using ep0 maxpacket: 16 [ 186.880046][ T6013] usb 3-1: config 252 has an invalid interface number: 213 but max is 0 [ 186.880075][ T6013] usb 3-1: config 252 has no interface number 0 [ 186.880461][ T6013] usb 3-1: config 252 interface 213 has no altsetting 0 [ 186.884688][ T6013] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 186.884717][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.884737][ T6013] usb 3-1: Product: syz [ 186.884751][ T6013] usb 3-1: Manufacturer: syz [ 186.884765][ T6013] usb 3-1: SerialNumber: syz [ 186.966083][ T6013] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 187.233560][ T6013] gspca_sn9c2028: read1 error -71 [ 187.233982][ T6013] gspca_sn9c2028: read1 error -71 [ 187.235217][ T6013] gspca_sn9c2028: read1 error -71 [ 187.235309][ T6013] sn9c2028 3-1:252.213: probe with driver sn9c2028 failed with error -71 [ 187.262779][ T6013] usb 3-1: USB disconnect, device number 4 [ 187.592784][ T6827] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.268'. [ 187.595331][ T6824] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.268'. [ 188.351839][ T6834] block nbd4: shutting down sockets [ 188.488251][ T6865] syz_tun: entered allmulticast mode [ 190.700953][ T6898] block nbd3: NBD_DISCONNECT [ 190.701093][ T6898] block nbd3: Disconnected due to user request. [ 190.701109][ T6898] block nbd3: shutting down sockets [ 190.842404][ T9] libceph: connect (1)[c::]:6789 error -101 [ 190.842598][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 190.842938][ T9] libceph: connect (1)[c::]:6789 error -101 [ 190.843103][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 190.866407][ T6905] ceph: No mds server is up or the cluster is laggy [ 193.538443][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.697523][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 193.700328][ T5879] usb 1-1: config 252 has an invalid interface number: 213 but max is 0 [ 193.700354][ T5879] usb 1-1: config 252 has no interface number 0 [ 193.700386][ T5879] usb 1-1: config 252 interface 213 has no altsetting 0 [ 193.703592][ T5879] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 193.703622][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.703641][ T5879] usb 1-1: Product: syz [ 193.703655][ T5879] usb 1-1: Manufacturer: syz [ 193.703669][ T5879] usb 1-1: SerialNumber: syz [ 193.730716][ T5879] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 193.974268][ T5879] gspca_sn9c2028: read1 error 0 [ 194.041609][ T6958] syz_tun: entered allmulticast mode [ 194.172885][ T5879] gspca_sn9c2028: read1 error -71 [ 194.173411][ T5879] gspca_sn9c2028: read1 error -71 [ 194.173498][ T5879] sn9c2028 1-1:252.213: probe with driver sn9c2028 failed with error -71 [ 194.244980][ T5879] usb 1-1: USB disconnect, device number 4 [ 194.307349][ T6961] ceph: No mds server is up or the cluster is laggy [ 194.333678][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.333755][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.471313][ T6972] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.302'. [ 194.471556][ T6970] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.302'. [ 196.985654][ T7032] ceph: No mds server is up or the cluster is laggy [ 197.398094][ T5963] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.037487][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 199.045791][ T5963] usb 1-1: config 252 has an invalid interface number: 213 but max is 0 [ 199.045821][ T5963] usb 1-1: config 252 has no interface number 0 [ 199.045853][ T5963] usb 1-1: config 252 interface 213 has no altsetting 0 [ 199.114985][ T5963] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 199.115017][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.115036][ T5963] usb 1-1: Product: syz [ 199.115044][ T5963] usb 1-1: Manufacturer: syz [ 199.115052][ T5963] usb 1-1: SerialNumber: syz [ 199.154041][ T5963] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 199.543732][ T5963] gspca_sn9c2028: read1 error 0 [ 199.627139][ T7064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.880630][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 199.880660][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 200.069691][ T5963] gspca_sn9c2028: read1 error -110 [ 200.070023][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 200.070499][ T5963] gspca_sn9c2028: read1 error -32 [ 200.070593][ T5963] sn9c2028 1-1:252.213: probe with driver sn9c2028 failed with error -32 [ 200.141855][ T5963] usb 1-1: USB disconnect, device number 5 [ 200.404390][ T7077] block nbd1: NBD_DISCONNECT [ 200.456825][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 200.457014][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 200.479505][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 200.485288][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 200.485515][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 200.485588][ T7079] ceph: No mds server is up or the cluster is laggy [ 200.623188][ T7086] block nbd1: NBD_DISCONNECT [ 200.623467][ T7086] block nbd1: Disconnected due to user request. [ 200.623485][ T7086] block nbd1: shutting down sockets [ 201.873108][ T7090] bond1: option resend_igmp: invalid value (3703) [ 201.873135][ T7090] bond1: option resend_igmp: allowed values 0 - 255 [ 202.392552][ T7090] bond1 (unregistering): Released all slaves [ 203.287782][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 203.287809][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 203.632606][ T7113] netlink: 156 bytes leftover after parsing attributes in process `syz.4.341'. [ 205.265323][ T5963] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.227548][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 206.229800][ T5963] usb 1-1: config 252 has an invalid interface number: 213 but max is 0 [ 206.229825][ T5963] usb 1-1: config 252 has no interface number 0 [ 206.229858][ T5963] usb 1-1: config 252 interface 213 has no altsetting 0 [ 206.232866][ T5963] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 206.232894][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.232914][ T5963] usb 1-1: Product: syz [ 206.232929][ T5963] usb 1-1: Manufacturer: syz [ 206.232944][ T5963] usb 1-1: SerialNumber: syz [ 206.352575][ T5963] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 206.512656][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 206.512690][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 206.764947][ T5963] gspca_sn9c2028: read1 error -71 [ 206.765365][ T5963] gspca_sn9c2028: read1 error -71 [ 206.765445][ T5963] sn9c2028 1-1:252.213: probe with driver sn9c2028 failed with error -71 [ 206.808191][ T5963] usb 1-1: USB disconnect, device number 6 [ 206.882901][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 206.882938][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 207.038420][ T7150] Bluetooth: hci2: command 0x0406 tx timeout [ 207.038726][ T7150] Bluetooth: hci4: command 0x0406 tx timeout [ 207.038836][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 210.620633][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 210.735870][ T7196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.006968][ T1246] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.177571][ T1246] usb 2-1: Using ep0 maxpacket: 16 [ 211.179962][ T1246] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.179986][ T1246] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.184386][ T1246] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.184414][ T1246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.184434][ T1246] usb 2-1: Product: syz [ 211.184449][ T1246] usb 2-1: Manufacturer: syz [ 211.184463][ T1246] usb 2-1: SerialNumber: syz [ 212.112830][ T1246] usb 2-1: 0:2 : does not exist [ 212.113137][ T1246] usb 2-1: unit 6 not found! [ 212.178880][ T1246] usb 2-1: USB disconnect, device number 4 [ 213.204731][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.351187][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.358167][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.107486][ T5951] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 217.049175][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.071758][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.198027][ T5951] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 217.198078][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 217.198120][ T5951] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 217.198142][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.223489][ T5951] usb 1-1: config 0 descriptor?? [ 217.521037][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.521567][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.755379][ T5951] usbhid 1-1:0.0: can't add hid device: -71 [ 217.755510][ T5951] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 217.801336][ T5951] usb 1-1: USB disconnect, device number 7 [ 218.554161][ T7247] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.386'. [ 218.634873][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.635085][ T7308] tipc: Started in network mode [ 218.635111][ T7308] tipc: Node identity 7f000001, cluster identity 4711 [ 218.658119][ T7308] tipc: Enabled bearer , priority 10 [ 218.659779][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.659870][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.659912][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.038800][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.414'. [ 221.096623][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.114175][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.023109][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.064077][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.467565][ T5951] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 223.651439][ T5951] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.651471][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.676108][ T5951] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.676128][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.676138][ T5951] usb 3-1: Product: syz [ 223.676146][ T5951] usb 3-1: Manufacturer: syz [ 223.676154][ T5951] usb 3-1: SerialNumber: syz [ 223.716559][ T5951] usb 3-1: config 0 descriptor?? [ 223.732491][ T5951] usb 3-1: selecting invalid altsetting 0 [ 223.813682][ T7370] syz.4.423 uses obsolete (PF_INET,SOCK_PACKET) [ 224.032585][ T5963] usb 3-1: USB disconnect, device number 5 [ 224.734881][ T5857] tipc: Node number set to 2130706433 [ 224.791529][ T6863] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.258760][ T7385] fuse: Bad value for 'group_id' [ 226.258779][ T7385] fuse: Bad value for 'group_id' [ 226.735922][ T6863] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.752554][ T6863] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.752605][ T6863] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.346847][ T7404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.436'. [ 227.534837][ T7411] netlink: 156 bytes leftover after parsing attributes in process `syz.0.437'. [ 228.085438][ T7416] bond1: option resend_igmp: invalid value (3703) [ 228.085465][ T7416] bond1: option resend_igmp: allowed values 0 - 255 [ 228.345399][ T7416] bond1 (unregistering): Released all slaves [ 228.654627][ T7417] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.431'. [ 229.439036][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.448'. [ 229.460231][ T7456] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 229.722343][ T7456] kvm: pic: level sensitive irq not supported [ 229.749746][ T7456] kvm: pic: non byte read [ 229.750586][ T7456] kvm: pic: level sensitive irq not supported [ 229.750651][ T7456] kvm: pic: non byte read [ 229.751343][ T7456] kvm: pic: level sensitive irq not supported [ 229.751592][ T7456] kvm: pic: non byte read [ 229.752024][ T7456] kvm: pic: level sensitive irq not supported [ 229.752336][ T7456] kvm: pic: non byte read [ 229.752976][ T7456] kvm: pic: level sensitive irq not supported [ 229.753036][ T7456] kvm: pic: non byte read [ 229.753465][ T7456] kvm: pic: level sensitive irq not supported [ 229.754033][ T7456] kvm: pic: non byte read [ 229.986692][ T7465] syzkaller0: entered promiscuous mode [ 229.986957][ T7465] syzkaller0: entered allmulticast mode [ 231.595399][ T7474] netlink: 156 bytes leftover after parsing attributes in process `syz.2.454'. [ 234.463007][ T7500] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 234.708298][ T7506] netlink: 'syz.4.466': attribute type 4 has an invalid length. [ 234.708316][ T7506] netlink: 17 bytes leftover after parsing attributes in process `syz.4.466'. [ 236.352852][ T7511] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.462'. [ 236.354079][ T7518] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.462'. [ 237.780621][ T7555] tipc: Started in network mode [ 237.780653][ T7555] tipc: Node identity 7f000001, cluster identity 4711 [ 237.781618][ T7555] tipc: Enabling of bearer rejected, failed to enable media [ 237.855736][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 237.855931][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 237.857167][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 237.858437][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 237.910931][ T7556] ceph: No mds server is up or the cluster is laggy [ 239.924917][ T7590] tipc: Enabling of bearer rejected, already enabled [ 243.201856][ T7619] capability: warning: `syz.2.496' uses deprecated v2 capabilities in a way that may be insecure [ 243.571104][ T7630] syz_tun: entered allmulticast mode [ 243.576954][ T7629] syz_tun: left allmulticast mode [ 243.907503][ T6258] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 244.085774][ T6258] usb 3-1: not running at top speed; connect to a high speed hub [ 244.087122][ T6258] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.087173][ T6258] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.119125][ T6258] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.119159][ T6258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.119179][ T6258] usb 3-1: Product: ᐌ [ 244.119194][ T6258] usb 3-1: Manufacturer: О [ 244.119208][ T6258] usb 3-1: SerialNumber: syz [ 247.117190][ T6258] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 247.141904][ T6258] usb 3-1: USB disconnect, device number 6 [ 255.762461][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.762569][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.243956][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 261.964506][ T7804] delete_channel: no stack [ 265.427961][ T6011] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 265.476045][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 265.604225][ T6011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.604260][ T6011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.604299][ T6011] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 265.604323][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.669125][ T6011] usb 3-1: config 0 descriptor?? [ 265.990599][ T6011] usbhid 3-1:0.0: can't add hid device: -71 [ 265.990721][ T6011] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.113568][ T6011] usb 3-1: USB disconnect, device number 7 [ 273.382797][ T7895] ======================================================= [ 273.382797][ T7895] WARNING: The mand mount option has been deprecated and [ 273.382797][ T7895] and is ignored by this kernel. Remove the mand [ 273.382797][ T7895] option from the mount to silence this warning. [ 273.382797][ T7895] ======================================================= [ 273.387089][ T7895] hfsplus: unable to find HFS+ superblock [ 274.959959][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'. [ 276.937991][ T7945] block nbd2: NBD_DISCONNECT [ 276.938588][ T7945] block nbd2: Disconnected due to user request. [ 276.938606][ T7945] block nbd2: shutting down sockets [ 281.842579][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 285.376342][ T8029] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 290.476911][ T8064] block nbd4: shutting down sockets [ 290.483156][ T5951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 290.641542][ T5951] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.641573][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.644584][ T5951] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 290.644611][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 290.644631][ T5951] usb 4-1: Product: syz [ 290.644646][ T5951] usb 4-1: Manufacturer: syz [ 290.644660][ T5951] usb 4-1: SerialNumber: syz [ 290.708936][ T5951] usb 4-1: config 0 descriptor?? [ 290.748430][ T5951] usb 4-1: selecting invalid altsetting 0 [ 291.002970][ T5951] usb 4-1: USB disconnect, device number 3 [ 291.539341][ T8085] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.642'. [ 291.539769][ T8082] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.642'. [ 293.642687][ T1246] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 293.818194][ T1246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.818230][ T1246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.818268][ T1246] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 293.818292][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.091218][ T1246] usb 1-1: config 0 descriptor?? [ 295.930397][ T1246] usbhid 1-1:0.0: can't add hid device: -71 [ 295.930533][ T1246] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 295.994905][ T1246] usb 1-1: USB disconnect, device number 8 [ 296.807709][ T6003] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 296.987531][ T6003] usb 1-1: Using ep0 maxpacket: 32 [ 296.990126][ T6003] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 296.990152][ T6003] usb 1-1: config 0 has no interface number 0 [ 296.995841][ T6003] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 296.995880][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.995912][ T6003] usb 1-1: Product: syz [ 296.995927][ T6003] usb 1-1: Manufacturer: syz [ 296.995953][ T6003] usb 1-1: SerialNumber: syz [ 297.006312][ T6003] usb 1-1: config 0 descriptor?? [ 297.039863][ T6003] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 297.277875][ T6003] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 297.313348][ T6003] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 297.854837][ T5951] usb 1-1: USB disconnect, device number 9 [ 297.929200][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 297.988356][ T5951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 298.042643][ T5951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 298.046148][ T5951] quatech2 1-1:0.51: device disconnected [ 298.507581][ T6003] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.619850][ T8204] hfsplus: unable to find HFS+ superblock [ 298.675765][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.675799][ T6003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.675836][ T6003] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 298.675858][ T6003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.681128][ T6003] usb 4-1: config 0 descriptor?? [ 299.779686][ T6003] usbhid 4-1:0.0: can't add hid device: -71 [ 299.779812][ T6003] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.795331][ T6003] usb 4-1: USB disconnect, device number 4 [ 301.484134][ T8222] bond2: option resend_igmp: invalid value (3703) [ 301.484161][ T8222] bond2: option resend_igmp: allowed values 0 - 255 [ 301.721353][ T61] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 301.732825][ T8222] bond2 (unregistering): Released all slaves [ 302.338927][ T8235] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 302.987542][ T5951] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 304.224847][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.224882][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.224922][ T5951] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 304.224946][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.282637][ T5951] usb 4-1: config 0 descriptor?? [ 305.428122][ T5951] usbhid 4-1:0.0: can't add hid device: -71 [ 305.428209][ T5951] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 305.461242][ T5951] usb 4-1: USB disconnect, device number 5 [ 305.927625][ T5951] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 306.082418][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.082451][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.082490][ T5951] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 306.082512][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.137631][ T5951] usb 4-1: config 0 descriptor?? [ 306.156971][ T6258] ------------[ cut here ]------------ [ 306.156989][ T6258] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#0: kworker/0:10/6258 [ 306.157038][ T6258] Modules linked in: [ 306.157080][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.157110][ T6258] Tainted: [L]=SOFTLOCKUP [ 306.157117][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.157132][ T6258] Workqueue: usb_hub_wq hub_event [ 306.157162][ T6258] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 306.157186][ T6258] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 306.157204][ T6258] RSP: 0018:ffffc90005a0f728 EFLAGS: 00010202 [ 306.157222][ T6258] RAX: 0000000000000002 RBX: ffff888035288000 RCX: 0000000000000000 [ 306.157237][ T6258] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 306.157252][ T6258] RBP: ffffc90005a0fa30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 306.157268][ T6258] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff88814572d000 [ 306.157284][ T6258] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff88814572b000 [ 306.157336][ T6258] FS: 0000000000000000(0000) GS:ffff888126d01000(0000) knlGS:0000000000000000 [ 306.157354][ T6258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.157369][ T6258] CR2: 00007f6ab96f7dac CR3: 00000000364aa000 CR4: 00000000003526f0 [ 306.157387][ T6258] Call Trace: [ 306.157403][ T6258] [ 306.157417][ T6258] hub_event+0x158/0x4f30 [ 306.157447][ T6258] ? __lock_acquire+0x6b6/0x2cf0 [ 306.157482][ T6258] ? look_up_lock_class+0x74/0x150 [ 306.157517][ T6258] ? __lock_acquire+0x6b6/0x2cf0 [ 306.157552][ T6258] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.157595][ T6258] ? __pfx_hub_event+0x10/0x10 [ 306.157623][ T6258] ? process_scheduled_works+0x9ef/0x1770 [ 306.157655][ T6258] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.157676][ T6258] ? process_scheduled_works+0x9ef/0x1770 [ 306.157698][ T6258] ? process_scheduled_works+0x9ef/0x1770 [ 306.157732][ T6258] process_scheduled_works+0xad1/0x1770 [ 306.157789][ T6258] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.157834][ T6258] worker_thread+0x8a0/0xda0 [ 306.157862][ T6258] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.157894][ T6258] ? __kthread_parkme+0x7b/0x200 [ 306.157932][ T6258] kthread+0x711/0x8a0 [ 306.157964][ T6258] ? __pfx_worker_thread+0x10/0x10 [ 306.157989][ T6258] ? __pfx_kthread+0x10/0x10 [ 306.158015][ T6258] ? rt_spin_unlock+0x150/0x200 [ 306.158048][ T6258] ? rt_spin_unlock+0x161/0x200 [ 306.158074][ T6258] ? __pfx_kthread+0x10/0x10 [ 306.158105][ T6258] ret_from_fork+0x599/0xb30 [ 306.158132][ T6258] ? __pfx_ret_from_fork+0x10/0x10 [ 306.158168][ T6258] ? __switch_to_asm+0x39/0x70 [ 306.158197][ T6258] ? __switch_to_asm+0x33/0x70 [ 306.158231][ T6258] ? __pfx_kthread+0x10/0x10 [ 306.158262][ T6258] ret_from_fork_asm+0x1a/0x30 [ 306.158312][ T6258] [ 306.158328][ T6258] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 306.158346][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.158374][ T6258] Tainted: [L]=SOFTLOCKUP [ 306.158381][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.158395][ T6258] Workqueue: usb_hub_wq hub_event [ 306.158419][ T6258] Call Trace: [ 306.158427][ T6258] [ 306.158436][ T6258] dump_stack_lvl+0x99/0x250 [ 306.158464][ T6258] ? __asan_memcpy+0x40/0x70 [ 306.158493][ T6258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.158521][ T6258] ? __pfx__printk+0x10/0x10 [ 306.158558][ T6258] vpanic+0x237/0x6d0 [ 306.158587][ T6258] ? __pfx_vpanic+0x10/0x10 [ 306.158613][ T6258] ? is_bpf_text_address+0x292/0x2b0 [ 306.158640][ T6258] ? is_bpf_text_address+0x26/0x2b0 [ 306.158676][ T6258] panic+0xb9/0xc0 [ 306.158717][ T6258] ? __pfx_panic+0x10/0x10 [ 306.158757][ T6258] ? ret_from_fork_asm+0x1a/0x30 [ 306.158795][ T6258] __warn+0x317/0x4b0 [ 306.158823][ T6258] ? kcov_remote_start+0x5d9/0x710 [ 306.158849][ T6258] ? kcov_remote_start+0x5d9/0x710 [ 306.158872][ T6258] __report_bug+0x288/0x500 [ 306.158906][ T6258] ? kcov_remote_start+0x5d9/0x710 [ 306.158936][ T6258] ? __pfx___report_bug+0x10/0x10 [ 306.158982][ T6258] ? rt_spin_lock+0x1c1/0x3e0 [ 306.159012][ T6258] ? kcov_remote_start+0x5d9/0x710 [ 306.159034][ T6258] report_bug+0x16a/0x220 [ 306.159066][ T6258] ? kcov_remote_start+0x5d9/0x710 [ 306.159087][ T6258] ? kcov_remote_start+0x5db/0x710 [ 306.159108][ T6258] handle_bug+0x98/0x200 [ 306.159134][ T6258] exc_invalid_op+0x1a/0x50 [ 306.159158][ T6258] asm_exc_invalid_op+0x1a/0x20 [ 306.159178][ T6258] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 306.159201][ T6258] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 2c be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 89 3a 13 09 89 c0 48 c7 c7 a0 83 b2 [ 306.159218][ T6258] RSP: 0018:ffffc90005a0f728 EFLAGS: 00010202 [ 306.159236][ T6258] RAX: 0000000000000002 RBX: ffff888035288000 RCX: 0000000000000000 [ 306.159250][ T6258] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 306.159266][ T6258] RBP: ffffc90005a0fa30 R08: ffffffff8ad5e5d1 R09: ffffffff8d5ae8c0 [ 306.159282][ T6258] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff88814572d000 [ 306.159299][ T6258] R13: dffffc0000000000 R14: 0100000000000003 R15: ffff88814572b000 [ 306.159324][ T6258] ? rt_spin_lock+0x1c1/0x3e0 [ 306.159360][ T6258] ? kcov_remote_start+0xe1/0x710 [ 306.159387][ T6258] hub_event+0x158/0x4f30 [ 306.159416][ T6258] ? __lock_acquire+0x6b6/0x2cf0 [ 306.159449][ T6258] ? look_up_lock_class+0x74/0x150 [ 306.159488][ T6258] ? __lock_acquire+0x6b6/0x2cf0 [ 306.159524][ T6258] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.159567][ T6258] ? __pfx_hub_event+0x10/0x10 [ 306.159594][ T6258] ? process_scheduled_works+0x9ef/0x1770 [ 306.159625][ T6258] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.159646][ T6258] ? process_scheduled_works+0x9ef/0x1770 [ 306.159669][ T6258] ? process_scheduled_works+0x9ef/0x1770 [ 306.159696][ T6258] process_scheduled_works+0xad1/0x1770 [ 306.159760][ T6258] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.159804][ T6258] worker_thread+0x8a0/0xda0 [ 306.159833][ T6258] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.159864][ T6258] ? __kthread_parkme+0x7b/0x200 [ 306.159900][ T6258] kthread+0x711/0x8a0 [ 306.159933][ T6258] ? __pfx_worker_thread+0x10/0x10 [ 306.159957][ T6258] ? __pfx_kthread+0x10/0x10 [ 306.159983][ T6258] ? rt_spin_unlock+0x150/0x200 [ 306.160016][ T6258] ? rt_spin_unlock+0x161/0x200 [ 306.160042][ T6258] ? __pfx_kthread+0x10/0x10 [ 306.160073][ T6258] ret_from_fork+0x599/0xb30 [ 306.160099][ T6258] ? __pfx_ret_from_fork+0x10/0x10 [ 306.160135][ T6258] ? __switch_to_asm+0x39/0x70 [ 306.160164][ T6258] ? __switch_to_asm+0x33/0x70 [ 306.160192][ T6258] ? __pfx_kthread+0x10/0x10 [ 306.160223][ T6258] ret_from_fork_asm+0x1a/0x30 [ 306.160272][ T6258] [ 306.160597][ T6258] Kernel Offset: disabled