last executing test programs: 8m20.468203949s ago: executing program 3 (id=79): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x820}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xfffffffffffffffb, 0x0, 0x0, 0x200000000008, 0x80000006}, 0x0, 0x0) 8m18.547919228s ago: executing program 3 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000140)) 8m17.374873708s ago: executing program 3 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x5) 8m16.337731044s ago: executing program 3 (id=88): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x29a7, 0x0, 0x0, 0x0) 8m11.591739816s ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 8m10.701081105s ago: executing program 3 (id=99): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0xf136}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m54.386457122s ago: executing program 32 (id=99): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0xf136}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m6.945760051s ago: executing program 0 (id=957): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f139046a23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8bf3145144f8df253f85eb6f1c853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e012533719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c024ed6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df00415312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c556059efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e3e4cd129d5f0cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9ff90400000000000000d64285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f151421ffff57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd113b1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be29010000bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6136497a622d2ca7e72e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000000000009546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f637d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65e000000002a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b31d6dbdca11ee1f4be392176707090de3fb76faa37af5e5690c6db25144fd00ae2bf40d5b353795ebf80d1457a1bb14aa1ad2cf1abf09aed6385f567be2d911b43221841518d6a6480fc7a1c99e65dea002d856facc32996d740a991667c88462ce1e0895322d07d50000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00', r0}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 2m4.499892096s ago: executing program 0 (id=963): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2m2.9558552s ago: executing program 0 (id=967): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 1m59.525776428s ago: executing program 0 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x0, 0x8000) fanotify_mark(r3, 0x1, 0x1, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 1m58.24738315s ago: executing program 0 (id=973): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1081, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 1m57.383203314s ago: executing program 0 (id=975): userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e010203010902"], 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 1m42.005740008s ago: executing program 33 (id=975): userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e010203010902"], 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 1m35.651284513s ago: executing program 5 (id=1031): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m34.358553391s ago: executing program 5 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x460, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x9, 0x0, 0x1, 0x100, 0x4, 0x2930310}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) 1m32.06841582s ago: executing program 5 (id=1040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 1m26.143999417s ago: executing program 5 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x81) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 1m24.510302976s ago: executing program 5 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m23.173746418s ago: executing program 5 (id=1059): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m5.27855045s ago: executing program 34 (id=1059): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 27.875465514s ago: executing program 1 (id=1167): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885) 26.603375531s ago: executing program 1 (id=1169): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) 25.174720351s ago: executing program 1 (id=1171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 15.235252774s ago: executing program 1 (id=1186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 14.834315849s ago: executing program 1 (id=1187): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.306257689s ago: executing program 1 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) 6.997053162s ago: executing program 35 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) 6.812988068s ago: executing program 2 (id=1202): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x2086f6, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000340)=0x6) 6.572002096s ago: executing program 4 (id=1204): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 6.37456171s ago: executing program 2 (id=1205): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x29) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 6.373792981s ago: executing program 6 (id=1206): ioperm(0x7, 0x81, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ftruncate(r0, 0x8800000) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x578410eb) sendfile(r3, r0, 0x0, 0x100000000) 5.707881971s ago: executing program 2 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 5.638899522s ago: executing program 4 (id=1209): syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x1010480, 0x0) 5.301079415s ago: executing program 6 (id=1210): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xdddd0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/88, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 4.358119205s ago: executing program 2 (id=1211): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000017c0)=""/75, 0x4b}, {&(0x7f00000018c0)=""/87, 0x57}], 0x2}, 0x100}], 0x1, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x30000000}) r3 = io_uring_setup(0x631f, &(0x7f0000000400)={0x0, 0x220b, 0x8000, 0x0, 0x30f}) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1, 0x0, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) 3.333449877s ago: executing program 6 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.332849487s ago: executing program 4 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.554769484s ago: executing program 6 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 1.156160738s ago: executing program 6 (id=1215): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) getpid() open(0x0, 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.155578251s ago: executing program 4 (id=1216): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[], 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x6, r2}, 0x14) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) 998.182323ms ago: executing program 2 (id=1217): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 997.82767ms ago: executing program 6 (id=1218): syz_open_dev$loop(&(0x7f0000000040), 0xffffffff6ffffffd, 0xa000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 909.11978ms ago: executing program 4 (id=1219): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x100000000000000, 0x0, 0x400000000, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) shutdown(r1, 0x1) 95.422582ms ago: executing program 2 (id=1220): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x19, 0x0, 0x8, 0xff, 0x48020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) 0s ago: executing program 4 (id=1221): close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000000", @ANYRES32, @ANYBLOB="000000de00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9e70617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 90.172668][ T5822] cgroup: Unknown subsys name 'net' [ 90.407364][ T5822] cgroup: Unknown subsys name 'cpuset' [ 90.462308][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.076057][ T990] cfg80211: failed to load regulatory.db [ 92.457802][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.490320][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.509520][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.513073][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.513928][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.532969][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.535504][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.539247][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.540477][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.549060][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.554158][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.581047][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.589034][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.591332][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.594545][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.595965][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.596923][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.613432][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.614736][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.616107][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.617027][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.698179][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.705389][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.706926][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.709969][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.710973][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.739481][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 97.797780][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.843493][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 97.860737][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 98.283705][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 98.633056][ T5154] Bluetooth: hci0: command tx timeout [ 98.633062][ T5843] Bluetooth: hci3: command tx timeout [ 98.633210][ T5843] Bluetooth: hci1: command tx timeout [ 98.633400][ T5837] Bluetooth: hci2: command tx timeout [ 98.791868][ T5837] Bluetooth: hci4: command tx timeout [ 98.818488][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.818648][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.819274][ T5834] bridge_slave_0: entered allmulticast mode [ 98.826692][ T5834] bridge_slave_0: entered promiscuous mode [ 99.053424][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.053584][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.053824][ T5834] bridge_slave_1: entered allmulticast mode [ 99.056908][ T5834] bridge_slave_1: entered promiscuous mode [ 99.238725][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.238861][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.239001][ T5836] bridge_slave_0: entered allmulticast mode [ 99.240955][ T5836] bridge_slave_0: entered promiscuous mode [ 99.323362][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.323537][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.324895][ T5842] bridge_slave_0: entered allmulticast mode [ 99.327848][ T5842] bridge_slave_0: entered promiscuous mode [ 99.330007][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.330147][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.330335][ T5835] bridge_slave_0: entered allmulticast mode [ 99.336246][ T5835] bridge_slave_0: entered promiscuous mode [ 99.385439][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.385590][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.385827][ T5836] bridge_slave_1: entered allmulticast mode [ 99.388902][ T5836] bridge_slave_1: entered promiscuous mode [ 99.494375][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.494526][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.494730][ T5842] bridge_slave_1: entered allmulticast mode [ 99.497400][ T5842] bridge_slave_1: entered promiscuous mode [ 99.498766][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.498860][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.498997][ T5835] bridge_slave_1: entered allmulticast mode [ 99.500958][ T5835] bridge_slave_1: entered promiscuous mode [ 99.706772][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.049208][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.204280][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.204426][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.204976][ T5844] bridge_slave_0: entered allmulticast mode [ 100.208060][ T5844] bridge_slave_0: entered promiscuous mode [ 100.225134][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.317282][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.323222][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.326169][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.326354][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.326578][ T5844] bridge_slave_1: entered allmulticast mode [ 100.329926][ T5844] bridge_slave_1: entered promiscuous mode [ 100.347003][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.457825][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.461000][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.587823][ T5834] team0: Port device team_slave_0 added [ 100.711792][ T5837] Bluetooth: hci2: command tx timeout [ 100.711832][ T5837] Bluetooth: hci1: command tx timeout [ 100.711856][ T5837] Bluetooth: hci0: command tx timeout [ 100.721856][ T5843] Bluetooth: hci3: command tx timeout [ 100.871801][ T5843] Bluetooth: hci4: command tx timeout [ 100.892384][ T5834] team0: Port device team_slave_1 added [ 101.048578][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.205178][ T5836] team0: Port device team_slave_0 added [ 101.290908][ T5842] team0: Port device team_slave_0 added [ 101.298874][ T5835] team0: Port device team_slave_0 added [ 101.303201][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.314941][ T5836] team0: Port device team_slave_1 added [ 101.387121][ T5842] team0: Port device team_slave_1 added [ 101.390180][ T5835] team0: Port device team_slave_1 added [ 101.562917][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.562932][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.562951][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.893302][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.893341][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.893370][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.087091][ T5844] team0: Port device team_slave_0 added [ 102.089572][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.089588][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.089617][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.107272][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.107289][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.107318][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.223680][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.223693][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.223713][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.226112][ T5844] team0: Port device team_slave_1 added [ 102.227114][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.227124][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.227143][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.230013][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.230028][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.230056][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.246468][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.246488][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.246519][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.625418][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.625439][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.625457][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.723596][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.723614][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.723642][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.791869][ T5840] Bluetooth: hci3: command tx timeout [ 102.791904][ T5840] Bluetooth: hci1: command tx timeout [ 102.791923][ T5840] Bluetooth: hci0: command tx timeout [ 102.792140][ T5843] Bluetooth: hci2: command tx timeout [ 102.834217][ T5834] hsr_slave_0: entered promiscuous mode [ 102.835955][ T5834] hsr_slave_1: entered promiscuous mode [ 102.953416][ T5843] Bluetooth: hci4: command tx timeout [ 103.204026][ T5836] hsr_slave_0: entered promiscuous mode [ 103.205418][ T5836] hsr_slave_1: entered promiscuous mode [ 103.206881][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 103.207004][ T5836] Cannot create hsr debugfs directory [ 103.282026][ T5842] hsr_slave_0: entered promiscuous mode [ 103.283603][ T5842] hsr_slave_1: entered promiscuous mode [ 103.284588][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 103.284614][ T5842] Cannot create hsr debugfs directory [ 103.296482][ T5835] hsr_slave_0: entered promiscuous mode [ 103.298057][ T5835] hsr_slave_1: entered promiscuous mode [ 103.299179][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 103.299207][ T5835] Cannot create hsr debugfs directory [ 103.862340][ T5844] hsr_slave_0: entered promiscuous mode [ 103.863747][ T5844] hsr_slave_1: entered promiscuous mode [ 103.864647][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 103.864671][ T5844] Cannot create hsr debugfs directory [ 104.873032][ T5843] Bluetooth: hci2: command tx timeout [ 104.873068][ T5843] Bluetooth: hci0: command tx timeout [ 104.873091][ T5843] Bluetooth: hci1: command tx timeout [ 104.873114][ T5843] Bluetooth: hci3: command tx timeout [ 105.039917][ T5837] Bluetooth: hci4: command tx timeout [ 105.285672][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.322628][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.350370][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.399047][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.536789][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.579697][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.610236][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.680716][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.852149][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.906275][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.957346][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.013807][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.207290][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.255365][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.297078][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.365649][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.579374][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.579715][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.640074][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.682902][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.740240][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.845366][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.913856][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.918101][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.918762][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.978917][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.979091][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.059403][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.087304][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.123843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.124085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.178602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.178726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.250170][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.312629][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.312864][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.350787][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.387865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.388058][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.546035][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.585356][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.620465][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.621238][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.702248][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.702403][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.776945][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.859039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.859223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.928232][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.928490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.045233][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.308615][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.462793][ T5834] veth0_vlan: entered promiscuous mode [ 108.546077][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.549665][ T5834] veth1_vlan: entered promiscuous mode [ 108.766069][ T5836] veth0_vlan: entered promiscuous mode [ 108.834056][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.837632][ T5836] veth1_vlan: entered promiscuous mode [ 108.883096][ T5834] veth0_macvtap: entered promiscuous mode [ 108.954193][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.956676][ T5834] veth1_macvtap: entered promiscuous mode [ 109.007210][ T5842] veth0_vlan: entered promiscuous mode [ 109.088762][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.099985][ T5842] veth1_vlan: entered promiscuous mode [ 109.177169][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.182747][ T5836] veth0_macvtap: entered promiscuous mode [ 109.268623][ T5836] veth1_macvtap: entered promiscuous mode [ 109.274906][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.304881][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.310291][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.327470][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.424553][ T5844] veth0_vlan: entered promiscuous mode [ 109.504446][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.594955][ T5842] veth0_macvtap: entered promiscuous mode [ 109.607660][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.619023][ T5844] veth1_vlan: entered promiscuous mode [ 109.667591][ T5842] veth1_macvtap: entered promiscuous mode [ 109.685672][ T3117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.715468][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.731217][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.750781][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.882791][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.882820][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.918597][ T5835] veth0_vlan: entered promiscuous mode [ 109.980098][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.112957][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.142584][ T5835] veth1_vlan: entered promiscuous mode [ 110.146749][ T5844] veth0_macvtap: entered promiscuous mode [ 110.198597][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.198618][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.237942][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.239102][ T5844] veth1_macvtap: entered promiscuous mode [ 110.267571][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.283666][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.283688][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.286020][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.317187][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.482539][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.482561][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.490845][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.658619][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.680248][ T5835] veth0_macvtap: entered promiscuous mode [ 110.750022][ T5835] veth1_macvtap: entered promiscuous mode [ 110.757447][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.828710][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.830740][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.841764][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.254875][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.254898][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.355860][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.604005][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.762700][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.762717][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.906239][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.910634][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.934761][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.988281][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.451427][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.451449][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.067833][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.067859][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.151601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.387995][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.388013][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.851653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.954509][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.954531][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.761612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.745242][ T5987] lo: entered allmulticast mode [ 116.814242][ T5987] tunl0: entered allmulticast mode [ 116.887482][ T5987] gre0: entered allmulticast mode [ 117.144659][ T5987] gretap0: entered allmulticast mode [ 117.239392][ T5987] erspan0: entered allmulticast mode [ 117.304840][ T5987] ip_vti0: entered allmulticast mode [ 117.397887][ T5987] ip6_vti0: entered allmulticast mode [ 117.436476][ T5987] sit0: entered allmulticast mode [ 117.535427][ T5987] ip6tnl0: entered allmulticast mode [ 117.541187][ T5987] ip6gre0: entered allmulticast mode [ 117.612561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.808170][ T5987] syz_tun: entered allmulticast mode [ 117.896409][ T5987] ip6gretap0: entered allmulticast mode [ 117.924066][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.924931][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.926638][ T5987] bridge0: entered allmulticast mode [ 117.980945][ T5987] vcan0: entered allmulticast mode [ 118.007197][ T5987] bond0: entered allmulticast mode [ 118.007220][ T5987] bond_slave_0: entered allmulticast mode [ 118.007244][ T5987] bond_slave_1: entered allmulticast mode [ 118.105308][ T5987] team0: entered allmulticast mode [ 118.105333][ T5987] team_slave_0: entered allmulticast mode [ 118.105355][ T5987] team_slave_1: entered allmulticast mode [ 118.154168][ T5987] dummy0: entered allmulticast mode [ 118.184503][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 118.281729][ T5987] nlmon0: entered allmulticast mode [ 118.286159][ T5987] caif0: entered allmulticast mode [ 118.286836][ T5987] batadv0: entered allmulticast mode [ 118.356575][ T5987] vxcan0: entered allmulticast mode [ 118.384300][ T5987] vxcan1: entered allmulticast mode [ 118.385360][ T5987] veth0: entered allmulticast mode [ 118.485023][ T5987] veth1: entered allmulticast mode [ 118.651605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.986652][ T5987] wg0: entered allmulticast mode [ 119.341606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.631589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.731589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.791540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.791639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.461622][ T5987] wg1: entered allmulticast mode [ 120.596771][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.712089][ T5987] wg2: entered allmulticast mode [ 120.717142][ T5987] veth0_to_bridge: entered allmulticast mode [ 120.822817][ T5987] veth1_to_bridge: entered allmulticast mode [ 120.847949][ T5987] veth0_to_bond: entered allmulticast mode [ 120.890377][ T5987] veth1_to_bond: entered allmulticast mode [ 120.967454][ T5987] veth0_to_team: entered allmulticast mode [ 121.127706][ T5987] veth1_to_team: entered allmulticast mode [ 121.299151][ T5987] veth0_to_batadv: entered allmulticast mode [ 121.351129][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.352047][ T5987] batadv_slave_0: entered allmulticast mode [ 121.442870][ T5987] veth1_to_batadv: entered allmulticast mode [ 121.467956][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.468504][ T5987] batadv_slave_1: entered allmulticast mode [ 121.527049][ T5987] xfrm0: entered allmulticast mode [ 121.573068][ T5987] veth0_to_hsr: entered allmulticast mode [ 121.619296][ T5987] hsr_slave_0: entered allmulticast mode [ 121.648105][ T5987] veth1_to_hsr: entered allmulticast mode [ 121.685981][ T5987] hsr_slave_1: entered allmulticast mode [ 121.729562][ T5987] hsr0: entered allmulticast mode [ 121.779416][ T5987] veth1_virt_wifi: entered allmulticast mode [ 121.796261][ T5987] veth0_virt_wifi: entered allmulticast mode [ 121.812147][ T5987] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 121.814018][ T5987] veth1_vlan: entered allmulticast mode [ 121.838575][ T5987] veth0_vlan: entered allmulticast mode [ 121.864168][ T5987] vlan0: entered allmulticast mode [ 121.864318][ T5987] vlan1: entered allmulticast mode [ 122.063156][ T5987] macvlan0: entered allmulticast mode [ 122.148567][ T5987] macvlan1: entered allmulticast mode [ 122.190021][ T5987] ipvlan0: entered allmulticast mode [ 122.190265][ T5987] ipvlan1: entered allmulticast mode [ 122.191210][ T5987] veth1_macvtap: entered allmulticast mode [ 122.323759][ T5987] veth0_macvtap: entered allmulticast mode [ 122.459702][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17'. [ 122.459729][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 122.459762][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17'. [ 122.459900][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17'. [ 122.599268][ T5987] macvtap0: entered allmulticast mode [ 122.727710][ T5987] macsec0: entered allmulticast mode [ 122.820479][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.996376][ T6020] syz.2.17 (6020) used greatest stack depth: 15272 bytes left [ 123.036564][ T5987] geneve0: entered allmulticast mode [ 123.113891][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 123.116698][ T45] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 123.157116][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.175645][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.177493][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.181432][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.195580][ T5987] geneve1: entered allmulticast mode [ 123.231422][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.782308][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.802960][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.838401][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.840727][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 123.840757][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 123.840779][ T45] usb 5-1: SerialNumber: syz [ 123.901189][ T45] usb 5-1: config 0 descriptor?? [ 123.939519][ T45] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 123.961048][ T5987] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 124.213537][ T5987] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 124.366580][ T5987] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 124.392814][ T6022] input: syz1 as /devices/virtual/input/input6 [ 124.482861][ T5987] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 124.566346][ T5190] bcm5974 5-1:0.0: could not read from device [ 124.698704][ T45] usb 5-1: USB disconnect, device number 2 [ 124.713845][ T5190] bcm5974 5-1:0.0: could not read from device [ 125.037592][ T5987] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 125.718913][ T5987] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 125.953296][ T6024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.147349][ T3117] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.164349][ T3117] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.166392][ T3117] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.166425][ T3117] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.192787][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.381782][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 133.402996][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 133.403019][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.403033][ T9] usb 2-1: Product: syz [ 133.403043][ T9] usb 2-1: Manufacturer: syz [ 133.403054][ T9] usb 2-1: SerialNumber: syz [ 133.477016][ T9] usb 2-1: config 0 descriptor?? [ 133.514681][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 134.260463][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'. [ 134.287715][ T6079] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 136.380802][ T9] gspca_ov534_9: reg_r err -110 [ 136.621729][ T9] gspca_ov534_9: Unknown sensor 0000 [ 136.628413][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 137.042063][ T9] usb 2-1: USB disconnect, device number 2 [ 137.820738][ T38] audit: type=1326 audit(1755974091.875:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3db0f1ade9 code=0x7ffc0000 [ 137.820785][ T38] audit: type=1326 audit(1755974091.875:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3db0f1ade9 code=0x7ffc0000 [ 137.820817][ T38] audit: type=1326 audit(1755974091.875:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db0f7ebe9 code=0x7ffc0000 [ 137.820850][ T38] audit: type=1326 audit(1755974091.875:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db0f7ebe9 code=0x7ffc0000 [ 137.870719][ T38] audit: type=1326 audit(1755974091.925:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db0f7ebe9 code=0x7ffc0000 [ 137.873710][ T38] audit: type=1326 audit(1755974091.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db0f7ebe9 code=0x7ffc0000 [ 137.879310][ T38] audit: type=1326 audit(1755974091.945:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3db0f1ade9 code=0x7ffc0000 [ 137.899618][ T38] audit: type=1326 audit(1755974091.965:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db0f7ebe9 code=0x7ffc0000 [ 137.952012][ T38] audit: type=1326 audit(1755974092.025:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3db0f1ade9 code=0x7ffc0000 [ 137.956678][ T38] audit: type=1326 audit(1755974092.025:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6092 comm="syz.4.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db0f7ebe9 code=0x7ffc0000 [ 138.176717][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.176822][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.511928][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 141.117900][ T6123] evm: overlay not supported [ 146.068305][ T38] kauditd_printk_skb: 463 callbacks suppressed [ 146.068325][ T38] audit: type=1800 audit(1755974100.125:475): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.49" name="file0" dev="overlay" ino=67 res=0 errno=0 [ 151.657637][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 152.966190][ T6180] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.57'. [ 155.281757][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.491257][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 155.564594][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.564663][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 155.564687][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.642972][ T5920] usb 2-1: config 0 descriptor?? [ 155.715284][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 157.104241][ T5920] usb 2-1: USB disconnect, device number 3 [ 160.471674][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.188178][ T5823] usb 5-1: config 0 has no interfaces? [ 161.188206][ T5823] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.188223][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.221326][ T5823] usb 5-1: config 0 descriptor?? [ 161.538807][ T31] usb 5-1: USB disconnect, device number 3 [ 162.954504][ T6265] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 162.956894][ T6265] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.981769][ T6265] vhci_hcd vhci_hcd.0: Device attached [ 163.313342][ T9] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 163.544576][ T6267] vhci_hcd: connection reset by peer [ 163.597072][ T67] vhci_hcd: stop threads [ 163.598666][ T67] vhci_hcd: release socket [ 163.631544][ T67] vhci_hcd: disconnect device [ 166.405048][ T6292] netlink: 'syz.2.87': attribute type 4 has an invalid length. [ 166.461388][ T6294] netlink: 'syz.2.87': attribute type 4 has an invalid length. [ 168.674018][ T9] vhci_hcd: vhci_device speed not set [ 173.308245][ T6341] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 173.308245][ T6341] SÃȘØÈžZ§6ŸÂ' [ 175.117253][ T6369] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 175.117275][ T6369] overlayfs: missing 'lowerdir' [ 175.186144][ T6369] block nbd1: Attempted send on invalid socket [ 175.186263][ T6369] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.186717][ T6369] block nbd1: Attempted send on invalid socket [ 175.186736][ T6369] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 175.186871][ T6369] Mount JFS Failure: -5 [ 183.037262][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 183.168160][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 183.528949][ T6429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.823757][ T6429] bond1: (slave bond2): Enslaving as an active interface with an up link [ 183.889682][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 184.043918][ T6425] bond1 (unregistering): (slave bond2): Releasing backup interface [ 184.274345][ T6425] bond1 (unregistering): Released all slaves [ 188.238731][ T5920] kernel write not supported for file /cpu/0/msr (pid: 5920 comm: kworker/1:5) [ 191.435255][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.460121][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.508194][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.566330][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.568489][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.479461][ T6252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.733734][ T5843] Bluetooth: hci3: command tx timeout [ 193.831087][ T6502] ======================================================= [ 193.831087][ T6502] WARNING: The mand mount option has been deprecated and [ 193.831087][ T6502] and is ignored by this kernel. Remove the mand [ 193.831087][ T6502] option from the mount to silence this warning. [ 193.831087][ T6502] ======================================================= [ 193.833154][ T6502] tmpfs: Bad value for 'size' [ 195.109117][ T38] audit: type=1326 audit(1755974149.175:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353b2ade9 code=0x7ffc0000 [ 195.110048][ T38] audit: type=1326 audit(1755974149.175:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353b2ade9 code=0x7ffc0000 [ 195.167820][ T38] audit: type=1326 audit(1755974149.235:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353b2ade9 code=0x7ffc0000 [ 195.168467][ T38] audit: type=1326 audit(1755974149.235:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353b2ade9 code=0x7ffc0000 [ 195.168939][ T38] audit: type=1326 audit(1755974149.235:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353b8ebe9 code=0x7ffc0000 [ 195.169420][ T38] audit: type=1326 audit(1755974149.235:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353b8ebe9 code=0x7ffc0000 [ 195.170070][ T38] audit: type=1326 audit(1755974149.235:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353b8ebe9 code=0x7ffc0000 [ 195.170728][ T38] audit: type=1326 audit(1755974149.235:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353b8ebe9 code=0x7ffc0000 [ 195.378299][ T38] audit: type=1326 audit(1755974149.375:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2353b8ebe9 code=0x7ffc0000 [ 195.435699][ T38] audit: type=1326 audit(1755974149.445:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2353b2ade9 code=0x7ffc0000 [ 195.752259][ T5843] Bluetooth: hci3: command tx timeout [ 197.677378][ T6252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.844733][ T5843] Bluetooth: hci3: command tx timeout [ 199.336308][ T6252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.610543][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.610740][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.912017][ T5843] Bluetooth: hci3: command tx timeout [ 200.386891][ T6252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.858432][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 203.209335][ T6252] bridge_slave_1: left allmulticast mode [ 203.209686][ T6252] bridge_slave_1: left promiscuous mode [ 203.211466][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.281299][ T5978] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 203.833978][ T5978] usb 3-1: config 0 has no interfaces? [ 203.834007][ T5978] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.834023][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.886224][ T5978] usb 3-1: config 0 descriptor?? [ 203.888966][ T6252] bridge_slave_0: left allmulticast mode [ 203.889000][ T6252] bridge_slave_0: left promiscuous mode [ 203.889299][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.384971][ T31] usb 3-1: USB disconnect, device number 2 [ 210.071914][ T6615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.078293][ T6252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.171352][ T6252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.228591][ T6252] bond0 (unregistering): Released all slaves [ 213.388062][ T6620] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 217.131821][ T5823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 217.291706][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 217.292718][ T5823] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 217.295627][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.296777][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.297724][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.300748][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.305351][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.309556][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.430854][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.457497][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.467973][ T5823] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 217.468865][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 217.468895][ T5823] usb 1-1: SerialNumber: syz [ 217.666557][ T5823] usb 1-1: config 0 descriptor?? [ 217.729560][ T5823] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 217.888948][ T6659] input: syz1 as /devices/virtual/input/input8 [ 218.249805][ T5190] bcm5974 1-1:0.0: could not read from device [ 218.448824][ T5190] bcm5974 1-1:0.0: could not read from device [ 218.448940][ T5823] usb 1-1: USB disconnect, device number 2 [ 219.646547][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.646695][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.646941][ T6484] bridge_slave_0: entered allmulticast mode [ 219.715103][ T6484] bridge_slave_0: entered promiscuous mode [ 219.730025][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.730200][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.730445][ T6484] bridge_slave_1: entered allmulticast mode [ 219.752217][ T6484] bridge_slave_1: entered promiscuous mode [ 220.204885][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.351871][ T6252] hsr_slave_0: left promiscuous mode [ 220.401766][ T6252] hsr_slave_1: left promiscuous mode [ 220.402943][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.403032][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.474067][ T6252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.474108][ T6252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.618776][ T6252] veth1_macvtap: left promiscuous mode [ 220.619052][ T6252] veth0_macvtap: left promiscuous mode [ 220.619400][ T6252] veth1_vlan: left promiscuous mode [ 220.619763][ T6252] veth0_vlan: left promiscuous mode [ 222.158722][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 222.158767][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 222.158876][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 222.158903][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 222.982761][ T6252] team0 (unregistering): Port device team_slave_1 removed [ 223.212358][ T6252] team0 (unregistering): Port device team_slave_0 removed [ 225.527490][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.827702][ T6484] team0: Port device team_slave_0 added [ 225.840266][ T6484] team0: Port device team_slave_1 added [ 226.052855][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.052875][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.052903][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.066092][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.066113][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.066146][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.402246][ T6484] hsr_slave_0: entered promiscuous mode [ 226.404420][ T6484] hsr_slave_1: entered promiscuous mode [ 226.405247][ T6484] debugfs: 'hsr0' already exists in 'hsr' [ 226.405269][ T6484] Cannot create hsr debugfs directory [ 227.316214][ T6484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.375487][ T6484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.426676][ T6484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.473148][ T6484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.725433][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.757034][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.783879][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.784092][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.819035][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.819192][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.395047][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.895442][ T6484] veth0_vlan: entered promiscuous mode [ 228.914825][ T6484] veth1_vlan: entered promiscuous mode [ 228.965006][ T6484] veth0_macvtap: entered promiscuous mode [ 228.970993][ T6484] veth1_macvtap: entered promiscuous mode [ 229.005316][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.021994][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.046868][ T3571] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.049695][ T3571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.070483][ T3571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.082880][ T3571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.377392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.377415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.458935][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.458959][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.323629][ T6797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.264204][ T6825] input: syz0 as /devices/virtual/input/input9 [ 241.735692][ T38] kauditd_printk_skb: 381 callbacks suppressed [ 241.735712][ T38] audit: type=1326 audit(1755974195.805:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3db0f7ebe9 code=0x0 [ 241.792836][ T6849] process 'syz.4.212' launched './file0' with NULL argv: empty string added [ 243.925051][ T6870] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 245.566058][ T6901] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 245.920648][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 245.926495][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 248.882764][ T6931] syz.5.232 uses obsolete (PF_INET,SOCK_PACKET) [ 251.335850][ T6961] binder: 6960:6961 ioctl c0306201 200000001440 returned -14 [ 254.552588][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 260.950010][ T5823] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 261.064383][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.064463][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.239858][ T5823] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.452080][ T7077] tipc: Failed to remove unknown binding: 66,1,1/0:2409463260/2409463262 [ 261.453559][ T7077] tipc: Failed to remove unknown binding: 66,1,1/0:2409463260/2409463262 [ 261.453600][ T7077] tipc: Failed to remove unknown binding: 66,1,1/0:2409463260/2409463262 [ 261.571749][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.761626][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 261.944770][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 261.963760][ T5823] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 261.963802][ T5823] usb 5-1: can't read configurations, error -71 [ 262.075905][ T7096] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 262.075905][ T7096] The task syz.0.268 (7096) triggered the difference, watch for misbehavior. [ 262.181812][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 262.335204][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.335265][ T45] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.335290][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.389672][ T45] usb 3-1: config 0 descriptor?? [ 262.405799][ T45] pwc: Askey VC010 type 2 USB webcam detected. [ 262.814090][ T45] pwc: recv_control_msg error -32 req 02 val 2b00 [ 262.821611][ T45] pwc: recv_control_msg error -32 req 02 val 2700 [ 262.840019][ T45] pwc: recv_control_msg error -32 req 02 val 2c00 [ 262.849684][ T45] pwc: recv_control_msg error -32 req 04 val 1000 [ 262.850994][ T45] pwc: recv_control_msg error -32 req 04 val 1300 [ 262.885960][ T45] pwc: recv_control_msg error -32 req 04 val 1400 [ 262.887387][ T45] pwc: recv_control_msg error -32 req 02 val 2000 [ 262.890746][ T45] pwc: recv_control_msg error -32 req 02 val 2100 [ 263.239273][ T45] pwc: recv_control_msg error -71 req 02 val 2500 [ 263.258076][ T45] pwc: recv_control_msg error -71 req 02 val 2400 [ 263.259968][ T45] pwc: recv_control_msg error -71 req 02 val 2600 [ 263.276451][ T45] pwc: recv_control_msg error -71 req 02 val 2900 [ 263.278508][ T45] pwc: recv_control_msg error -71 req 02 val 2800 [ 263.279645][ T45] pwc: recv_control_msg error -71 req 04 val 1100 [ 263.281109][ T45] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.702002][ T45] pwc: Registered as video103. [ 263.867192][ T45] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 263.903738][ T45] usb 3-1: USB disconnect, device number 3 [ 264.338214][ T7116] input: syz0 as /devices/virtual/input/input11 [ 265.220776][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.5.278'. [ 265.220794][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.278'. [ 265.220807][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.5.278'. [ 265.220850][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.5.278'. [ 266.873534][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.282'. [ 267.305855][ T7147] binder: 7146:7147 ioctl c0306201 200000000080 returned -14 [ 267.329209][ T7147] binder: 7146:7147 ioctl c0306201 200000000600 returned -14 [ 267.452090][ T5919] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 267.632026][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 267.658621][ T5919] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 267.658649][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.941060][ T5919] usb 3-1: config 0 descriptor?? [ 268.646183][ T7157] ptrace attach of "./syz-executor exec"[7159] was attempted by "./syz-executor exec"[7157] [ 270.507260][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.616639][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.713026][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.891563][ T5853] usb 6-1: Using ep0 maxpacket: 16 [ 270.908213][ T5853] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 270.908303][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 270.908324][ T5853] usb 6-1: Product: syz [ 270.908338][ T5853] usb 6-1: Manufacturer: syz [ 270.908351][ T5853] usb 6-1: SerialNumber: syz [ 270.995338][ T5853] usb 6-1: config 0 descriptor?? [ 271.730133][ T5919] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 271.730163][ T5919] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 271.730805][ T5919] asix 3-1:0.0: probe with driver asix failed with error -71 [ 271.885094][ T5919] usb 3-1: USB disconnect, device number 4 [ 272.579761][ T5978] usb 6-1: USB disconnect, device number 2 [ 273.361907][ T7177] hid-generic 0000:0000:0000.0002: pid 7177 passed too short report [ 274.850660][ T38] audit: type=1800 audit(1755974228.655:868): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.296" name="bus" dev="ramfs" ino=15506 res=0 errno=0 [ 277.923408][ T7224] tmpfs: Unsupported parameter 'huge' [ 280.228403][ T7242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.860117][ T7251] kvm: kvm [7250]: vcpu2, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x62a000000f5 [ 280.860907][ T7251] kvm: kvm [7250]: vcpu2, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x62a00008ac2 [ 280.975068][ T5840] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 282.715327][ T38] audit: type=1326 audit(1755974236.785:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.5.323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8370aebe9 code=0x0 [ 285.044400][ T5840] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 285.044479][ T5840] Bluetooth: hci4: Injecting HCI hardware error event [ 285.046096][ T5840] Bluetooth: hci4: hardware error 0x00 [ 286.523789][ T7319] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 287.163635][ T38] audit: type=1800 audit(1755974241.225:870): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.337" name="/" dev="9p" ino=2 res=0 errno=0 [ 287.191704][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 287.292342][ T38] audit: type=1326 audit(1755974241.365:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7318 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8370aebe9 code=0x7fc00000 [ 288.809682][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 289.210020][ T7357] Zero length message leads to an empty skb [ 293.892734][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.312504][ T5978] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 294.481586][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 294.485432][ T5978] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 294.485449][ T5978] usb 5-1: config 0 has no interface number 0 [ 294.485547][ T5978] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.488154][ T5978] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 294.488173][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 294.488187][ T5978] usb 5-1: Product: syz [ 294.488196][ T5978] usb 5-1: SerialNumber: syz [ 294.551955][ T5978] usb 5-1: config 0 descriptor?? [ 294.616262][ T5978] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 294.661865][ T5978] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input12 [ 295.101280][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 295.101899][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.102181][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.102453][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.102706][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.102968][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.103721][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.103971][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.104213][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.104458][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.104707][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 295.382500][ T5978] usb 5-1: USB disconnect, device number 6 [ 295.382629][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 295.642878][ T5978] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 298.924670][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.962968][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.139923][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.294980][ T7439] comedi comedi2: multiq3: I/O port conflict (0xc,16) [ 300.901835][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 301.051633][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 301.054836][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 301.141620][ T5919] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 301.141666][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.141685][ T5919] usb 2-1: Product: syz [ 301.141699][ T5919] usb 2-1: Manufacturer: syz [ 301.141712][ T5919] usb 2-1: SerialNumber: syz [ 301.207162][ T5919] usb 2-1: config 0 descriptor?? [ 301.432457][ T5919] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.432500][ T5919] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 301.633700][ T7450] binder: 7449:7450 ioctl c0306201 200000004a40 returned -22 [ 301.934391][ T5919] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 302.203120][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 302.468160][ T5919] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.468205][ T5919] em28xx 2-1:0.0: board has no eeprom [ 303.233971][ T5919] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 303.233999][ T5919] em28xx 2-1:0.0: dvb set to bulk mode. [ 303.235455][ T45] em28xx 2-1:0.0: Binding DVB extension [ 303.312469][ T5919] usb 2-1: USB disconnect, device number 4 [ 303.424720][ T5919] em28xx 2-1:0.0: Disconnecting em28xx [ 303.696652][ T45] em28xx 2-1:0.0: Registering input extension [ 303.699363][ T5919] em28xx 2-1:0.0: Closing input extension [ 304.011588][ T5919] em28xx 2-1:0.0: Freeing device [ 304.120238][ T7477] wg2: entered promiscuous mode [ 304.120268][ T7477] wg2: entered allmulticast mode [ 304.402163][ T7488] capability: warning: `syz.5.385' uses deprecated v2 capabilities in a way that may be insecure [ 304.461731][ T5919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 304.623290][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 304.636833][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.636871][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.640806][ T5919] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.640838][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.640861][ T5919] usb 2-1: Product: syz [ 304.640877][ T5919] usb 2-1: Manufacturer: syz [ 304.640891][ T5919] usb 2-1: SerialNumber: syz [ 304.678450][ T5919] usb 2-1: config 0 descriptor?? [ 304.794960][ T5919] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 304.794985][ T5919] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 305.309130][ T5919] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 305.309874][ T5919] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 305.945057][ T5919] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 305.945899][ T5919] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 306.704740][ T5919] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 306.705326][ T5919] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 306.705763][ T5919] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 306.706211][ T5919] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 306.730348][ T5919] usb 2-1: USB disconnect, device number 5 [ 307.461773][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 307.611763][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 307.657761][ T5823] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 307.657794][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.657808][ T5823] usb 6-1: Product: syz [ 307.657817][ T5823] usb 6-1: Manufacturer: syz [ 307.657827][ T5823] usb 6-1: SerialNumber: syz [ 307.813725][ T5823] usb 6-1: config 0 descriptor?? [ 307.860367][ T5823] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 308.888628][ T38] audit: type=1326 audit(1755974262.955:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7526 comm="syz.2.399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cc558ebe9 code=0x0 [ 309.841731][ T5823] gspca_sonixj: reg_w1 err -71 [ 309.881743][ T5823] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 309.892518][ T5823] usb 6-1: USB disconnect, device number 3 [ 313.607266][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.557838][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 315.991850][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.266948][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.847020][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.721703][ T5978] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 317.882882][ T5978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 317.882923][ T5978] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 317.882940][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.943916][ T5978] usb 6-1: config 0 descriptor?? [ 317.944794][ T7583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.617527][ T5978] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 318.894344][ T7588] netlink: 'syz.4.415': attribute type 11 has an invalid length. [ 319.357607][ T5978] usb 6-1: USB disconnect, device number 4 [ 319.443307][ T7598] netlink: 'syz.4.418': attribute type 39 has an invalid length. [ 320.705190][ T7604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.477492][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.477572][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.573831][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 326.329269][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.440'. [ 327.364759][ T7700] JFS: charset not found [ 328.781651][ T5919] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 328.866798][ T7713] netlink: 64 bytes leftover after parsing attributes in process `syz.5.453'. [ 328.962920][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 329.486884][ T5919] usb 2-1: config 0 has no interfaces? [ 329.504427][ T5919] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 329.504447][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.504462][ T5919] usb 2-1: Product: syz [ 329.504472][ T5919] usb 2-1: Manufacturer: syz [ 329.504482][ T5919] usb 2-1: SerialNumber: syz [ 329.511091][ T5919] usb 2-1: config 0 descriptor?? [ 329.962506][ T7723] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 329.962535][ T7723] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 330.100460][ T7723] vhci_hcd vhci_hcd.0: Device attached [ 330.182237][ T5823] usb 2-1: USB disconnect, device number 6 [ 330.282897][ T9] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 330.501057][ T7724] vhci_hcd: connection reset by peer [ 330.524115][ T13] vhci_hcd: stop threads [ 330.524135][ T13] vhci_hcd: release socket [ 330.524222][ T13] vhci_hcd: disconnect device [ 333.445990][ T7765] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 333.805791][ T7784] binder: BINDER_SET_CONTEXT_MGR already set [ 333.805825][ T7784] binder: 7782:7784 ioctl 4018620d 200000000040 returned -16 [ 334.159800][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 334.553505][ T7807] sctp: [Deprecated]: syz.2.480 (pid 7807) Use of int in max_burst socket option deprecated. [ 334.553505][ T7807] Use struct sctp_assoc_value instead [ 335.441619][ T9] vhci_hcd: vhci_device speed not set [ 353.654102][ T5919] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 353.658302][ T5919] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.364380][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 367.874796][ T8003] netlink: 'syz.0.543': attribute type 4 has an invalid length. [ 367.913108][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 369.047972][ T38] audit: type=1804 audit(1755974323.115:873): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.547" name="/newroot/111/file0" dev="tmpfs" ino=618 res=1 errno=0 [ 369.793374][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 370.933302][ T8046] netlink: 'syz.0.560': attribute type 3 has an invalid length. [ 371.331565][ T5823] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 371.547862][ T5823] usb 1-1: device descriptor read/64, error -71 [ 371.785717][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 371.921606][ T5823] usb 1-1: device descriptor read/64, error -71 [ 372.042137][ T5823] usb usb1-port1: attempt power cycle [ 372.421710][ T5823] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 372.443763][ T5823] usb 1-1: device descriptor read/8, error -71 [ 372.731678][ T5823] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 372.752553][ T5823] usb 1-1: device descriptor read/8, error -71 [ 372.988558][ T5823] usb usb1-port1: unable to enumerate USB device [ 375.497710][ T8092] bridge0: entered promiscuous mode [ 375.497996][ T8092] vlan3: entered promiscuous mode [ 377.785063][ T8088] trusted_key: encrypted_key: insufficient parameters specified [ 377.955503][ T8099] o2cb: This node has not been configured. [ 377.955513][ T8099] o2cb: Cluster check failed. Fix errors before retrying. [ 377.955543][ T8099] (syz.5.575,8099,1):user_dlm_register:674 ERROR: status = -22 [ 377.955560][ T8099] (syz.5.575,8099,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 378.628209][ T8111] warning: `syz.0.580' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 381.939489][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.595'. [ 383.922384][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.922464][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.746438][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 390.566486][ T8234] kvm_intel: kvm [8233]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7fffffffffffffff [ 396.346758][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 401.582583][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.637'. [ 401.951588][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 402.111739][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 402.175576][ T45] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 402.175608][ T45] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 402.175626][ T45] usb 1-1: Product: syz [ 402.175638][ T45] usb 1-1: Manufacturer: syz [ 402.175650][ T45] usb 1-1: SerialNumber: syz [ 402.234675][ T45] usb 1-1: config 0 descriptor?? [ 402.717449][ T38] audit: type=1326 audit(1755974356.735:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8310 comm="syz.5.640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8370aebe9 code=0x0 [ 403.074406][ T5978] usb 1-1: USB disconnect, device number 7 [ 403.865602][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 403.944393][ T8323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.814995][ T8325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.815451][ T8325] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 404.817695][ T8325] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 406.112347][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 406.112375][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 406.706173][ T38] audit: type=1326 audit(1755974360.775:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8351 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8370aebe9 code=0x7fc00000 [ 406.706927][ T38] audit: type=1326 audit(1755974360.775:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8351 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8370aebe9 code=0x7fc00000 [ 407.368552][ T8361] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 407.371776][ T5919] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 407.525541][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 407.545127][ T5919] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 407.545149][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.545163][ T5919] usb 5-1: Product: syz [ 407.545173][ T5919] usb 5-1: Manufacturer: syz [ 407.545183][ T5919] usb 5-1: SerialNumber: syz [ 407.550016][ T5919] usb 5-1: config 0 descriptor?? [ 407.589719][ T5919] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 407.627462][ T8361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.792600][ T38] audit: type=1326 audit(1755974361.855:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8351 comm="syz.5.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff83704ade9 code=0x7fc00000 [ 407.910725][ T8363] vlan2: entered allmulticast mode [ 407.910789][ T8363] veth1: entered allmulticast mode [ 408.002303][ T8363] bond1: (slave vlan2): making interface the new active one [ 408.023715][ T8363] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 409.876417][ T5919] gspca_ov534_9: sccb_read failed 1 [ 410.080299][ T5919] gspca_ov534_9: reg_w failed -71 [ 410.281578][ T5919] gspca_ov534_9: Unknown sensor 0000 [ 410.281652][ T5919] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 410.284150][ T5919] usb 5-1: USB disconnect, device number 7 [ 413.640302][ T8416] netlink: 208 bytes leftover after parsing attributes in process `syz.4.671'. [ 414.720912][ T8416] syz.4.671 (8416): drop_caches: 2 [ 415.294350][ T8421] binder: BINDER_SET_CONTEXT_MGR already set [ 415.294362][ T8421] binder: 8420:8421 ioctl 4018620d 200000000080 returned -16 [ 416.561685][ T5853] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 416.721640][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 416.723691][ T5853] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 416.723710][ T5853] usb 1-1: config 0 has no interface number 0 [ 416.725420][ T5853] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 416.725438][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 416.725451][ T5853] usb 1-1: Product: syz [ 416.725461][ T5853] usb 1-1: Manufacturer: syz [ 416.793155][ T5853] usb 1-1: config 0 descriptor?? [ 417.023546][ T8429] QAT: Stopping all acceleration devices. [ 417.047436][ T9] usb 1-1: USB disconnect, device number 8 [ 417.435071][ T5978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 417.611622][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 417.614173][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.614200][ T5978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.614254][ T5978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 417.614283][ T5978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 417.614327][ T5978] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 417.614349][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.706105][ T5978] hub 5-1:1.0: bad descriptor, ignoring hub [ 417.706148][ T5978] hub 5-1:1.0: probe with driver hub failed with error -5 [ 417.707137][ T5978] cdc_wdm 5-1:1.0: skipping garbage [ 417.707153][ T5978] cdc_wdm 5-1:1.0: skipping garbage [ 417.801929][ T5978] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 417.801960][ T5978] cdc_wdm 5-1:1.0: Unknown control protocol [ 418.394829][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.395395][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.612154][ T990] usb 5-1: USB disconnect, device number 8 [ 422.386719][ T8486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.387058][ T8486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.651562][ T5919] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 422.834122][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 422.840559][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.840601][ T5919] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 422.840624][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.885489][ T5919] usb 5-1: config 0 descriptor?? [ 423.303509][ T5919] hid (null): nested delimiters [ 423.307548][ T5919] hid (null): unknown global tag 0xd [ 423.307568][ T5919] hid (null): unknown global tag 0xd [ 423.307586][ T5919] hid (null): bogus close delimiter [ 423.307705][ T5919] hid (null): unknown global tag 0xc [ 423.703140][ T5919] usb 5-1: USB disconnect, device number 9 [ 428.449695][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 436.182320][ T8577] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 436.273062][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 436.330006][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 436.335707][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.721'. [ 436.474293][ T8584] bond1: (slave veth5): Enslaving as an active interface with a down link [ 437.199373][ T8585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.336565][ T8588] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 438.683252][ T8615] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 438.995343][ T8623] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 439.333325][ T38] audit: type=1804 audit(1755974393.385:878): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.737" name="/newroot/157/file1" dev="fuse" ino=1 res=1 errno=0 [ 439.339329][ T38] audit: type=1800 audit(1755974393.405:879): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.737" name="/" dev="fuse" ino=1 res=0 errno=0 [ 439.340693][ T38] audit: type=1800 audit(1755974393.405:880): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.737" name="/" dev="fuse" ino=1 res=0 errno=0 [ 440.317361][ T8615] veth3: entered promiscuous mode [ 440.321514][ T8615] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 442.133442][ T8655] netlink: 'syz.2.743': attribute type 7 has an invalid length. [ 442.154370][ T8655] : entered promiscuous mode [ 442.906639][ T8657] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 445.364455][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.364529][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.211547][ T5978] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 450.481635][ T5978] usb 6-1: Using ep0 maxpacket: 16 [ 450.498029][ T5978] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 450.498052][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.498065][ T5978] usb 6-1: Product: syz [ 450.498075][ T5978] usb 6-1: Manufacturer: syz [ 450.498085][ T5978] usb 6-1: SerialNumber: syz [ 450.543595][ T8724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 450.577292][ T5978] usb 6-1: config 0 descriptor?? [ 451.132205][ T8725] netlink: 96 bytes leftover after parsing attributes in process `syz.4.765'. [ 451.185708][ T5978] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 451.200525][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.217148][ T5978] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 451.217254][ T5978] usb 6-1: media controller created [ 451.443984][ T8734] dtv5100: wlen = 0, aborting. [ 451.783633][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.072394][ T5978] zl10353_read_register: readreg error (reg=127, ret==0) [ 452.072441][ T5978] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 452.072462][ T5978] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 452.076949][ T5978] usb 6-1: USB disconnect, device number 5 [ 452.426959][ T5978] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 454.103663][ T38] audit: type=1800 audit(1755974408.165:881): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.771" name="/" dev="9p" ino=2 res=0 errno=0 [ 454.271635][ T5853] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 454.428733][ T5853] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.428754][ T5853] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 454.428767][ T5853] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.428803][ T5853] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 454.428822][ T5853] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 454.430741][ T5853] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.430761][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.430788][ T5853] usb 1-1: Product: syz [ 454.430798][ T5853] usb 1-1: Manufacturer: syz [ 454.533737][ T5853] cdc_wdm 1-1:1.0: skipping garbage [ 454.533759][ T5853] cdc_wdm 1-1:1.0: skipping garbage [ 454.557154][ T5853] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 454.557170][ T5853] cdc_wdm 1-1:1.0: Unknown control protocol [ 454.683683][ T8756] overlayfs: statfs failed on './file0' [ 454.731234][ T8757] overlayfs: statfs failed on './file0' [ 454.992440][ T990] usb 1-1: USB disconnect, device number 9 [ 456.878977][ T38] audit: type=1800 audit(1755974410.945:882): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.778" name="/" dev="9p" ino=2 res=0 errno=0 [ 457.404218][ T8784] overlayfs: failed to get index nlink (file1/bus, err=0) [ 461.237011][ T8821] vxcan1: entered allmulticast mode [ 467.027875][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 468.699427][ T8887] bridge0: port 3(syz_tun) entered blocking state [ 468.774602][ T8887] bridge0: port 3(syz_tun) entered disabled state [ 468.777837][ T8887] syz_tun: entered allmulticast mode [ 468.842507][ T8887] syz_tun: entered promiscuous mode [ 468.843675][ T8887] bridge0: port 3(syz_tun) entered blocking state [ 468.845999][ T8887] bridge0: port 3(syz_tun) entered forwarding state [ 468.877405][ T8896] netlink: 48 bytes leftover after parsing attributes in process `syz.5.814'. [ 468.877525][ T8896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.877538][ T8896] IPv6: NLM_F_CREATE should be set when creating new route [ 471.979310][ T5919] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 472.819660][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.819686][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.819713][ T5919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 472.819736][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.904638][ T5919] usb 1-1: config 0 descriptor?? [ 473.998711][ T8928] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 474.154916][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'. [ 474.282941][ T5919] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 474.360042][ T8932] bond3: (slave gretap1): making interface the new active one [ 474.361328][ T8932] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 474.404505][ T8936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.728308][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.828'. [ 474.728345][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.828'. [ 475.689432][ T5823] usb 1-1: USB disconnect, device number 10 [ 476.000773][ T8953] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[8953] [ 476.248825][ T8956] netlink: 'syz.5.833': attribute type 1 has an invalid length. [ 476.295472][ T8956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.436195][ T8956] bond1: (slave gretap1): making interface the new active one [ 476.453887][ T8956] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 476.529671][ T5919] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 477.300387][ T5919] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.631649][ T5853] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 478.844377][ T5853] usb 6-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 478.844435][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.844490][ T5853] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 478.844515][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.849149][ T5853] usb 6-1: config 0 descriptor?? [ 478.921952][ T5853] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 479.622676][ T5978] usb 6-1: USB disconnect, device number 6 [ 487.293969][ T38] audit: type=1326 audit(1755974441.365:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.294030][ T38] audit: type=1326 audit(1755974441.365:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.294952][ T38] audit: type=1326 audit(1755974441.365:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.295113][ T38] audit: type=1326 audit(1755974441.365:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.295669][ T38] audit: type=1326 audit(1755974441.365:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.295723][ T38] audit: type=1326 audit(1755974441.365:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.295772][ T38] audit: type=1326 audit(1755974441.365:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.295825][ T38] audit: type=1326 audit(1755974441.365:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.295953][ T38] audit: type=1326 audit(1755974441.365:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.296328][ T38] audit: type=1326 audit(1755974441.365:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9012 comm="syz.0.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47fbaebe9 code=0x7ffc0000 [ 487.755328][ T9015] overlayfs: failed to clone upperpath [ 488.093606][ T5853] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 489.071487][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 489.074214][ T5853] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 489.074237][ T5853] usb 6-1: config 0 has no interface number 0 [ 489.074285][ T5853] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid maxpacket 44603, setting to 64 [ 489.074321][ T5853] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 489.074343][ T5853] usb 6-1: config 0 interface 196 has no altsetting 0 [ 489.077596][ T5853] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 489.077622][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.077642][ T5853] usb 6-1: Product: syz [ 489.077657][ T5853] usb 6-1: Manufacturer: syz [ 489.077671][ T5853] usb 6-1: SerialNumber: syz [ 489.117571][ T5853] usb 6-1: config 0 descriptor?? [ 490.377051][ T5853] ipheth 6-1:0.196: Unable to find endpoints [ 490.405788][ T5853] usb 6-1: USB disconnect, device number 7 [ 496.391698][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 496.546284][ T45] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 496.546306][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.546320][ T45] usb 6-1: Product: syz [ 496.546415][ T45] usb 6-1: Manufacturer: syz [ 496.546431][ T45] usb 6-1: SerialNumber: syz [ 496.550459][ T45] usb 6-1: config 0 descriptor?? [ 496.575661][ T45] upd78f0730 6-1:0.0: upd78f0730 converter detected [ 496.673112][ T45] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 496.774615][ T45] usb 6-1: USB disconnect, device number 8 [ 496.788538][ T45] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 496.790151][ T45] upd78f0730 6-1:0.0: device disconnected [ 497.078874][ T9087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 498.846529][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044196800: rx timeout, send abort [ 499.313416][ T9103] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 499.348800][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044196800: abort rx timeout. Force session deactivation [ 501.401569][ T990] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 501.441538][ T5823] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 501.579079][ T990] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 501.579101][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.607938][ T5823] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 501.607960][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.607974][ T5823] usb 2-1: Product: syz [ 501.607984][ T5823] usb 2-1: Manufacturer: syz [ 501.607994][ T5823] usb 2-1: SerialNumber: syz [ 501.657155][ T5823] usb 2-1: config 0 descriptor?? [ 501.669130][ T990] usb 6-1: config 0 descriptor?? [ 501.698620][ T990] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 501.870877][ T5823] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 503.391919][ T5823] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 503.395463][ T5823] usb 2-1: USB disconnect, device number 7 [ 503.796618][ T990] usb 6-1: USB disconnect, device number 9 [ 504.404779][ T9131] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.885'. [ 507.041999][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.042058][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.507433][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 508.254887][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 508.294413][ T9153] bridge_slave_1: left allmulticast mode [ 508.294440][ T9153] bridge_slave_1: left promiscuous mode [ 508.299301][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.401659][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 508.404085][ T45] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 508.404105][ T45] usb 2-1: config 0 has no interface number 0 [ 508.404130][ T45] usb 2-1: config 0 interface 199 has no altsetting 0 [ 508.569391][ T45] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 508.569415][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.569429][ T45] usb 2-1: Product: syz [ 508.569439][ T45] usb 2-1: Manufacturer: syz [ 508.569450][ T45] usb 2-1: SerialNumber: syz [ 508.598988][ T45] usb 2-1: config 0 descriptor?? [ 508.844990][ T9153] bridge_slave_0: left allmulticast mode [ 508.848429][ T9153] bridge_slave_0: left promiscuous mode [ 508.849712][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.885618][ T45] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 509.118279][ T45] gspca_stk1135: reg_w 0x0 err -71 [ 509.119334][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119345][ T45] gspca_stk1135: Sensor write failed [ 509.119370][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119376][ T45] gspca_stk1135: Sensor write failed [ 509.119405][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119411][ T45] gspca_stk1135: Sensor read failed [ 509.119436][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119443][ T45] gspca_stk1135: Sensor read failed [ 509.119447][ T45] gspca_stk1135: Detected sensor type unknown (0x0) [ 509.119475][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119482][ T45] gspca_stk1135: Sensor read failed [ 509.119506][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119513][ T45] gspca_stk1135: Sensor read failed [ 509.119542][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119549][ T45] gspca_stk1135: Sensor write failed [ 509.119574][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 509.119580][ T45] gspca_stk1135: Sensor write failed [ 509.119649][ T45] stk1135 2-1:0.199: probe with driver stk1135 failed with error -71 [ 509.315986][ T45] usb 2-1: USB disconnect, device number 8 [ 514.370685][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.903'. [ 515.383499][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 523.009784][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 523.009804][ T38] audit: type=1800 audit(1755974483.076:906): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.926" name="file1" dev="tmpfs" ino=1060 res=0 errno=0 [ 529.992024][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 539.138482][ T9397] tipc: Started in network mode [ 539.138518][ T9397] tipc: Node identity 7f000001, cluster identity 4711 [ 539.146457][ T9397] tipc: Enabled bearer , priority 10 [ 539.173256][ T9397] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 539.218913][ T9397] tipc: Enabled bearer , priority 10 [ 540.972017][ T990] tipc: Node number set to 2130706433 [ 544.560010][ T9433] random: crng reseeded on system resumption [ 546.916529][ T990] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 547.451518][ T990] usb 1-1: config 0 has no interfaces? [ 547.463925][ T990] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 547.463956][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.463977][ T990] usb 1-1: Product: syz [ 547.463991][ T990] usb 1-1: Manufacturer: syz [ 547.464006][ T990] usb 1-1: SerialNumber: syz [ 547.480192][ T990] usb 1-1: config 0 descriptor?? [ 553.564537][ T9495] pim6reg1: entered promiscuous mode [ 553.564567][ T9495] pim6reg1: entered allmulticast mode [ 555.322073][ T9518] ref_ctr increment failed for inode: 0x380 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888035ef21c0 [ 556.017212][ T9518] uprobe: syz.5.1001:9518 failed to unregister, leaking uprobe [ 558.903756][ T9542] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 559.933673][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 562.547352][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 563.962105][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 563.965219][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 563.968214][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.001039][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.014719][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 566.027647][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 566.942808][ T5154] Bluetooth: hci5: command tx timeout [ 567.251895][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1031'. [ 567.274404][ T9624] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[9624] [ 568.242483][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.242540][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.006112][ T5840] Bluetooth: hci5: command tx timeout [ 569.075711][ T9631] capability: warning: `syz.2.1035' uses 32-bit capabilities (legacy support in use) [ 569.448696][ T5919] usb 1-1: USB disconnect, device number 11 [ 569.632620][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.632766][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.633072][ T9595] bridge_slave_0: entered allmulticast mode [ 569.634999][ T9595] bridge_slave_0: entered promiscuous mode [ 569.637257][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.637352][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.637514][ T9595] bridge_slave_1: entered allmulticast mode [ 569.641300][ T9595] bridge_slave_1: entered promiscuous mode [ 570.980674][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.071965][ T5840] Bluetooth: hci5: command tx timeout [ 571.394903][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.111476][ T5840] Bluetooth: hci5: command tx timeout [ 574.313887][ T9595] team0: Port device team_slave_0 added [ 574.359401][ T9595] team0: Port device team_slave_1 added [ 574.830534][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 574.902160][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.902172][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.902189][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.029926][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.029939][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.029957][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.549394][ T9684] overlayfs: failed to clone upperpath [ 575.593511][ T9684] overlayfs: failed to clone upperpath [ 575.615200][ T9595] hsr_slave_0: entered promiscuous mode [ 575.631500][ T9595] hsr_slave_1: entered promiscuous mode [ 575.632325][ T9595] debugfs: 'hsr0' already exists in 'hsr' [ 575.632344][ T9595] Cannot create hsr debugfs directory [ 578.224447][ T38] audit: type=1804 audit(1755974538.276:907): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1056" name="/newroot/209/file1" dev="fuse" ino=1 res=1 errno=0 [ 578.224492][ T38] audit: type=1800 audit(1755974538.276:908): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1056" name="/" dev="fuse" ino=1 res=0 errno=0 [ 580.958873][ T9595] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 581.039251][ T9595] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 581.177486][ T9595] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 581.301496][ T9595] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 581.822094][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.997228][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.034339][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.035606][ T8100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.092242][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.092480][ T8100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.934674][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.849778][ T9771] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[9771] [ 586.849346][ T9595] veth0_vlan: entered promiscuous mode [ 586.913971][ T9595] veth1_vlan: entered promiscuous mode [ 587.372903][ T9595] veth0_macvtap: entered promiscuous mode [ 587.405220][ T9595] veth1_macvtap: entered promiscuous mode [ 587.675695][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.741268][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.850313][ T8100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.863900][ T8100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.864079][ T8100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.864456][ T8100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.956336][ T8100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.956357][ T8100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.345206][ T8934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.345221][ T8934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.437866][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.473064][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.479104][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.514346][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.516416][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 602.066763][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 602.791816][ T5154] Bluetooth: hci4: command tx timeout [ 603.384603][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1095'. [ 604.627696][ T1225] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.874526][ T5154] Bluetooth: hci4: command tx timeout [ 606.952664][ T5154] Bluetooth: hci4: command tx timeout [ 608.143980][ T9894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.144001][ T9894] IPv6: NLM_F_CREATE should be set when creating new route [ 608.413585][ T1225] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.508601][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.508762][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.509064][ T9830] bridge_slave_0: entered allmulticast mode [ 608.547310][ T9830] bridge_slave_0: entered promiscuous mode [ 608.559629][ T9894] lo: entered allmulticast mode [ 608.577413][ T9894] tunl0: entered allmulticast mode [ 608.618560][ T9894] gre0: entered allmulticast mode [ 608.729486][ T9894] gretap0: entered allmulticast mode [ 608.804373][ T9894] erspan0: entered allmulticast mode [ 608.827443][ T9894] ip_vti0: entered allmulticast mode [ 608.865836][ T9894] ip6_vti0: entered allmulticast mode [ 608.936181][ T9894] sit0: entered allmulticast mode [ 609.005864][ T9894] ip6tnl0: entered allmulticast mode [ 609.031561][ T5154] Bluetooth: hci4: command tx timeout [ 609.053312][ T9894] ip6gre0: entered allmulticast mode [ 609.140396][ T9894] syz_tun: entered allmulticast mode [ 609.256030][ T9894] ip6gretap0: entered allmulticast mode [ 609.273986][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.282922][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.302175][ T9894] bridge0: entered allmulticast mode [ 609.318704][ T9894] vcan0: entered allmulticast mode [ 609.378903][ T9894] bond0: entered allmulticast mode [ 609.378929][ T9894] bond_slave_0: entered allmulticast mode [ 609.378953][ T9894] bond_slave_1: entered allmulticast mode [ 609.506382][ T9894] team0: entered allmulticast mode [ 609.506407][ T9894] team_slave_0: entered allmulticast mode [ 609.506428][ T9894] team_slave_1: entered allmulticast mode [ 609.544966][ T9894] dummy0: entered allmulticast mode [ 609.631628][ T9894] nlmon0: entered allmulticast mode [ 609.635101][ T9894] caif0: entered allmulticast mode [ 609.635761][ T9894] batadv0: entered allmulticast mode [ 609.648277][ T9894] veth0: entered allmulticast mode [ 609.674355][ T9894] veth1: entered allmulticast mode [ 609.972020][ T9894] wg0: entered allmulticast mode [ 610.001544][ T45] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 610.062543][ T9894] wg1: entered allmulticast mode [ 610.164955][ T9894] wg2: entered allmulticast mode [ 610.181290][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.181408][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 610.181433][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.220703][ T45] usb 2-1: config 0 descriptor?? [ 610.241598][ T9894] veth0_to_bridge: entered allmulticast mode [ 610.285013][ T9894] veth1_to_bridge: entered allmulticast mode [ 610.302488][ T9894] veth0_to_bond: entered allmulticast mode [ 610.341793][ T9894] veth1_to_bond: entered allmulticast mode [ 610.368541][ T9894] veth0_to_team: entered allmulticast mode [ 610.404268][ T9894] veth1_to_team: entered allmulticast mode [ 610.494267][ T9894] veth0_to_batadv: entered allmulticast mode [ 610.500985][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.523935][ T9894] batadv_slave_0: entered allmulticast mode [ 610.545385][ T9894] veth1_to_batadv: entered allmulticast mode [ 610.578784][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.591580][ T9894] batadv_slave_1: entered allmulticast mode [ 610.650404][ T9894] xfrm0: entered allmulticast mode [ 610.666837][ T9894] veth0_to_hsr: entered allmulticast mode [ 610.693541][ T9894] hsr_slave_0: entered allmulticast mode [ 610.699961][ T9894] veth1_to_hsr: entered allmulticast mode [ 610.716203][ T9894] hsr_slave_1: entered allmulticast mode [ 610.733035][ T9894] hsr0: entered allmulticast mode [ 610.759100][ T9894] veth1_virt_wifi: entered allmulticast mode [ 610.793440][ T9894] veth0_virt_wifi: entered allmulticast mode [ 610.828461][ T9894] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 610.858142][ T9894] veth1_vlan: entered allmulticast mode [ 610.905455][ T9894] veth0_vlan: entered allmulticast mode [ 610.952557][ T9894] vlan0: entered allmulticast mode [ 610.952837][ T9894] vlan1: entered allmulticast mode [ 611.003271][ T9894] macvlan0: entered allmulticast mode [ 611.091625][ T9894] macvlan1: entered allmulticast mode [ 611.114113][ T9894] ipvlan0: entered allmulticast mode [ 611.114364][ T9894] ipvlan1: entered allmulticast mode [ 611.119117][ T9894] veth1_macvtap: entered allmulticast mode [ 611.152105][ T9894] veth0_macvtap: entered allmulticast mode [ 611.241590][ T9894] macvtap0: entered allmulticast mode [ 611.265480][ T9894] macsec0: entered allmulticast mode [ 611.361867][ T9894] geneve0: entered allmulticast mode [ 611.441841][ T9894] geneve1: entered allmulticast mode [ 611.522128][ T9894] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 611.622758][ T9894] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 611.732177][ T9894] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 611.821989][ T9894] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 611.946358][ T9894] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 612.119408][ T9894] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 612.135415][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.148743][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.148993][ T9830] bridge_slave_1: entered allmulticast mode [ 612.165207][ T9830] bridge_slave_1: entered promiscuous mode [ 612.315523][ T3571] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.644009][ T45] usb 2-1: USB disconnect, device number 9 [ 615.512280][ T1225] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.566141][ T3571] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.640720][ T9956] netlink: 'syz.1.1126': attribute type 21 has an invalid length. [ 616.493245][ T3571] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.528900][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.531132][ T3571] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.914234][ T9967] sctp: [Deprecated]: syz.1.1130 (pid 9967) Use of int in max_burst socket option deprecated. [ 616.914234][ T9967] Use struct sctp_assoc_value instead [ 618.894948][ T1225] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.004280][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.713820][ T9830] team0: Port device team_slave_0 added [ 619.732548][ T9830] team0: Port device team_slave_1 added [ 621.045558][ T38] audit: type=1800 audit(1755974581.086:909): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1133" name="/" dev="fuse" ino=0 res=0 errno=0 [ 621.965859][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.965880][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.965899][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.240679][ T38] audit: type=1326 audit(1755974583.306:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10007 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc558ebe9 code=0x7ffc0000 [ 623.241073][ T38] audit: type=1326 audit(1755974583.306:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10007 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1cc558ebe9 code=0x7ffc0000 [ 623.293063][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.293076][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.293096][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.295369][ T38] audit: type=1326 audit(1755974583.306:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10007 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc558ebe9 code=0x7ffc0000 [ 623.295428][ T38] audit: type=1326 audit(1755974583.366:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10007 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f1cc558ebe9 code=0x7ffc0000 [ 623.295475][ T38] audit: type=1326 audit(1755974583.366:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10007 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc558ebe9 code=0x7ffc0000 [ 623.296639][ T38] audit: type=1326 audit(1755974583.366:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10007 comm="syz.2.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc558ebe9 code=0x7ffc0000 [ 623.733006][T10011] overlayfs: failed to clone upperpath [ 624.284321][ T1225] bridge_slave_1: left allmulticast mode [ 624.284356][ T1225] bridge_slave_1: left promiscuous mode [ 624.284683][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.403227][ T1225] bridge_slave_0: left allmulticast mode [ 624.403263][ T1225] bridge_slave_0: left promiscuous mode [ 624.403560][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.704627][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.704711][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.204819][ T1225] bond1 (unregistering): (slave gretap1): Releasing active interface [ 632.901553][ T5154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 634.602690][T10082] trusted_key: syz.2.1165 sent an empty control message without MSG_MORE. [ 634.882742][T10089] ptrace attach of "./syz-executor exec"[9595] was attempted by "./syz-executor exec"[10089] [ 635.698037][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.842240][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.868471][ T1225] bond0 (unregistering): Released all slaves [ 637.166955][ T1225] bond1 (unregistering): Released all slaves [ 637.260714][ T9830] hsr_slave_0: entered promiscuous mode [ 637.273778][ T9830] hsr_slave_1: entered promiscuous mode [ 637.274741][ T9830] debugfs: 'hsr0' already exists in 'hsr' [ 637.274765][ T9830] Cannot create hsr debugfs directory [ 645.682517][ T1225] hsr_slave_0: left promiscuous mode [ 645.743539][ T1225] hsr_slave_1: left promiscuous mode [ 645.744593][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.744624][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.808855][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.808880][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.096476][ T1225] veth1_macvtap: left promiscuous mode [ 647.096601][ T1225] veth0_macvtap: left promiscuous mode [ 647.101604][ T1225] veth1_vlan: left promiscuous mode [ 647.101823][ T1225] veth0_vlan: left promiscuous mode [ 651.455712][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 651.702312][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 656.311146][ T9830] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 656.413453][ T9830] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 656.504788][ T9830] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 656.590191][ T9830] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 656.603669][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.633360][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.635852][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.638322][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.656166][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.388512][T10229] netlink: 'syz.2.1207': attribute type 7 has an invalid length. [ 658.941597][ T5154] Bluetooth: hci0: command tx timeout [ 661.036324][ T5154] Bluetooth: hci0: command tx timeout [ 661.234166][T10215] chnl_net:caif_netlink_parms(): no params data found [ 661.273177][T10250] bridge: RTM_NEWNEIGH with invalid ether address [ 661.761158][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.769929][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.774895][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.777787][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.779402][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.042140][T10257] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 662.404823][T10269] dvmrp1: entered allmulticast mode [ 662.678683][ T1225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.114535][ T5840] Bluetooth: hci0: command tx timeout [ 663.550785][ T1225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.662240][T10215] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.662383][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.662604][T10215] bridge_slave_0: entered allmulticast mode [ 663.664509][T10215] bridge_slave_0: entered promiscuous mode [ 663.669233][T10215] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.669370][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.669523][T10215] bridge_slave_1: entered allmulticast mode [ 663.699212][T10215] bridge_slave_1: entered promiscuous mode [ 663.831733][ T5840] Bluetooth: hci3: command tx timeout [ 664.099111][ T1225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.158314][T10215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.185021][T10215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.537860][ T1225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.600859][T10215] team0: Port device team_slave_0 added [ 664.629259][T10215] team0: Port device team_slave_1 added [ 664.948365][T10215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.948382][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.948407][T10215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.998506][T10215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.998524][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.998551][T10215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.192868][ T5840] Bluetooth: hci0: command tx timeout [ 665.288697][T10215] hsr_slave_0: entered promiscuous mode [ 665.289726][T10215] hsr_slave_1: entered promiscuous mode [ 665.290415][T10215] debugfs: 'hsr0' already exists in 'hsr' [ 665.290439][T10215] Cannot create hsr debugfs directory [ 665.641766][T10261] chnl_net:caif_netlink_parms(): no params data found [ 665.716107][ T1225] bridge_slave_1: left allmulticast mode [ 665.716141][ T1225] bridge_slave_1: left promiscuous mode [ 665.716396][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.778671][ T1225] bridge_slave_0: left allmulticast mode [ 665.778696][ T1225] bridge_slave_0: left promiscuous mode [ 665.778896][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.911967][ T5840] Bluetooth: hci3: command tx timeout [ 666.388144][ T1225] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 666.388169][ T1225] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 86:60:75:c8:9c:87 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 667.991457][ T5840] Bluetooth: hci3: command tx timeout [ 668.502376][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.602348][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.637392][ T1225] bond0 (unregistering): Released all slaves [ 669.550319][ T1225] bond1 (unregistering): Released all slaves [ 669.612677][ T1225] bond2 (unregistering): (slave veth3): Releasing backup interface [ 669.685654][ T1225] bond2 (unregistering): Released all slaves [ 670.071710][ T5840] Bluetooth: hci3: command tx timeout [ 670.649002][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.649224][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.649452][T10261] bridge_slave_0: entered allmulticast mode [ 670.677067][T10261] bridge_slave_0: entered promiscuous mode [ 671.018978][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.019091][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.019289][T10261] bridge_slave_1: entered allmulticast mode [ 671.021061][T10261] bridge_slave_1: entered promiscuous mode [ 671.373712][ T1225] hsr_slave_0: left promiscuous mode [ 671.391779][ T1225] hsr_slave_1: left promiscuous mode [ 671.392765][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.392794][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.462836][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.462871][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.540461][ T1225] veth1_macvtap: left promiscuous mode [ 671.540589][ T1225] veth0_macvtap: left promiscuous mode [ 671.540820][ T1225] veth1_vlan: left promiscuous mode [ 671.540946][ T1225] veth0_vlan: left promiscuous mode [ 674.323448][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 674.536879][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 677.098001][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.217240][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.440921][T10261] team0: Port device team_slave_0 added [ 677.446787][T10261] team0: Port device team_slave_1 added [ 677.664717][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.664733][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.664755][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.667319][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.667334][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.667362][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.923102][T10215] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 678.062656][T10215] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 678.119921][T10261] hsr_slave_0: entered promiscuous mode [ 678.121204][T10261] hsr_slave_1: entered promiscuous mode [ 678.132054][T10215] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 678.315689][T10215] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 679.257314][T10215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.317662][T10215] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.338018][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.338226][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.545030][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.545193][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.316938][T10261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 680.359560][T10261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 680.380941][T10261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 680.392143][ T1455] ------------[ cut here ]------------ [ 680.392167][ T1455] WARNING: CPU: 0 PID: 1455 at io_uring/io_uring.c:2982 io_ring_exit_work+0x4e5/0x930 [ 680.392209][ T1455] Modules linked in: [ 680.392250][ T1455] CPU: 0 UID: 0 PID: 1455 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.392274][ T1455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 680.392288][ T1455] Workqueue: iou_exit io_ring_exit_work [ 680.392319][ T1455] RIP: 0010:io_ring_exit_work+0x4e5/0x930 [ 680.392342][ T1455] Code: c6 05 d1 1b dc 0d 01 48 c7 c7 a0 3c 61 8b be 24 00 00 00 48 c7 c2 40 3c 61 8b e8 16 02 71 00 e9 7b fe ff ff e8 4c 43 93 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 680.392361][ T1455] RSP: 0018:ffffc900056178e0 EFLAGS: 00010293 [ 680.392379][ T1455] RAX: ffffffff812b18f4 RBX: 00000001000093d0 RCX: ffff88802775bb80 [ 680.392395][ T1455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 680.392407][ T1455] RBP: ffffc90005617a70 R08: 0000000000000000 R09: 0000000000000000 [ 680.392420][ T1455] R10: dffffc0000000000 R11: fffffbfff1e3a887 R12: 00000001000093cd [ 680.392435][ T1455] R13: ffff88804a2e6350 R14: ffff88804a2e6540 R15: dffffc0000000000 [ 680.392451][ T1455] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 680.392468][ T1455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.392483][ T1455] CR2: 00007fde1785ae9c CR3: 000000005a12c000 CR4: 00000000003526f0 [ 680.392501][ T1455] Call Trace: [ 680.392509][ T1455] [ 680.392534][ T1455] ? __pfx_io_ring_exit_work+0x10/0x10 [ 680.392575][ T1455] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.392603][ T1455] ? process_scheduled_works+0x9ef/0x17b0 [ 680.392631][ T1455] ? process_scheduled_works+0x9ef/0x17b0 [ 680.392661][ T1455] process_scheduled_works+0xade/0x17b0 [ 680.392721][ T1455] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.392780][ T1455] worker_thread+0x8a0/0xda0 [ 680.392812][ T1455] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 680.392849][ T1455] ? __kthread_parkme+0x7b/0x200 [ 680.392890][ T1455] kthread+0x70e/0x8a0 [ 680.392926][ T1455] ? __pfx_worker_thread+0x10/0x10 [ 680.392954][ T1455] ? __pfx_kthread+0x10/0x10 [ 680.392992][ T1455] ? __pfx_kthread+0x10/0x10 [ 680.393026][ T1455] ret_from_fork+0x3fc/0x770 [ 680.393059][ T1455] ? __pfx_ret_from_fork+0x10/0x10 [ 680.393094][ T1455] ? __switch_to_asm+0x39/0x70 [ 680.393114][ T1455] ? __switch_to_asm+0x33/0x70 [ 680.393134][ T1455] ? __pfx_kthread+0x10/0x10 [ 680.393168][ T1455] ret_from_fork_asm+0x1a/0x30 [ 680.393208][ T1455] [ 680.393218][ T1455] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 680.393233][ T1455] CPU: 0 UID: 0 PID: 1455 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.393258][ T1455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 680.393271][ T1455] Workqueue: iou_exit io_ring_exit_work [ 680.393291][ T1455] Call Trace: [ 680.393299][ T1455] [ 680.393308][ T1455] dump_stack_lvl+0x99/0x250 [ 680.393340][ T1455] ? __asan_memcpy+0x40/0x70 [ 680.393365][ T1455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.393397][ T1455] ? __pfx__printk+0x10/0x10 [ 680.393436][ T1455] vpanic+0x281/0x750 [ 680.393468][ T1455] ? __pfx__printk+0x10/0x10 [ 680.393491][ T1455] ? __pfx_vpanic+0x10/0x10 [ 680.393523][ T1455] ? is_bpf_text_address+0x26/0x2b0 [ 680.393567][ T1455] panic+0xb9/0xc0 [ 680.393597][ T1455] ? __pfx_panic+0x10/0x10 [ 680.393646][ T1455] __warn+0x31b/0x4b0 [ 680.393676][ T1455] ? io_ring_exit_work+0x4e5/0x930 [ 680.393700][ T1455] ? io_ring_exit_work+0x4e5/0x930 [ 680.393721][ T1455] report_bug+0x2be/0x4f0 [ 680.393747][ T1455] ? io_ring_exit_work+0x4e5/0x930 [ 680.393775][ T1455] ? io_ring_exit_work+0x4e5/0x930 [ 680.393797][ T1455] ? io_ring_exit_work+0x4e7/0x930 [ 680.393818][ T1455] handle_bug+0x84/0x160 [ 680.393851][ T1455] exc_invalid_op+0x1a/0x50 [ 680.393883][ T1455] asm_exc_invalid_op+0x1a/0x20 [ 680.393905][ T1455] RIP: 0010:io_ring_exit_work+0x4e5/0x930 [ 680.393927][ T1455] Code: c6 05 d1 1b dc 0d 01 48 c7 c7 a0 3c 61 8b be 24 00 00 00 48 c7 c2 40 3c 61 8b e8 16 02 71 00 e9 7b fe ff ff e8 4c 43 93 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 680.393958][ T1455] RSP: 0018:ffffc900056178e0 EFLAGS: 00010293 [ 680.393975][ T1455] RAX: ffffffff812b18f4 RBX: 00000001000093d0 RCX: ffff88802775bb80 [ 680.393991][ T1455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 680.394004][ T1455] RBP: ffffc90005617a70 R08: 0000000000000000 R09: 0000000000000000 [ 680.394018][ T1455] R10: dffffc0000000000 R11: fffffbfff1e3a887 R12: 00000001000093cd [ 680.394033][ T1455] R13: ffff88804a2e6350 R14: ffff88804a2e6540 R15: dffffc0000000000 [ 680.394057][ T1455] ? io_ring_exit_work+0x4e4/0x930 [ 680.394100][ T1455] ? __pfx_io_ring_exit_work+0x10/0x10 [ 680.394138][ T1455] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.394165][ T1455] ? process_scheduled_works+0x9ef/0x17b0 [ 680.394190][ T1455] ? process_scheduled_works+0x9ef/0x17b0 [ 680.394219][ T1455] process_scheduled_works+0xade/0x17b0 [ 680.394276][ T1455] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.394322][ T1455] worker_thread+0x8a0/0xda0 [ 680.394351][ T1455] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 680.394388][ T1455] ? __kthread_parkme+0x7b/0x200 [ 680.394427][ T1455] kthread+0x70e/0x8a0 [ 680.394461][ T1455] ? __pfx_worker_thread+0x10/0x10 [ 680.394488][ T1455] ? __pfx_kthread+0x10/0x10 [ 680.394526][ T1455] ? __pfx_kthread+0x10/0x10 [ 680.394559][ T1455] ret_from_fork+0x3fc/0x770 [ 680.394590][ T1455] ? __pfx_ret_from_fork+0x10/0x10 [ 680.394624][ T1455] ? __switch_to_asm+0x39/0x70 [ 680.394643][ T1455] ? __switch_to_asm+0x33/0x70 [ 680.394663][ T1455] ? __pfx_kthread+0x10/0x10 [ 680.394715][ T1455] ret_from_fork_asm+0x1a/0x30 [ 680.394754][ T1455] [ 680.395112][ T1455] Kernel Offset: disabled