last executing test programs: 16m38.342211298s ago: executing program 0 (id=1625): syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[]) 16m33.849104645s ago: executing program 0 (id=1629): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481060e"], 0x21) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, 0x0, &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000041) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x620b}, 0x0) 16m24.577962946s ago: executing program 0 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') close(0x3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 16m22.600303145s ago: executing program 0 (id=1645): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="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", 0xfc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x4002c2, 0xc8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0xe4880) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001100000228bd7000fadbdf25fc020000000000000000000000000000000004d6020033"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16m20.594872446s ago: executing program 0 (id=1648): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@delsa={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 16m9.901578463s ago: executing program 0 (id=1664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 15m53.624787691s ago: executing program 32 (id=1664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 14m12.770105091s ago: executing program 1 (id=1825): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$sequencer(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481060e"], 0x21) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, 0x0, &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000041) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x74000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x620b}, 0x0) 14m6.793308573s ago: executing program 1 (id=1832): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18000220}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00012bbd7000fedbdf25170000000c0099004b9a00006e0000000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a00"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="e8700e444d50a969ff67347cff6127e6ef12ee38192714ab9b8b4db33e4c9424005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b137d6b66f74f46cf801704d2da8b96c34070b233af0afcc436713af05a0400000000000000ec35114370766aea769535e3e40527b35cbd7b22700c451426a0634114f614a364392b9196a249e08de4e2b020d27f518f0aa218d49a9c", 0xd2}], 0x1, 0x0, 0x0, 0x2404c845}], 0x1, 0x10) r1 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x101202) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TIOCGRS485(r4, 0x542e, 0x0) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_getfd(r6, r6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000340), &(0x7f0000000580)}) 14m4.23152327s ago: executing program 1 (id=1837): set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) syz_io_uring_setup(0x3783, &(0x7f0000000740)={0x0, 0x7b92, 0x40, 0x2, 0x380}, &(0x7f0000000040), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$fb(0xffffffffffffffff, &(0x7f0000000300), 0x0) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x130, 0x12, 0x60a, 0x130, 0x202, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0xffffffff], 'netpci0\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfe}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [0xff], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x6, 0xfb1a, 0x0, 0x3}}) msgsnd(0x0, 0x0, 0x0, 0x800) msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300"], 0xbe, 0x800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}], 0x1}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) 14m2.328092408s ago: executing program 1 (id=1838): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b00000005defd5a32e3082038f4f8b29d3e2a73325c6d167c7594978f7bc711fdf3d92c8334b2ccd243f295ed94e0ad91bd073457d43d3f0000000000000000000000000073bfe35951f2d728a1e09c8dcd13323236b0fbe7c61b1bf53cdec0961355f00ca63ff6c90da1dc9f8f594d033472cb97e3b5f3395aa0a4a82775cf8def", 0xfc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x4002c2, 0xc8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0xe4880) socket$kcm(0x10, 0x3, 0x10) 14m1.12281101s ago: executing program 1 (id=1840): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) flock(r1, 0x1) 13m58.435946634s ago: executing program 1 (id=1846): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb7f, &(0x7f0000000440)={0x0, 0x38a7, 0x80, 0x0, 0xa9}, &(0x7f0000000100), &(0x7f0000000240)) r6 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000580)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x255, 0x0, 0x0) 13m41.084789276s ago: executing program 33 (id=1846): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xb7f, &(0x7f0000000440)={0x0, 0x38a7, 0x80, 0x0, 0xa9}, &(0x7f0000000100), &(0x7f0000000240)) r6 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000580)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x255, 0x0, 0x0) 20.006784574s ago: executing program 3 (id=2758): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$sequencer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481060e"], 0x21) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, 0x0, &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000041) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 15.661561786s ago: executing program 2 (id=2762): syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_open_procfs(r0, &(0x7f00000022c0)='net/packet\x00') symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000300)=ANY=[]) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2014050, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x22}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 15.552181551s ago: executing program 3 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x2404c800) 7.481082743s ago: executing program 3 (id=2766): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) 7.334524169s ago: executing program 2 (id=2767): syz_open_dev$radio(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) socket(0x10, 0x803, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x4002c2, 0xc8) 6.977831865s ago: executing program 3 (id=2768): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x33, 0x4, @thr={&(0x7f0000000240)="dbc6303d8621d2d8acefc2e3cb21a385041b3dd2e2e262deade175a1e451690da7036599c648f3881210", &(0x7f0000000880)="dc86e6e7228090fe24769fb09dd6aef2e8385dfb5ff9331a86da74d8172142d06b504815e32fab676bf2725180eefd558a1d9e458de8a839b1bed356fe4de11ff201dc1da15579dd2251c68a67de9d739a6c8704d383650c78cf2f653b6a8afd144d94788bc67c610c238935e7f3b314c7192fea99c57806ffaf688912f9141979d509d05e6de16794b0b746e57deaf614db1f15ff6fb3c856a4ea9c719a8fa86bfa8d1ffb60b4f08afe2452725311c1e600fe7b87e681633c579e8fee24a2316cd089529a3495e22fac21fb96c5246f6c93f315d91428dfa9c6e200"/235}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0xffffffff, 0x0, 0x0, 0xfffffffc) 5.850765493s ago: executing program 2 (id=2769): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x101f01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) socket$kcm(0x2, 0xa, 0x2) 3.886526965s ago: executing program 3 (id=2770): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.692626273s ago: executing program 2 (id=2772): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$sequencer(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="920be0051057000481060e"], 0x21) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, 0x0, &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000041) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) 2.572765271s ago: executing program 4 (id=2774): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20801, 0x0) writev(r0, &(0x7f0000004e00)=[{&(0x7f0000004b80)="45cb", 0x2}], 0x1) 2.552923943s ago: executing program 3 (id=2775): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000b2f000000c39709002db2b9f6841c41ec5d561960fbc6b67cb1ebd6b946f60480f620922eded802153e01fb84ddd1840d8429386aff4dd9e6ab748f52ac8e8ef114a8c926c97c962c32f8f37305a6d358cfed690fc8059d75aad946991f3857449c27ff978b537bd0ab0e5825040000000000000035b0c4497ccfeaf129bad168f3c250fdae2589a4bb92278e87766d7274f5226344c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000002d) getpgid(0x0) fcntl$setownex(r2, 0xf, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) r4 = fsopen(&(0x7f0000000000)='xfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000280)={0x4}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) writev(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)="168ef7c0aa63f81c50d879e530a0efab09df09c7c45e7faaeec9e84ffdabadf4711a6eec5676d29f1459bd9c8cdc81f8941bb1c51f3d3f8cabb7f820e7370126b9b56e039c469ed851b9790ec30ce23d9df440bb5aa204d31f0f0e13e642dff59aeae2e70faea5ef1c3e6d5ea2a7a40a98719871a541804cde022d6e855b4fdde7a64c1490b5af2e6fe53d97", 0x8c}], 0x1) 2.338658044s ago: executing program 4 (id=2776): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) 2.296515961s ago: executing program 2 (id=2777): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000ffffffff0018"], 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) 2.237668327s ago: executing program 4 (id=2778): r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.548992351s ago: executing program 2 (id=2779): r0 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) 1.548700983s ago: executing program 4 (id=2780): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x101f01) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) socket$kcm(0x2, 0xa, 0x2) 80.05795ms ago: executing program 4 (id=2781): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb30000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 4 (id=2782): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}], 0x1, 0x46090) read(0xffffffffffffffff, &(0x7f0000002500)=""/126, 0x7e) sendto$inet(r0, &(0x7f0000000180)="17", 0xfffffffffffffdfd, 0x10008095, 0x0, 0x240) kernel console output (not intermixed with test programs): interface not active [ 1112.895873][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.895924][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.895994][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.080224][ T4247] bridge_slave_1: left allmulticast mode [ 1113.080245][ T4247] bridge_slave_1: left promiscuous mode [ 1113.080415][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.176674][ T4247] bridge_slave_0: left allmulticast mode [ 1113.176706][ T4247] bridge_slave_0: left promiscuous mode [ 1113.176971][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.030088][ T5953] usb 4-1: USB disconnect, device number 44 [ 1114.602708][T13645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1114.602766][T13645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1116.066070][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.632265][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.713509][ T4247] bond0 (unregistering): Released all slaves [ 1116.731181][T13657] Bluetooth: MGMT ver 1.23 [ 1117.846370][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2105'. [ 1118.160948][T13446] hsr_slave_0: entered promiscuous mode [ 1118.162036][T13446] hsr_slave_1: entered promiscuous mode [ 1118.162715][T13446] debugfs: 'hsr0' already exists in 'hsr' [ 1118.162733][T13446] Cannot create hsr debugfs directory [ 1119.143483][T13678] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2107'. [ 1119.249321][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.249431][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.249621][T13466] bridge_slave_0: entered allmulticast mode [ 1119.252901][T13466] bridge_slave_0: entered promiscuous mode [ 1119.646512][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.646643][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.646922][T13466] bridge_slave_1: entered allmulticast mode [ 1119.650434][T13466] bridge_slave_1: entered promiscuous mode [ 1120.793240][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.987813][ T4247] hsr_slave_0: left promiscuous mode [ 1121.029494][ T4247] hsr_slave_1: left promiscuous mode [ 1121.030189][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.077381][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.968848][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2116'. [ 1124.384889][ T5869] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1124.468216][T13713] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2119'. [ 1125.225148][ T5869] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1126.629624][T13716] fido_id[13716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1126.734114][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1126.794415][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1127.020626][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.318121][T13466] team0: Port device team_slave_0 added [ 1129.325794][T13466] team0: Port device team_slave_1 added [ 1129.652750][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.652768][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.652798][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.754509][T13730] lo speed is unknown, defaulting to 1000 [ 1129.803450][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.803466][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.803492][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.042082][T10235] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1130.202421][T10235] usb 5-1: Using ep0 maxpacket: 32 [ 1130.204848][T10235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.204881][T10235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.204918][T10235] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1130.204940][T10235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.282298][T10235] usb 5-1: config 0 descriptor?? [ 1130.599545][T13466] hsr_slave_0: entered promiscuous mode [ 1130.605024][T13466] hsr_slave_1: entered promiscuous mode [ 1130.766023][T10235] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 1130.766064][T10235] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 1130.982454][T10235] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 1131.191531][T10235] ft260 0003:0403:6030.0019: failed to retrieve system status [ 1131.503698][T10235] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -32 [ 1131.639805][T13767] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2129'. [ 1133.750155][ T5955] usb 5-1: USB disconnect, device number 23 [ 1133.948867][T13773] lo speed is unknown, defaulting to 1000 [ 1134.188296][ T5955] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1134.348569][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 1134.364211][ T5955] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1134.364234][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.364248][ T5955] usb 5-1: Product: syz [ 1134.364259][ T5955] usb 5-1: Manufacturer: syz [ 1134.364269][ T5955] usb 5-1: SerialNumber: syz [ 1134.399236][ T5955] usb 5-1: config 0 descriptor?? [ 1134.906480][ T5955] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 024 [ 1136.036100][T13795] kAFS: unable to lookup cell '(,c¾Ì' [ 1136.763432][ C1] hrtimer: interrupt took 13500 ns [ 1137.798546][T13785] i2c i2c-1: failure reading status [ 1137.928670][T13804] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2136'. [ 1139.028151][ T5955] usb 5-1: USB disconnect, device number 24 [ 1140.664123][T10235] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1140.834991][T10235] usb 3-1: Using ep0 maxpacket: 32 [ 1140.837804][T10235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.837833][T10235] usb 3-1: config 0 has no interfaces? [ 1140.837866][T10235] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1140.837894][T10235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.905518][T10235] usb 3-1: config 0 descriptor?? [ 1141.053074][ T4247] bridge_slave_1: left allmulticast mode [ 1141.053106][ T4247] bridge_slave_1: left promiscuous mode [ 1141.053429][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.377762][ T4247] bridge_slave_0: left allmulticast mode [ 1141.377787][ T4247] bridge_slave_0: left promiscuous mode [ 1141.377987][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.833771][ T9716] usb 3-1: USB disconnect, device number 37 [ 1145.544841][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.646964][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.690207][ T4247] bond0 (unregistering): Released all slaves [ 1146.257580][T13854] lo speed is unknown, defaulting to 1000 [ 1146.423889][ T5806] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1146.669824][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 1146.684439][ T5806] usb 4-1: config 0 has no interfaces? [ 1146.708962][ T5806] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1146.708995][ T5806] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1146.709010][ T5806] usb 4-1: Manufacturer: syz [ 1146.742082][ T5806] usb 4-1: config 0 descriptor?? [ 1147.022743][ T4247] hsr_slave_0: left promiscuous mode [ 1147.118393][ T4247] hsr_slave_1: left promiscuous mode [ 1147.119449][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.175739][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.300765][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1149.341610][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1149.560808][T13865] lo speed is unknown, defaulting to 1000 [ 1149.919905][T13446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1150.303062][T13446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1150.363026][T13446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1150.450827][T13446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1151.359939][T13466] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1151.656279][T13466] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1151.698328][T13466] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1152.717856][T13466] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1154.171689][ T10] usb 4-1: USB disconnect, device number 45 [ 1154.537053][T13898] io-wq is not configured for unbound workers [ 1155.551075][T10344] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1155.557142][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 1156.074205][T10344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1156.125032][T10344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1156.278686][T10344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.299752][T10344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1157.874531][T13899] lo speed is unknown, defaulting to 1000 [ 1158.349013][T10344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1158.388751][T10344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1158.965120][T13930] lo speed is unknown, defaulting to 1000 [ 1159.259942][T10344] Bluetooth: hci5: command tx timeout [ 1159.308768][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.387292][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.410151][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1159.414087][T13935] kAFS: unable to lookup cell '(,c¾Ì' [ 1161.485916][T12253] Bluetooth: hci5: command tx timeout [ 1161.661491][T12253] Bluetooth: hci1: command tx timeout [ 1162.793218][T13939] lo speed is unknown, defaulting to 1000 [ 1163.702139][T12253] Bluetooth: hci5: command tx timeout [ 1163.994904][T12253] Bluetooth: hci1: command tx timeout [ 1166.207148][T12253] Bluetooth: hci1: command tx timeout [ 1167.166616][T12253] Bluetooth: hci5: command tx timeout [ 1168.567023][ T5801] Bluetooth: hci1: command tx timeout [ 1168.575917][ T5953] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1168.761317][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1168.761398][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1168.789724][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 1168.795295][ T5953] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1168.795328][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.795348][ T5953] usb 3-1: Product: syz [ 1168.795364][ T5953] usb 3-1: Manufacturer: syz [ 1168.795380][ T5953] usb 3-1: SerialNumber: syz [ 1168.839323][ T5953] usb 3-1: config 0 descriptor?? [ 1169.351192][ T5953] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 038 [ 1169.763434][ T5953] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1169.863652][ T5953] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1170.087699][T13971] fido_id[13971]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1170.228431][T13924] lo speed is unknown, defaulting to 1000 [ 1170.239593][T13972] i2c i2c-1: failure reading status [ 1170.250617][ T5806] usb 3-1: USB disconnect, device number 38 [ 1176.064030][T14006] kAFS: unable to lookup cell '(,c¾Ì' [ 1178.800468][T13899] chnl_net:caif_netlink_parms(): no params data found [ 1180.785705][T14026] lo speed is unknown, defaulting to 1000 [ 1181.027903][T13924] chnl_net:caif_netlink_parms(): no params data found [ 1181.038555][T14032] kAFS: unable to lookup cell '(,c¾Ì' [ 1184.522752][T13899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.522878][T13899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.523085][T13899] bridge_slave_0: entered allmulticast mode [ 1184.525665][T13899] bridge_slave_0: entered promiscuous mode [ 1184.708033][T13899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.708211][T13899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.708459][T13899] bridge_slave_1: entered allmulticast mode [ 1184.711098][T13899] bridge_slave_1: entered promiscuous mode [ 1184.819685][ T4247] bridge_slave_1: left allmulticast mode [ 1184.819715][ T4247] bridge_slave_1: left promiscuous mode [ 1184.819943][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.104311][ T4247] bridge_slave_0: left allmulticast mode [ 1185.104345][ T4247] bridge_slave_0: left promiscuous mode [ 1185.104639][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.994687][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.173101][T14064] kAFS: unable to lookup cell '(,c¾Ì' [ 1189.268957][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.320359][ T4247] bond0 (unregistering): Released all slaves [ 1189.504558][T14054] lo speed is unknown, defaulting to 1000 [ 1190.218052][T13899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.705746][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.705876][T13924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.706147][T13924] bridge_slave_0: entered allmulticast mode [ 1190.730176][T13924] bridge_slave_0: entered promiscuous mode [ 1190.756039][T13899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.791557][T13924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.791705][T13924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.791965][T13924] bridge_slave_1: entered allmulticast mode [ 1190.794961][T13924] bridge_slave_1: entered promiscuous mode [ 1190.957063][T13899] team0: Port device team_slave_0 added [ 1190.961305][T13924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.006604][T13899] team0: Port device team_slave_1 added [ 1191.212414][T13924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.423932][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'. [ 1191.503372][T13899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.503384][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.503405][T13899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.838479][T13899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.838500][T13899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.838532][T13899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.885639][ T5953] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1192.126855][ T5953] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1192.126886][ T5953] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1192.126906][ T5953] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.127036][ T5953] usb 3-1: config 8 has no interface number 0 [ 1192.127086][ T5953] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1192.147489][ T5953] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1192.147521][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.147543][ T5953] usb 3-1: Product: syz [ 1192.147558][ T5953] usb 3-1: Manufacturer: syz [ 1192.147574][ T5953] usb 3-1: SerialNumber: syz [ 1193.398118][ T4247] hsr_slave_0: left promiscuous mode [ 1193.443635][ T4247] hsr_slave_1: left promiscuous mode [ 1193.444892][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.470039][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.013441][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1194.052594][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1194.653346][T13924] team0: Port device team_slave_0 added [ 1194.761910][T13924] team0: Port device team_slave_1 added [ 1195.801336][T13924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.808258][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.808330][T13924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.943746][T13899] hsr_slave_0: entered promiscuous mode [ 1195.945238][T13899] hsr_slave_1: entered promiscuous mode [ 1195.946233][T13899] debugfs: 'hsr0' already exists in 'hsr' [ 1195.946260][T13899] Cannot create hsr debugfs directory [ 1195.950171][T13924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.950198][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.950229][T13924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.691019][T14117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2195'. [ 1197.771508][T13924] hsr_slave_0: entered promiscuous mode [ 1197.787044][T13924] hsr_slave_1: entered promiscuous mode [ 1197.800808][T13924] debugfs: 'hsr0' already exists in 'hsr' [ 1197.800838][T13924] Cannot create hsr debugfs directory [ 1198.560929][ T5953] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1198.827607][ T5953] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 1198.827637][ T5953] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1198.827654][ T5953] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.827678][ T5953] usb 4-1: config 8 has no interface number 0 [ 1198.827711][ T5953] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1198.852228][ T5953] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1198.852252][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.852266][ T5953] usb 4-1: Product: syz [ 1198.852276][ T5953] usb 4-1: Manufacturer: syz [ 1198.852286][ T5953] usb 4-1: SerialNumber: syz [ 1199.025777][ T9716] usb 3-1: USB disconnect, device number 39 [ 1207.472270][T14153] lo speed is unknown, defaulting to 1000 [ 1207.979791][T10235] usb 4-1: USB disconnect, device number 46 [ 1208.232896][T14162] kAFS: unable to lookup cell '(,c¾Ì' [ 1209.567621][T10235] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1209.906395][T10235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.906424][T10235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1209.906469][T10235] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 1209.906499][T10235] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1209.906515][T10235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.942120][T14160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1210.336512][T10235] hub 4-1:1.0: bad descriptor, ignoring hub [ 1210.336566][T10235] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1210.337899][T10235] cdc_wdm 4-1:1.0: skipping garbage [ 1210.337943][T10235] cdc_wdm 4-1:1.0: skipping garbage [ 1210.344459][T10235] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1210.344511][T10235] cdc_wdm 4-1:1.0: Unknown control protocol [ 1210.756045][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.756280][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.757922][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.757947][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.758195][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.758228][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.758466][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.758488][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.758751][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.758773][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.759006][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.759028][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.759272][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.759294][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.759526][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.759549][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.759795][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.759820][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1210.760056][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1210.760079][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1213.490135][ T31] usb 4-1: USB disconnect, device number 47 [ 1218.271106][T14217] kAFS: unable to lookup cell '(,c¾Ì' [ 1219.092899][T14214] lo speed is unknown, defaulting to 1000 [ 1219.160080][ T4247] bridge_slave_1: left allmulticast mode [ 1219.160113][ T4247] bridge_slave_1: left promiscuous mode [ 1219.160387][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.228914][ T4247] bridge_slave_0: left allmulticast mode [ 1219.228938][ T4247] bridge_slave_0: left promiscuous mode [ 1219.229151][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.539925][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.602391][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.646892][ T4247] bond0 (unregistering): Released all slaves [ 1220.137602][T12253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1220.149434][T12253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1220.150777][T12253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1220.152327][T12253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1220.153148][T12253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1222.551757][T12253] Bluetooth: hci2: command tx timeout [ 1222.905660][ T4247] hsr_slave_0: left promiscuous mode [ 1222.927179][ T4247] hsr_slave_1: left promiscuous mode [ 1222.928658][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.957977][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.101191][T14242] Bluetooth: MGMT ver 1.23 [ 1223.285942][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1223.289279][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1223.306559][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1223.325811][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1223.327271][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1224.784451][ T5801] Bluetooth: hci2: command tx timeout [ 1224.935328][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1224.966849][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1226.625483][T12253] Bluetooth: hci6: command tx timeout [ 1226.711552][T14232] lo speed is unknown, defaulting to 1000 [ 1226.964451][T12253] Bluetooth: hci2: command tx timeout [ 1227.679905][T14245] lo speed is unknown, defaulting to 1000 [ 1228.750182][ T9716] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1228.761236][ T9716] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1228.836570][T12253] Bluetooth: hci6: command tx timeout [ 1229.045805][T14272] fido_id[14272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1229.176456][T12253] Bluetooth: hci2: command tx timeout [ 1231.930215][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 1231.982332][T12253] Bluetooth: hci6: command tx timeout [ 1232.007646][T14278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1232.128435][T14288] syz_tun: entered allmulticast mode [ 1232.459301][ T9716] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1232.925690][ T9716] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1232.925745][ T9716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.928822][ T9716] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1232.928852][ T9716] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1232.928873][ T9716] usb 4-1: Manufacturer: syz [ 1233.028321][ T9716] usb 4-1: config 0 descriptor?? [ 1233.110676][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1233.210292][T13899] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 1233.269302][ T9716] rc_core: IR keymap rc-hauppauge not found [ 1233.269322][ T9716] Registered IR keymap rc-empty [ 1233.270748][ T9716] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1233.278300][ T9716] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 1234.335116][T12253] Bluetooth: hci6: command tx timeout [ 1234.423418][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.423494][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.428247][ T9716] usb 4-1: USB disconnect, device number 48 [ 1235.392522][T10235] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1235.418137][T10235] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1235.568716][T14293] syz_tun: left allmulticast mode [ 1235.703409][T14319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.729819][T14232] chnl_net:caif_netlink_parms(): no params data found [ 1237.428026][T14245] chnl_net:caif_netlink_parms(): no params data found [ 1240.208665][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 1240.705204][ T4247] bridge_slave_1: left allmulticast mode [ 1240.705233][ T4247] bridge_slave_1: left promiscuous mode [ 1240.705506][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.945055][ T4247] bridge_slave_0: left allmulticast mode [ 1240.945092][ T4247] bridge_slave_0: left promiscuous mode [ 1240.945384][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.050518][ T4247] bridge_slave_1: left allmulticast mode [ 1241.050541][ T4247] bridge_slave_1: left promiscuous mode [ 1241.050789][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.135451][ T4247] bridge_slave_0: left allmulticast mode [ 1241.135473][ T4247] bridge_slave_0: left promiscuous mode [ 1241.135665][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.604888][ T5806] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1242.601068][ T5806] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1242.601112][ T5806] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.608595][ T36] audit: type=1800 audit(1774338089.982:4): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2243" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1242.646115][ T5806] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1242.646150][ T5806] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1242.646172][ T5806] usb 5-1: Manufacturer: syz [ 1242.681095][ T5806] usb 5-1: config 0 descriptor?? [ 1242.812705][ T5806] rc_core: IR keymap rc-hauppauge not found [ 1242.812729][ T5806] Registered IR keymap rc-empty [ 1242.815280][ T5806] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1242.819594][ T5806] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 1242.908023][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.916021][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.103041][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.747032][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.853062][ T4247] bond0 (unregistering): Released all slaves [ 1246.530716][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.811572][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.607479][ T4247] bond0 (unregistering): Released all slaves [ 1248.493546][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.493673][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.493921][T14232] bridge_slave_0: entered allmulticast mode [ 1248.519564][T14232] bridge_slave_0: entered promiscuous mode [ 1248.657985][T14364] syz_tun: entered allmulticast mode [ 1248.658616][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.658744][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.659010][T14232] bridge_slave_1: entered allmulticast mode [ 1248.698396][T14232] bridge_slave_1: entered promiscuous mode [ 1248.847074][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.105346][ T9716] usb 5-1: USB disconnect, device number 25 [ 1249.653118][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.737081][T14245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.737214][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.737416][T14245] bridge_slave_0: entered allmulticast mode [ 1249.740307][T14245] bridge_slave_0: entered promiscuous mode [ 1249.806967][T14245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.807173][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.807360][T14245] bridge_slave_1: entered allmulticast mode [ 1249.834906][T14245] bridge_slave_1: entered promiscuous mode [ 1251.072969][T14232] team0: Port device team_slave_0 added [ 1251.101092][T14367] syz_tun: left allmulticast mode [ 1251.109894][T14232] team0: Port device team_slave_1 added [ 1252.245566][T14245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.373450][T14417] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1252.381795][T14417] overlayfs: failed to resolve './file1': -2 [ 1252.956495][T14245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.957321][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.957335][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.957366][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.960110][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.960124][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.960152][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.186528][T14245] team0: Port device team_slave_0 added [ 1253.826839][ T4247] hsr_slave_0: left promiscuous mode [ 1254.156025][ T4247] hsr_slave_1: left promiscuous mode [ 1254.157035][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.277493][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.807630][ T4247] hsr_slave_0: left promiscuous mode [ 1255.862121][ T4247] hsr_slave_1: left promiscuous mode [ 1255.862854][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.011955][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.788020][T14447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1257.708919][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1257.752556][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1257.889851][T10235] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1258.052946][T10235] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1258.053028][T10235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.054930][T10235] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1258.054960][T10235] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1258.054990][T10235] usb 3-1: Manufacturer: syz [ 1258.109909][T10235] usb 3-1: config 0 descriptor?? [ 1258.231944][T10235] rc_core: IR keymap rc-hauppauge not found [ 1258.231989][T10235] Registered IR keymap rc-empty [ 1258.233257][T10235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1258.235833][T10235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 1258.244535][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 1258.336829][T14447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.337413][T14447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.349980][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 1259.004271][T14245] team0: Port device team_slave_1 added [ 1259.029092][T14232] hsr_slave_0: entered promiscuous mode [ 1259.030564][T14232] hsr_slave_1: entered promiscuous mode [ 1260.010262][T14440] syz_tun: entered allmulticast mode [ 1260.084357][T14245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.084376][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.084405][T14245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.086775][T14245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.086792][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.086822][T14245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.249935][T14245] hsr_slave_0: entered promiscuous mode [ 1261.252064][T14245] hsr_slave_1: entered promiscuous mode [ 1261.252947][T14245] debugfs: 'hsr0' already exists in 'hsr' [ 1261.301928][T14245] Cannot create hsr debugfs directory [ 1261.353996][ T5953] usb 3-1: USB disconnect, device number 40 [ 1261.739528][T14444] syz_tun: left allmulticast mode [ 1261.962091][T10235] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1262.466748][T10235] usb 5-1: Using ep0 maxpacket: 32 [ 1262.473281][T10235] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1262.473312][T10235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.473333][T10235] usb 5-1: Product: syz [ 1262.473348][T10235] usb 5-1: Manufacturer: syz [ 1262.473364][T10235] usb 5-1: SerialNumber: syz [ 1262.541191][T10235] usb 5-1: config 0 descriptor?? [ 1263.616527][T14489] lo speed is unknown, defaulting to 1000 [ 1264.179620][T10235] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 026 [ 1265.617411][T14496] i2c i2c-1: failure reading status [ 1265.620857][ T5953] usb 5-1: USB disconnect, device number 26 [ 1265.693436][T14232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1267.336365][T14232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1267.488063][T14232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1267.832449][T14232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1270.723814][ T36] audit: type=1800 audit(1774338115.679:5): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2274" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1275.125401][T14245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1275.171293][T14245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1275.809625][T14245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1275.994939][T14245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1279.854398][T14232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.895463][T14232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.906148][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.907835][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.929477][T14245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.931843][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.932108][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.047854][T14245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.086863][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.087053][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.920794][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.920885][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.214688][ T5884] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1281.234034][ T5884] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1284.591018][T14575] fido_id[14575]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1284.871756][T14245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.653379][T14598] binder: 14595:14598 ioctl c0306201 200000000640 returned -22 [ 1285.746538][T14245] veth0_vlan: entered promiscuous mode [ 1285.807297][T14245] veth1_vlan: entered promiscuous mode [ 1286.195758][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1286.327156][T14607] xt_policy: neither incoming nor outgoing policy selected [ 1287.129414][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1287.148711][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1287.149911][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1287.152055][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1288.059488][T14604] lo speed is unknown, defaulting to 1000 [ 1288.363790][T12253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1288.381729][T12253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1288.384740][T12253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1288.411108][T12253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1288.422149][T12253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1288.541057][T14619] xt_policy: neither incoming nor outgoing policy selected [ 1289.447197][ T5801] Bluetooth: hci1: command tx timeout [ 1290.780246][T14624] lo speed is unknown, defaulting to 1000 [ 1291.077470][T12253] Bluetooth: hci2: command tx timeout [ 1291.695967][ T5801] Bluetooth: hci1: command tx timeout [ 1291.874884][T14637] xt_policy: neither incoming nor outgoing policy selected [ 1292.838287][T14639] binder: 14638:14639 ioctl c0306201 0 returned -14 [ 1293.025443][T14616] lo speed is unknown, defaulting to 1000 [ 1293.295815][T12253] Bluetooth: hci2: command tx timeout [ 1294.279854][T12253] Bluetooth: hci1: command tx timeout [ 1295.193720][T14604] chnl_net:caif_netlink_parms(): no params data found [ 1295.515771][T12253] Bluetooth: hci2: command tx timeout [ 1295.621625][ T6402] bridge_slave_1: left allmulticast mode [ 1295.621654][ T6402] bridge_slave_1: left promiscuous mode [ 1295.621902][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.910263][ T6402] bridge_slave_0: left allmulticast mode [ 1295.910287][ T6402] bridge_slave_0: left promiscuous mode [ 1295.910464][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.841573][T12253] Bluetooth: hci1: command tx timeout [ 1296.901772][T14673] kAFS: unable to lookup cell '(,c¾Ì' [ 1297.473406][T14678] binder: 14677:14678 ioctl c0306201 0 returned -14 [ 1297.536130][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.589169][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.612488][ T6402] bond0 (unregistering): Released all slaves [ 1297.738063][T12253] Bluetooth: hci2: command tx timeout [ 1300.470586][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.470689][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.954594][ T6402] hsr_slave_0: left promiscuous mode [ 1301.003491][ T6402] hsr_slave_1: left promiscuous mode [ 1301.004287][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.045250][T14695] kAFS: unable to lookup cell '(,c¾Ì' [ 1301.071112][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.523796][T14702] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2310'. [ 1303.573779][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1303.659661][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1303.668923][ T9716] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1303.829141][ T9716] usb 3-1: Using ep0 maxpacket: 32 [ 1303.835109][ T9716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.835138][ T9716] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1303.835177][ T9716] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1303.835201][ T9716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.839418][ T9716] usb 3-1: config 0 descriptor?? [ 1304.342860][ T9716] usb 3-1: USB disconnect, device number 41 [ 1304.355687][T14604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.356056][T14604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.356801][T14604] bridge_slave_0: entered allmulticast mode [ 1304.426845][T14604] bridge_slave_0: entered promiscuous mode [ 1304.459088][T14604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.459215][T14604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.467825][T14604] bridge_slave_1: entered allmulticast mode [ 1304.485983][T14604] bridge_slave_1: entered promiscuous mode [ 1304.535072][T14715] binder: 14713:14715 ioctl c0306201 0 returned -14 [ 1304.580058][T14616] chnl_net:caif_netlink_parms(): no params data found [ 1304.655416][T14604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.698003][T14604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.478355][T14604] team0: Port device team_slave_0 added [ 1312.263283][T14604] team0: Port device team_slave_1 added [ 1312.915645][T14765] xt_policy: neither incoming nor outgoing policy selected [ 1314.176200][T14604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.176213][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.176235][T14604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.177078][T14616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.177529][T14616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.177744][T14616] bridge_slave_0: entered allmulticast mode [ 1314.182546][T14616] bridge_slave_0: entered promiscuous mode [ 1314.255686][T14604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.255703][T14604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.255729][T14604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.683831][T14616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.683963][T14616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.684219][T14616] bridge_slave_1: entered allmulticast mode [ 1314.715232][T14616] bridge_slave_1: entered promiscuous mode [ 1315.494501][T14616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.778870][T14616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.857273][T14604] hsr_slave_0: entered promiscuous mode [ 1316.859550][T14604] hsr_slave_1: entered promiscuous mode [ 1317.000651][T14616] team0: Port device team_slave_0 added [ 1317.041014][T14616] team0: Port device team_slave_1 added [ 1317.281018][T14616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.281036][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.281095][T14616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.645349][T14616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.645369][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.645400][T14616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.954711][T14823] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2335'. [ 1321.077483][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 1321.193518][T14834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1322.283418][T14845] kAFS: unable to lookup cell '(,c¾Ì' [ 1325.069951][T14616] hsr_slave_0: entered promiscuous mode [ 1325.072294][T14616] hsr_slave_1: entered promiscuous mode [ 1325.086673][T14616] debugfs: 'hsr0' already exists in 'hsr' [ 1325.086703][T14616] Cannot create hsr debugfs directory [ 1326.184360][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1326.347413][ T10] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1326.347435][ T10] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1326.347449][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.347462][ T10] usb 3-1: config 8 has no interface number 0 [ 1326.347493][ T10] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1326.355050][ T10] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1326.355071][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.355085][ T10] usb 3-1: Product: syz [ 1326.355123][ T10] usb 3-1: Manufacturer: syz [ 1326.357960][ T10] usb 3-1: SerialNumber: syz [ 1326.474041][T14856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1327.238717][T14857] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1327.319375][T14870] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2345'. [ 1328.236602][T14858] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1329.583007][T14878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1331.304240][ T5955] lo speed is unknown, defaulting to 1000 [ 1331.693003][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1333.759448][ T10] usb 3-1: USB disconnect, device number 42 [ 1334.246631][T14907] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2354'. [ 1335.630791][ T9716] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1336.201143][ T9716] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1336.201164][ T9716] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1336.201178][ T9716] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.201192][ T9716] usb 5-1: config 8 has no interface number 0 [ 1336.201223][ T9716] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1336.206967][ T9716] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1336.206988][ T9716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.207001][ T9716] usb 5-1: Product: syz [ 1336.207010][ T9716] usb 5-1: Manufacturer: syz [ 1336.207020][ T9716] usb 5-1: SerialNumber: syz [ 1336.654151][T14900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1338.641481][T14902] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1338.726224][T14905] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1342.924151][ T6402] bridge_slave_1: left allmulticast mode [ 1342.924182][ T6402] bridge_slave_1: left promiscuous mode [ 1342.924462][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.240998][ T6402] bridge_slave_0: left allmulticast mode [ 1343.241030][ T6402] bridge_slave_0: left promiscuous mode [ 1343.241289][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.335401][T14936] overlayfs: missing 'lowerdir' [ 1346.009002][ T10] usb 5-1: USB disconnect, device number 27 [ 1347.995953][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'. [ 1348.503272][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.866661][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.574353][ T6402] bond0 (unregistering): Released all slaves [ 1349.784831][T14946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1350.196534][ T6402] hsr_slave_0: left promiscuous mode [ 1350.217379][ T6402] hsr_slave_1: left promiscuous mode [ 1350.218509][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.241529][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.335787][ T6402] veth1_vlan: left promiscuous mode [ 1350.335993][ T6402] veth0_vlan: left promiscuous mode [ 1353.637609][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1353.646562][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1353.663416][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1353.664480][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1353.665630][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1353.844275][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1353.906064][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1355.367498][T14999] lo speed is unknown, defaulting to 1000 [ 1356.232838][ T5801] Bluetooth: hci5: command tx timeout [ 1358.125687][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 1358.442020][ T5801] Bluetooth: hci5: command tx timeout [ 1358.444530][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1358.463345][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1358.476370][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1358.487523][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1358.489121][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1361.196138][T12253] Bluetooth: hci6: command tx timeout [ 1361.196525][T12253] Bluetooth: hci5: command tx timeout [ 1361.269117][T15052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1362.564846][T15017] lo speed is unknown, defaulting to 1000 [ 1363.874377][ T5801] Bluetooth: hci5: command tx timeout [ 1363.876844][ T5801] Bluetooth: hci6: command tx timeout [ 1364.426447][T14999] chnl_net:caif_netlink_parms(): no params data found [ 1366.801925][T12253] Bluetooth: hci6: command tx timeout [ 1366.802590][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.802650][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.371195][T12253] Bluetooth: hci6: command tx timeout [ 1373.257540][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.257669][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.257934][T14999] bridge_slave_0: entered allmulticast mode [ 1373.260863][T14999] bridge_slave_0: entered promiscuous mode [ 1373.265346][T15017] chnl_net:caif_netlink_parms(): no params data found [ 1373.323459][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.323585][T14999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.323790][T14999] bridge_slave_1: entered allmulticast mode [ 1373.326901][T14999] bridge_slave_1: entered promiscuous mode [ 1375.724819][T15148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1377.484786][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1377.510634][T14999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.614906][T14999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.078225][T14999] team0: Port device team_slave_0 added [ 1378.328978][T14999] team0: Port device team_slave_1 added [ 1378.329468][T15017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.329763][T15017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.329922][T15017] bridge_slave_0: entered allmulticast mode [ 1378.342981][T15017] bridge_slave_0: entered promiscuous mode [ 1378.824018][T15017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.824145][T15017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.824508][T15017] bridge_slave_1: entered allmulticast mode [ 1378.864695][T15017] bridge_slave_1: entered promiscuous mode [ 1380.535212][T14999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.535225][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.535246][T14999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.750267][T14999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.750281][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.750302][T14999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.780912][T15017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.997241][T15017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.641410][T15017] team0: Port device team_slave_0 added [ 1382.725033][T14999] hsr_slave_0: entered promiscuous mode [ 1382.726006][T14999] hsr_slave_1: entered promiscuous mode [ 1382.726649][T14999] debugfs: 'hsr0' already exists in 'hsr' [ 1382.726665][T14999] Cannot create hsr debugfs directory [ 1382.729793][T15017] team0: Port device team_slave_1 added [ 1394.901343][ T36] audit: type=1800 audit(1774338232.495:6): pid=15220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2410" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1396.323581][T15221] lo speed is unknown, defaulting to 1000 [ 1396.675734][T15228] overlayfs: missing 'lowerdir' [ 1397.535623][T15017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.535640][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.535662][T15017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.571120][T15017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.571167][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.571241][T15017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.578646][ T5975] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1397.753082][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 1397.755348][ T5975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.755383][ T5975] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1397.755422][ T5975] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1397.755447][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.822290][ T5975] usb 5-1: config 0 descriptor?? [ 1398.084187][T15017] hsr_slave_0: entered promiscuous mode [ 1398.087871][T15017] hsr_slave_1: entered promiscuous mode [ 1398.088933][T15017] debugfs: 'hsr0' already exists in 'hsr' [ 1398.088961][T15017] Cannot create hsr debugfs directory [ 1398.396368][ T6402] bridge_slave_1: left allmulticast mode [ 1398.396398][ T6402] bridge_slave_1: left promiscuous mode [ 1398.396645][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.672596][ T6402] bridge_slave_0: left allmulticast mode [ 1399.672627][ T6402] bridge_slave_0: left promiscuous mode [ 1399.672862][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.913813][ T6402] bridge_slave_1: left allmulticast mode [ 1399.913847][ T6402] bridge_slave_1: left promiscuous mode [ 1399.914197][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.752318][ T6402] bridge_slave_0: left allmulticast mode [ 1401.752349][ T6402] bridge_slave_0: left promiscuous mode [ 1401.752594][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.755306][ T31] usb 5-1: USB disconnect, device number 28 [ 1402.104757][T15270] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2420'. [ 1403.466902][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.574324][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.639150][ T6402] bond0 (unregistering): Released all slaves [ 1403.808448][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.872575][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.916811][ T6402] bond0 (unregistering): Released all slaves [ 1405.437529][T15275] lo speed is unknown, defaulting to 1000 [ 1407.708190][ T6402] hsr_slave_0: left promiscuous mode [ 1407.720918][T15293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1407.911794][ T6402] hsr_slave_1: left promiscuous mode [ 1407.912812][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.934333][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.098292][T15304] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1409.856032][ T6402] hsr_slave_0: left promiscuous mode [ 1409.877391][ T6402] hsr_slave_1: left promiscuous mode [ 1409.878208][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.932077][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.722172][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1412.752496][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1412.946054][T15320] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.222820][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1413.265450][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1414.335563][T15336] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 1414.558691][T15336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1415.037737][ T5975] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1415.272856][T15340] bond3: (slave veth5): Enslaving as an active interface with an up link [ 1415.307900][ T5975] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1415.307931][ T5975] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1415.307951][ T5975] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.307972][ T5975] usb 3-1: config 8 has no interface number 0 [ 1415.308023][ T5975] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1415.395870][T15341] bond2: (slave dummy0): Releasing backup interface [ 1415.429842][ T5975] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1415.429865][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.429879][ T5975] usb 3-1: Product: syz [ 1415.429889][ T5975] usb 3-1: Manufacturer: syz [ 1415.429900][ T5975] usb 3-1: SerialNumber: syz [ 1415.506037][T15341] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1417.057160][T15361] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2440'. [ 1419.826904][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1419.849960][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1419.854119][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1419.877515][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1419.878561][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1421.349958][T12253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1421.447068][T15383] Set syz0 is full, maxelem 0 reached [ 1421.490316][T12253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1421.838730][T12253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1421.881760][T12253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1421.884604][T12253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1422.300295][T12253] Bluetooth: hci1: command tx timeout [ 1423.710555][T15379] lo speed is unknown, defaulting to 1000 [ 1423.715511][T15393] lo speed is unknown, defaulting to 1000 [ 1424.186986][T12253] Bluetooth: hci2: command tx timeout [ 1424.803915][T12253] Bluetooth: hci1: command tx timeout [ 1425.277159][T15403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.322602][T15370] lo speed is unknown, defaulting to 1000 [ 1425.769569][ T5955] usb 3-1: USB disconnect, device number 43 [ 1427.424392][T12253] Bluetooth: hci1: command tx timeout [ 1429.647075][T12253] Bluetooth: hci1: command tx timeout [ 1430.055396][T12253] Bluetooth: hci2: command tx timeout [ 1430.177387][ T6402] bridge_slave_1: left allmulticast mode [ 1430.177418][ T6402] bridge_slave_1: left promiscuous mode [ 1430.177703][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.523797][T15428] fuse: Bad value for 'fd' [ 1430.622990][ T6402] bridge_slave_0: left allmulticast mode [ 1430.623022][ T6402] bridge_slave_0: left promiscuous mode [ 1430.623284][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.055941][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1431.506646][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1431.506725][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.834795][T12253] Bluetooth: hci2: command tx timeout [ 1434.656988][T12253] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 1435.863409][T12253] Bluetooth: hci2: command tx timeout [ 1436.115620][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.260409][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.339565][ T6402] bond0 (unregistering): Released all slaves [ 1436.852266][T15463] xt_policy: neither incoming nor outgoing policy selected [ 1437.920965][T15462] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 1437.968952][T15462] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1438.697982][ T5975] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1438.821786][T15462] bond4: (slave veth7): Enslaving as an active interface with an up link [ 1438.870722][ T5975] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1438.871041][ T5975] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1438.871110][ T5975] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.871132][ T5975] usb 3-1: config 8 has no interface number 0 [ 1438.871181][ T5975] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1438.883660][ T5975] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1438.883726][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.883749][ T5975] usb 3-1: Product: syz [ 1438.883801][ T5975] usb 3-1: Manufacturer: syz [ 1438.883817][ T5975] usb 3-1: SerialNumber: syz [ 1440.053909][T15465] bond3: (slave dummy0): Releasing backup interface [ 1440.607696][T15465] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1442.208198][T15484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1444.163165][ T6402] hsr_slave_0: left promiscuous mode [ 1444.182688][ T6402] hsr_slave_1: left promiscuous mode [ 1444.184437][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.227582][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.980402][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1448.126910][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1448.350522][T15511] lo speed is unknown, defaulting to 1000 [ 1449.585038][ T5955] usb 3-1: USB disconnect, device number 44 [ 1449.951728][T15527] kAFS: unable to lookup cell '(,c¾Ì' [ 1451.452531][T15379] chnl_net:caif_netlink_parms(): no params data found [ 1451.565571][T15370] chnl_net:caif_netlink_parms(): no params data found [ 1452.004718][T15379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.005295][T15379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.005519][T15379] bridge_slave_0: entered allmulticast mode [ 1452.008452][T15379] bridge_slave_0: entered promiscuous mode [ 1453.065182][ T36] audit: type=1800 audit(1774338286.931:7): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2476" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1453.444518][T15379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.444665][T15379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.444893][T15379] bridge_slave_1: entered allmulticast mode [ 1453.447590][T15379] bridge_slave_1: entered promiscuous mode [ 1454.785604][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.785820][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.786197][T15370] bridge_slave_0: entered allmulticast mode [ 1454.814221][T15370] bridge_slave_0: entered promiscuous mode [ 1454.842368][T15379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.873892][T15379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.874618][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.874755][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.874904][T15370] bridge_slave_1: entered allmulticast mode [ 1454.918816][T15370] bridge_slave_1: entered promiscuous mode [ 1456.364839][T15379] team0: Port device team_slave_0 added [ 1457.080114][T15379] team0: Port device team_slave_1 added [ 1461.200841][T15370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.150128][T15370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.441112][T15379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.441131][T15379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.441161][T15379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.532899][T15379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.532921][T15379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.532942][T15379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.636273][T15370] team0: Port device team_slave_0 added [ 1463.652798][T15370] team0: Port device team_slave_1 added [ 1463.985529][T15379] hsr_slave_0: entered promiscuous mode [ 1463.990945][T15379] hsr_slave_1: entered promiscuous mode [ 1464.105056][T15370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.105074][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.105104][T15370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.131482][T15370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.131534][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.131616][T15370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.296004][T15602] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.691217][T15370] hsr_slave_0: entered promiscuous mode [ 1464.692934][T15370] hsr_slave_1: entered promiscuous mode [ 1464.694153][T15370] debugfs: 'hsr0' already exists in 'hsr' [ 1464.694178][T15370] Cannot create hsr debugfs directory [ 1466.738852][T15616] lo speed is unknown, defaulting to 1000 [ 1466.978879][T15628] dlm: Unknown command passed to DLM device : 3 [ 1466.978879][T15628] [ 1467.157611][T15628] random: crng reseeded on system resumption [ 1470.303829][ T6402] bridge_slave_1: left allmulticast mode [ 1470.303859][ T6402] bridge_slave_1: left promiscuous mode [ 1470.304213][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.288402][ T6402] bridge_slave_0: left allmulticast mode [ 1471.288434][ T6402] bridge_slave_0: left promiscuous mode [ 1471.288723][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.241754][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.257919][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.376529][ T6402] bond0 (unregistering): Released all slaves [ 1473.657672][T15676] overlayfs: missing 'workdir' [ 1475.084061][T15685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1475.329368][ T6402] hsr_slave_0: left promiscuous mode [ 1475.366547][T15690] dlm: Unknown command passed to DLM device : 3 [ 1475.366547][T15690] [ 1475.381124][ T6402] hsr_slave_1: left promiscuous mode [ 1475.444887][T15691] random: crng reseeded on system resumption [ 1476.654627][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.773562][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.712772][ T36] audit: type=1800 audit(1774338310.934:8): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2510" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1480.095354][ T5955] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1480.255915][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 1480.265833][ T5955] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1480.265856][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.265870][ T5955] usb 4-1: Product: syz [ 1480.265881][ T5955] usb 4-1: Manufacturer: syz [ 1480.265891][ T5955] usb 4-1: SerialNumber: syz [ 1480.283418][ T5955] usb 4-1: config 0 descriptor?? [ 1480.324695][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1480.395730][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1480.566460][ T5955] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 049 [ 1480.704450][ T5975] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1480.725595][T15693] batman_adv: batadv0: Adding interface: macsec1 [ 1480.725609][T15693] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.758194][T15693] batman_adv: batadv0: Interface activated: macsec1 [ 1480.763348][T15721] syz_tun: entered allmulticast mode [ 1480.844464][ T5975] usb 5-1: device descriptor read/64, error -71 [ 1481.114848][ T5975] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1481.283845][ T5975] usb 5-1: device descriptor read/64, error -71 [ 1481.399363][ T5975] usb usb5-port1: attempt power cycle [ 1481.489763][T15728] i2c i2c-1: failure reading status [ 1481.510630][T14563] usb 4-1: USB disconnect, device number 49 [ 1481.673021][T15379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1481.765355][T15379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1481.798786][ T5975] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1481.844760][ T5975] usb 5-1: device descriptor read/8, error -71 [ 1481.858380][T15379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1481.896809][T15379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1482.149973][ T5975] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1482.273703][ T5975] usb 5-1: device descriptor read/8, error -71 [ 1482.428866][ T5975] usb usb5-port1: unable to enumerate USB device [ 1484.466672][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1484.476564][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1484.477848][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1484.479260][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1484.479953][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1485.777068][T15379] kthread_run failed with err -4 [ 1485.790114][T15722] syz_tun: left allmulticast mode [ 1485.869987][T15758] lo speed is unknown, defaulting to 1000 [ 1486.324410][ T6402] bridge_slave_1: left allmulticast mode [ 1486.324440][ T6402] bridge_slave_1: left promiscuous mode [ 1486.324721][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.501992][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1486.748583][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1486.756935][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1486.758324][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1486.759664][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1486.773271][T12253] Bluetooth: hci1: command tx timeout [ 1486.997474][ T6402] bridge_slave_0: left allmulticast mode [ 1486.997502][ T6402] bridge_slave_0: left promiscuous mode [ 1486.997741][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.485803][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.966970][T15807] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1489.167723][T12253] Bluetooth: hci1: command tx timeout [ 1489.167807][T12253] Bluetooth: hci5: command tx timeout [ 1489.442511][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.405364][ T6402] bond0 (unregistering): Released all slaves [ 1490.684268][T15803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1492.181320][ T5801] Bluetooth: hci5: command tx timeout [ 1492.181360][ T5801] Bluetooth: hci1: command tx timeout [ 1494.680008][T12253] Bluetooth: hci1: command tx timeout [ 1494.680085][T12253] Bluetooth: hci5: command tx timeout [ 1495.226918][T15820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1496.258294][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1496.474194][ T6402] hsr_slave_0: left promiscuous mode [ 1496.564772][ T6402] hsr_slave_1: left promiscuous mode [ 1496.565893][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.589770][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.842226][ T5801] Bluetooth: hci5: command tx timeout [ 1497.018010][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1497.018086][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.257932][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1497.316355][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1498.069730][T15790] lo speed is unknown, defaulting to 1000 [ 1498.359981][T15862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1498.360402][T15862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1499.536729][T15758] chnl_net:caif_netlink_parms(): no params data found [ 1501.441598][T15758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.441687][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.441830][T15758] bridge_slave_0: entered allmulticast mode [ 1501.443478][T15758] bridge_slave_0: entered promiscuous mode [ 1501.505308][T15758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.505405][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.505581][T15758] bridge_slave_1: entered allmulticast mode [ 1501.507662][T15758] bridge_slave_1: entered promiscuous mode [ 1501.683086][T15758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.709334][T15758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.751280][T15758] team0: Port device team_slave_0 added [ 1502.754209][T15790] chnl_net:caif_netlink_parms(): no params data found [ 1503.746632][T15895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1503.930660][T15758] team0: Port device team_slave_1 added [ 1503.960705][T15900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1508.729814][T15758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.729833][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.729865][T15758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.051956][T15758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.051973][T15758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.052002][T15758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.545735][T15953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1512.790572][T15758] hsr_slave_0: entered promiscuous mode [ 1512.803471][T15758] hsr_slave_1: entered promiscuous mode [ 1512.804495][T15758] debugfs: 'hsr0' already exists in 'hsr' [ 1512.804521][T15758] Cannot create hsr debugfs directory [ 1513.086222][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.086371][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.086593][T15790] bridge_slave_0: entered allmulticast mode [ 1513.088971][T15790] bridge_slave_0: entered promiscuous mode [ 1513.159350][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.159450][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.159573][T15790] bridge_slave_1: entered allmulticast mode [ 1513.163464][T15790] bridge_slave_1: entered promiscuous mode [ 1514.956072][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.706428][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.494376][T15790] team0: Port device team_slave_0 added [ 1516.499876][T15790] team0: Port device team_slave_1 added [ 1516.648682][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.648791][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.648822][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.744980][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.744998][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.745026][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.429673][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 1519.550661][T15790] hsr_slave_0: entered promiscuous mode [ 1519.552171][T15790] hsr_slave_1: entered promiscuous mode [ 1519.553241][T15790] debugfs: 'hsr0' already exists in 'hsr' [ 1519.553267][T15790] Cannot create hsr debugfs directory [ 1519.797085][T15994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1521.333304][T15758] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1521.390015][ T6402] bridge_slave_1: left allmulticast mode [ 1521.390044][ T6402] bridge_slave_1: left promiscuous mode [ 1521.390307][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.644116][ T6402] bridge_slave_0: left allmulticast mode [ 1521.644145][ T6402] bridge_slave_0: left promiscuous mode [ 1521.644412][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.872731][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.406791][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.535937][ T6402] bond0 (unregistering): Released all slaves [ 1523.587771][T15758] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1523.779396][T15758] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1523.895023][T15758] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1525.810407][ T6402] hsr_slave_0: left promiscuous mode [ 1525.858988][ T6402] hsr_slave_1: left promiscuous mode [ 1525.860216][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.950253][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.238265][T16053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1526.492434][T16057] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1526.492878][T16057] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1530.508322][ T36] audit: type=1804 audit(1774338359.409:9): pid=16072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2581" name="bus" dev="ramfs" ino=47342 res=1 errno=0 [ 1530.845247][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1533.082102][ T36] audit: type=1800 audit(1774338360.784:10): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2582" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1533.141671][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1535.510784][T16095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1537.583431][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1539.312266][T15758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.382241][T15758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.475551][T15758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1539.475577][T15758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1539.572038][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.583576][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.588180][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.588328][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.279656][T15790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1540.510638][T15790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1540.575479][T15790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1540.631784][T15790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1540.955241][T15758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1541.029008][T16161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.261626][T15790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.336058][T15790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.378958][T14345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.386644][T14345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.447162][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.447302][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.043743][T15758] veth0_vlan: entered promiscuous mode [ 1542.113123][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.121745][T15758] veth1_vlan: entered promiscuous mode [ 1543.783395][T15758] veth0_macvtap: entered promiscuous mode [ 1545.643837][T15758] veth1_macvtap: entered promiscuous mode [ 1547.185240][T15790] veth0_vlan: entered promiscuous mode [ 1547.200439][T15790] veth1_vlan: entered promiscuous mode [ 1547.245940][T15790] veth0_macvtap: entered promiscuous mode [ 1547.255339][T15790] veth1_macvtap: entered promiscuous mode [ 1547.277165][T15790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.293968][T15790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.308771][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.309038][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.309081][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.309119][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.818921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.818943][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.223353][T12253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1548.242630][T12253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1548.244501][T12253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1548.247082][T12253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1548.247929][T12253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1549.388359][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 1549.847790][ T1373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.847830][ T1373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.815582][T12253] Bluetooth: hci1: command tx timeout [ 1551.148589][T16213] lo speed is unknown, defaulting to 1000 [ 1552.101129][T16213] chnl_net:caif_netlink_parms(): no params data found [ 1555.677595][T16245] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1555.967138][T12253] Bluetooth: hci1: command tx timeout [ 1556.299083][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.323089][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.324861][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.326124][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.328615][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1557.909447][T16244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.136651][ T5801] Bluetooth: hci1: command tx timeout [ 1558.462851][T16248] lo speed is unknown, defaulting to 1000 [ 1558.482628][T16213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.482831][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.483062][T16213] bridge_slave_0: entered allmulticast mode [ 1558.486198][T16213] bridge_slave_0: entered promiscuous mode [ 1558.552592][T16213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.552718][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.553106][T16213] bridge_slave_1: entered allmulticast mode [ 1558.563747][T16213] bridge_slave_1: entered promiscuous mode [ 1558.565512][ T5801] Bluetooth: hci2: command tx timeout [ 1560.907759][T12253] Bluetooth: hci2: command tx timeout [ 1560.907857][ T5801] Bluetooth: hci1: command tx timeout [ 1562.164860][ T6402] bridge_slave_1: left allmulticast mode [ 1562.164891][ T6402] bridge_slave_1: left promiscuous mode [ 1562.165160][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.801302][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1562.801378][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1565.966922][ T5801] Bluetooth: hci2: command tx timeout [ 1565.988008][ T6402] bridge_slave_0: left allmulticast mode [ 1565.988039][ T6402] bridge_slave_0: left promiscuous mode [ 1565.988290][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.453744][T16286] fuse: Bad value for 'fd' [ 1568.391305][ T5801] Bluetooth: hci2: command tx timeout [ 1568.811670][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.854282][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.882278][ T6402] bond0 (unregistering): Released all slaves [ 1569.038823][T16213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.112626][T16213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.211945][T16213] team0: Port device team_slave_0 added [ 1569.218458][T16213] team0: Port device team_slave_1 added [ 1569.300936][T16213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.300955][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.300984][T16213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.317092][T16213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.317111][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.317142][T16213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.469430][T16213] hsr_slave_0: entered promiscuous mode [ 1569.470933][T16213] hsr_slave_1: entered promiscuous mode [ 1578.269642][T16336] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2627'. [ 1583.301060][ T6402] hsr_slave_0: left promiscuous mode [ 1586.464210][ T6402] hsr_slave_1: left promiscuous mode [ 1586.465408][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.488823][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.989992][ T6402] veth1_macvtap: left promiscuous mode [ 1586.990124][ T6402] veth0_macvtap: left promiscuous mode [ 1586.990380][ T6402] veth1_vlan: left promiscuous mode [ 1586.990554][ T6402] veth0_vlan: left promiscuous mode [ 1587.619647][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1587.674500][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1588.753269][T16248] chnl_net:caif_netlink_parms(): no params data found [ 1590.478601][T16369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1591.222985][T16377] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2637'. [ 1592.499750][T16248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.499948][T16248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.500130][T16248] bridge_slave_0: entered allmulticast mode [ 1593.508846][T16248] bridge_slave_0: entered promiscuous mode [ 1593.773556][T16248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.773704][T16248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.773932][T16248] bridge_slave_1: entered allmulticast mode [ 1593.778283][T16248] bridge_slave_1: entered promiscuous mode [ 1595.695551][T16248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.778771][T16248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.978504][T16248] team0: Port device team_slave_0 added [ 1597.005197][T16248] team0: Port device team_slave_1 added [ 1597.622079][T16414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1597.757052][T16248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.757070][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.757103][T16248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.817462][T16427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1598.169628][T16434] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2647'. [ 1598.926941][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.263982][T16248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.263995][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.264017][T16248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.948985][T16455] dlm: Unknown command passed to DLM device : 3 [ 1599.948985][T16455] [ 1600.071100][T16248] hsr_slave_0: entered promiscuous mode [ 1600.120110][T16248] hsr_slave_1: entered promiscuous mode [ 1600.153429][T16248] debugfs: 'hsr0' already exists in 'hsr' [ 1600.153580][T16248] Cannot create hsr debugfs directory [ 1601.128772][T16460] random: crng reseeded on system resumption [ 1601.221684][ T36] audit: type=1800 audit(1774338425.570:11): pid=16447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2653" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1601.359393][T16461] batman_adv: batadv0: Adding interface: macsec1 [ 1601.359412][T16461] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.359449][T16461] batman_adv: batadv0: Interface activated: macsec1 [ 1603.072776][T16475] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2658'. [ 1604.007251][T16474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1610.477341][T16538] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1611.476547][T16485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1614.842009][ T6402] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.384734][T12253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1617.404107][T12253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1617.405475][T12253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1617.406855][T12253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1617.407608][T12253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1617.632789][ T6402] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.718215][T16563] lo speed is unknown, defaulting to 1000 [ 1617.926991][ T6402] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.386523][ T6402] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.057125][T16579] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2677'. [ 1620.205387][ T5801] Bluetooth: hci5: command tx timeout [ 1620.267035][T12253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1620.273615][T12253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1620.297691][T12253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1620.300779][T12253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1620.302136][T12253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1621.267637][T16584] lo speed is unknown, defaulting to 1000 [ 1622.604451][T12253] Bluetooth: hci5: command tx timeout [ 1622.604531][T12253] Bluetooth: hci1: command tx timeout [ 1623.070176][T16601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1623.352824][T16563] chnl_net:caif_netlink_parms(): no params data found [ 1623.567889][T16584] chnl_net:caif_netlink_parms(): no params data found [ 1623.923613][ T6402] bridge_slave_1: left allmulticast mode [ 1623.923643][ T6402] bridge_slave_1: left promiscuous mode [ 1623.923918][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.037903][ T6402] bridge_slave_0: left allmulticast mode [ 1624.037932][ T6402] bridge_slave_0: left promiscuous mode [ 1624.038255][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.827130][ T5801] Bluetooth: hci1: command tx timeout [ 1624.827169][ T5801] Bluetooth: hci5: command tx timeout [ 1627.049739][T12253] Bluetooth: hci5: command tx timeout [ 1627.049778][T12253] Bluetooth: hci1: command tx timeout [ 1627.445424][T16639] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2687'. [ 1628.109324][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1628.937119][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1628.938347][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1629.272512][ T5801] Bluetooth: hci1: command tx timeout [ 1631.030579][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.320126][ T6402] bond0 (unregistering): Released all slaves [ 1637.236899][T16684] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1638.158286][T16665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1639.430762][T16700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1639.798288][T10235] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1639.994523][T16698] syz_tun: entered allmulticast mode [ 1640.007579][T10235] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1640.007634][T10235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.009132][T10235] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1640.009161][T10235] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1640.009182][T10235] usb 4-1: Manufacturer: syz [ 1640.069927][T10235] usb 4-1: config 0 descriptor?? [ 1640.103221][T16563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.103316][T16563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.103542][T16563] bridge_slave_0: entered allmulticast mode [ 1640.105330][T16563] bridge_slave_0: entered promiscuous mode [ 1640.233857][T16584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.234009][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.234280][T16584] bridge_slave_0: entered allmulticast mode [ 1640.243491][T16584] bridge_slave_0: entered promiscuous mode [ 1640.249794][T16563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.249919][T16563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.250160][T16563] bridge_slave_1: entered allmulticast mode [ 1640.252935][T16563] bridge_slave_1: entered promiscuous mode [ 1640.264110][T16584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.264240][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.264510][T16584] bridge_slave_1: entered allmulticast mode [ 1640.274908][T16584] bridge_slave_1: entered promiscuous mode [ 1640.313611][T16695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.314196][T16695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.588973][T10235] rc_core: IR keymap rc-hauppauge not found [ 1640.588995][T10235] Registered IR keymap rc-empty [ 1640.590696][T10235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1640.595709][T10235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 1640.650865][T10235] usb 4-1: USB disconnect, device number 50 [ 1640.778861][ T6402] hsr_slave_0: left promiscuous mode [ 1640.813479][ T6402] hsr_slave_1: left promiscuous mode [ 1640.814600][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.814626][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.845256][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.845324][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.922505][ T6402] veth1_macvtap: left promiscuous mode [ 1640.922627][ T6402] veth0_macvtap: left promiscuous mode [ 1640.922883][ T6402] veth1_vlan: left promiscuous mode [ 1640.923060][ T6402] veth0_vlan: left promiscuous mode [ 1644.618254][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1644.936556][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1645.809789][T16731] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2707'. [ 1647.406489][T16694] syz_tun: left allmulticast mode [ 1648.297315][T16740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1651.795662][T16563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.799856][T16584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.807501][T16584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.837372][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 1651.860316][T16563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.261597][T16584] team0: Port device team_slave_0 added [ 1652.268207][T16563] team0: Port device team_slave_0 added [ 1652.271943][T16584] team0: Port device team_slave_1 added [ 1652.308917][T16563] team0: Port device team_slave_1 added [ 1652.409196][T16764] lo speed is unknown, defaulting to 1000 [ 1652.542434][T16771] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2717'. [ 1653.627322][T16584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.627341][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.627371][T16584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.632748][T16563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.632765][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.632795][T16563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.646019][T16584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.646065][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.646134][T16584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.046288][T16563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.046302][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.046323][T16563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.047367][T16779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1655.313866][T16584] hsr_slave_0: entered promiscuous mode [ 1655.321689][T16584] hsr_slave_1: entered promiscuous mode [ 1655.322697][T16584] debugfs: 'hsr0' already exists in 'hsr' [ 1655.322722][T16584] Cannot create hsr debugfs directory [ 1655.343534][T16783] syz_tun: entered allmulticast mode [ 1655.348905][T16783] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1655.622288][T16563] hsr_slave_0: entered promiscuous mode [ 1655.623806][T16563] hsr_slave_1: entered promiscuous mode [ 1655.628790][T16563] debugfs: 'hsr0' already exists in 'hsr' [ 1655.628869][T16563] Cannot create hsr debugfs directory [ 1655.656266][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1655.904467][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1655.904529][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.906051][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1655.906079][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1655.906100][ T10] usb 3-1: Manufacturer: syz [ 1655.974663][ T10] usb 3-1: config 0 descriptor?? [ 1658.034240][ T10] rc_core: IR keymap rc-hauppauge not found [ 1658.034372][ T10] Registered IR keymap rc-empty [ 1658.193341][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1658.196505][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.197118][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.209135][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 1659.356413][ T10] usb 3-1: USB disconnect, device number 45 [ 1667.275774][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'. [ 1667.524191][T16782] syz_tun: left allmulticast mode [ 1667.836124][T16838] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2727'. [ 1670.462446][T16853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1673.036017][ T36] audit: type=1800 audit(1774338491.431:12): pid=16849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2729" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1673.686785][T16584] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1673.761744][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1673.956099][T16584] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1677.071116][T16584] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1678.867885][T16584] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1679.574600][T16885] lo speed is unknown, defaulting to 1000 [ 1679.817660][T16880] syz_tun: entered allmulticast mode [ 1679.839438][ T6402] bridge_slave_1: left allmulticast mode [ 1679.839472][ T6402] bridge_slave_1: left promiscuous mode [ 1679.839743][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.842826][T16879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1679.918469][ T6402] bridge_slave_0: left allmulticast mode [ 1679.918493][ T6402] bridge_slave_0: left promiscuous mode [ 1679.918681][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.010878][ T6402] bridge_slave_1: left allmulticast mode [ 1680.010907][ T6402] bridge_slave_1: left promiscuous mode [ 1680.011075][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.076293][ T6402] bridge_slave_0: left allmulticast mode [ 1680.076317][ T6402] bridge_slave_0: left promiscuous mode [ 1680.076506][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.202170][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1680.363225][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.364930][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1680.364993][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.366233][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1680.366254][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1680.366269][ T10] usb 3-1: Manufacturer: syz [ 1680.370157][ T10] usb 3-1: config 0 descriptor?? [ 1680.475974][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.501298][ T10] rc_core: IR keymap rc-hauppauge not found [ 1680.501318][ T10] Registered IR keymap rc-empty [ 1680.503306][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1680.506636][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 1680.522036][ T6402] bond0 (unregistering): Released all slaves [ 1680.642081][T16884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.642683][T16884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.758826][ T6402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.876228][ T6402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.923540][ T6402] bond0 (unregistering): Released all slaves [ 1680.968282][T12253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1681.122534][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.135902][T12253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1681.156159][T12253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1681.180635][T12253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1681.183554][T12253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1681.271535][T14563] usb 3-1: USB disconnect, device number 46 [ 1681.398166][T16877] syz_tun: left allmulticast mode [ 1681.536843][T16896] lo speed is unknown, defaulting to 1000 [ 1681.806973][T16907] autofs: Unknown parameter '0x0000000000000000' [ 1682.561097][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.614804][T16584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.644546][ T1373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.645920][ T1373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.688255][ T1373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.689396][ T1373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.172936][ T6402] hsr_slave_0: left promiscuous mode [ 1683.226204][ T6402] hsr_slave_1: left promiscuous mode [ 1683.227283][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.280779][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.461454][T12253] Bluetooth: hci2: command tx timeout [ 1683.515232][ T6402] hsr_slave_0: left promiscuous mode [ 1683.557697][ T6402] hsr_slave_1: left promiscuous mode [ 1683.558745][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.634592][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1684.051269][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1684.104743][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1684.988377][T16928] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2743'. [ 1685.340321][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1685.377235][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1685.378586][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1685.379848][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1685.380651][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1686.185394][T12253] Bluetooth: hci2: command tx timeout [ 1687.577809][ T5801] Bluetooth: hci1: command tx timeout [ 1688.779401][ T5801] Bluetooth: hci2: command tx timeout [ 1690.199954][ T36] audit: type=1800 audit(1774338508.846:13): pid=16944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2746" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1690.877783][ T5801] Bluetooth: hci1: command tx timeout [ 1690.985249][ T5801] Bluetooth: hci2: command tx timeout [ 1693.079461][ T5801] Bluetooth: hci1: command tx timeout [ 1693.317049][T16957] autofs: Unknown parameter '0x0000000000000000' [ 1693.829877][T16960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1694.397248][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1694.397755][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1694.864143][ T6402] team0 (unregistering): Port device team_slave_1 removed [ 1694.971021][ T6402] team0 (unregistering): Port device team_slave_0 removed [ 1695.077080][T10235] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1695.219261][T16959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1695.280574][T10235] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1695.280640][T10235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.282354][T10235] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1695.282381][T10235] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1695.282402][T10235] usb 3-1: Manufacturer: syz [ 1695.349866][T10235] usb 3-1: config 0 descriptor?? [ 1695.401129][ T5801] Bluetooth: hci1: command tx timeout [ 1695.894598][T10235] rc_core: IR keymap rc-hauppauge not found [ 1695.894621][T10235] Registered IR keymap rc-empty [ 1695.900111][T16960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.975605][T16960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.983476][T10235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1696.002299][T10235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 1696.461832][T16952] syz_tun: entered allmulticast mode [ 1696.476076][ T9716] usb 3-1: USB disconnect, device number 47 [ 1696.740593][T16896] chnl_net:caif_netlink_parms(): no params data found [ 1696.761129][T16948] syz_tun: left allmulticast mode [ 1697.577761][T16921] lo speed is unknown, defaulting to 1000 [ 1698.081236][T16896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.081451][T16896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.081727][T16896] bridge_slave_0: entered allmulticast mode [ 1698.084609][T16896] bridge_slave_0: entered promiscuous mode [ 1698.384168][T16995] autofs: Unknown parameter '0x0000000000000000' [ 1699.153215][T16896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.153381][T16896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.153740][T16896] bridge_slave_1: entered allmulticast mode [ 1699.157907][T16896] bridge_slave_1: entered promiscuous mode [ 1701.875889][T16896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.926488][T16896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.251097][T16896] team0: Port device team_slave_0 added [ 1702.322686][T16896] team0: Port device team_slave_1 added [ 1710.829360][T16896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.829488][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.829519][T16896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.856488][T16896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.856541][T16896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.869073][T16896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.171233][T14563] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1711.446191][T14563] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1711.446254][T14563] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.454085][T14563] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1711.454116][T14563] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1711.454135][T14563] usb 5-1: Manufacturer: syz [ 1711.466927][T14563] usb 5-1: config 0 descriptor?? [ 1711.797242][T17027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.797855][T17027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.827442][T14563] rc_core: IR keymap rc-hauppauge not found [ 1711.827464][T14563] Registered IR keymap rc-empty [ 1711.829359][T14563] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1711.843613][T14563] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 1711.908842][T14563] usb 5-1: USB disconnect, device number 33 [ 1712.952369][T17047] autofs: Unknown parameter '0x0000000000000000' [ 1713.951044][T16896] hsr_slave_0: entered promiscuous mode [ 1713.952444][T16896] hsr_slave_1: entered promiscuous mode [ 1714.106352][T16921] chnl_net:caif_netlink_parms(): no params data found [ 1715.351683][T17063] random: crng reseeded on system resumption [ 1715.606687][ T5884] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1716.107222][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 1716.124753][ T5884] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1716.124782][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.124815][ T5884] usb 4-1: Product: syz [ 1716.124830][ T5884] usb 4-1: Manufacturer: syz [ 1716.124844][ T5884] usb 4-1: SerialNumber: syz [ 1716.175750][ T5884] usb 4-1: config 0 descriptor?? [ 1716.268396][T16921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.268519][T16921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.268772][T16921] bridge_slave_0: entered allmulticast mode [ 1716.271501][T16921] bridge_slave_0: entered promiscuous mode [ 1716.335331][T16921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.335474][T16921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.335671][T16921] bridge_slave_1: entered allmulticast mode [ 1716.339508][T16921] bridge_slave_1: entered promiscuous mode [ 1716.423418][T17077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1716.641106][ T5884] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 051 [ 1716.738199][T17081] autofs: Unknown parameter '0x0000000000000000' [ 1716.891044][ T5955] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1717.595066][T16921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.701861][ T5955] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1717.701921][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.762904][ T5955] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1717.762936][ T5955] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1717.762957][ T5955] usb 3-1: Manufacturer: syz [ 1717.809390][ T5955] usb 3-1: config 0 descriptor?? [ 1717.880455][T16921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.009319][ T5955] rc_core: IR keymap rc-hauppauge not found [ 1718.009342][ T5955] Registered IR keymap rc-empty [ 1718.011087][ T5955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1718.022196][ T5955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 1718.076624][T17074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.078530][T17074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.121835][ T31] usb 3-1: USB disconnect, device number 48 [ 1718.158306][T17082] i2c i2c-1: failure reading status [ 1718.191659][T14563] usb 4-1: USB disconnect, device number 51 [ 1718.448988][T16921] team0: Port device team_slave_0 added [ 1718.520036][T16921] team0: Port device team_slave_1 added [ 1718.728517][T17059] ------------[ cut here ]------------ [ 1718.728534][T17059] kcov->t != t [ 1718.728550][T17059] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.3.2775/17059 [ 1718.728700][T17059] Modules linked in: [ 1718.728744][T17059] CPU: 1 UID: 0 PID: 17059 Comm: syz.3.2775 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1718.728775][T17059] Tainted: [L]=SOFTLOCKUP [ 1718.728783][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1718.728809][T17059] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1718.728838][T17059] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 1718.728858][T17059] RSP: 0018:ffffc90004267d20 EFLAGS: 00010283 [ 1718.728877][T17059] RAX: 3941af4a9e904e00 RBX: ffff888035eb5000 RCX: 0000000000000000 [ 1718.728893][T17059] RDX: 00000000b9174e89 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 1718.728909][T17059] RBP: ffffc90004267e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 1718.728925][T17059] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 1718.728942][T17059] R13: 0000000000000000 R14: ffff888035eb5008 R15: ffff8880301d8000 [ 1718.728957][T17059] FS: 00005555675f1500(0000) GS:ffff888126439000(0000) knlGS:0000000000000000 [ 1718.728976][T17059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1718.728991][T17059] CR2: 0000001b2f21dff8 CR3: 000000007c652000 CR4: 00000000003526f0 [ 1718.729014][T17059] Call Trace: [ 1718.729024][T17059] [ 1718.729036][T17059] do_exit+0x150/0x23c0 [ 1718.729090][T17059] ? __pfx_do_exit+0x10/0x10 [ 1718.729115][T17059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1718.729273][T17059] ? __rcu_read_unlock+0x83/0xe0 [ 1718.729318][T17059] ? rt_spin_unlock+0x160/0x200 [ 1718.729363][T17059] do_group_exit+0x21b/0x2d0 [ 1718.729394][T17059] __x64_sys_exit_group+0x3f/0x40 [ 1718.729418][T17059] x64_sys_call+0x221a/0x2240 [ 1718.729459][T17059] do_syscall_64+0x14d/0xf80 [ 1718.729517][T17059] ? trace_irq_disable+0x3b/0x150 [ 1718.729549][T17059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.729592][T17059] ? clear_bhb_loop+0x40/0x90 [ 1718.729621][T17059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.729643][T17059] RIP: 0033:0x7f47e27dc799 [ 1718.729667][T17059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.729686][T17059] RSP: 002b:00007fff670149c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1718.729706][T17059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47e27dc799 [ 1718.729722][T17059] RDX: 00007f47e1a39000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.729735][T17059] RBP: 00007fff67014a2c R08: 0000000000000000 R09: 00000000000927c0 [ 1718.729749][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000274 [ 1718.729762][T17059] R13: 00000000000927c0 R14: 000000000018cf72 R15: 00007fff67014a80 [ 1718.729796][T17059] [ 1718.729820][T17059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1718.729839][T17059] CPU: 1 UID: 0 PID: 17059 Comm: syz.3.2775 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1718.729868][T17059] Tainted: [L]=SOFTLOCKUP [ 1718.729876][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1718.729888][T17059] Call Trace: [ 1718.729896][T17059] [ 1718.729905][T17059] vpanic+0x56c/0xa60 [ 1718.729949][T17059] ? __pfx__printk+0x10/0x10 [ 1718.729974][T17059] ? __pfx_vpanic+0x10/0x10 [ 1718.730003][T17059] ? is_bpf_text_address+0x292/0x2b0 [ 1718.730045][T17059] ? is_bpf_text_address+0x26/0x2b0 [ 1718.730096][T17059] panic+0xc5/0xd0 [ 1718.730144][T17059] ? __pfx_panic+0x10/0x10 [ 1718.730194][T17059] __warn+0x315/0x4f0 [ 1718.730233][T17059] ? kcov_task_exit+0xf5/0x160 [ 1718.730261][T17059] ? kcov_task_exit+0xf5/0x160 [ 1718.730288][T17059] __report_bug+0x29a/0x540 [ 1718.730373][T17059] ? kcov_task_exit+0xf5/0x160 [ 1718.730399][T17059] ? __pfx___report_bug+0x10/0x10 [ 1718.730430][T17059] ? __cgroup_account_cputime+0xe5/0x120 [ 1718.730465][T17059] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1718.730497][T17059] ? do_raw_spin_lock+0x12b/0x2f0 [ 1718.730543][T17059] ? kcov_task_exit+0xf5/0x160 [ 1718.730568][T17059] report_bug+0x16a/0x220 [ 1718.730600][T17059] ? kcov_task_exit+0xf5/0x160 [ 1718.730624][T17059] ? kcov_task_exit+0xf7/0x160 [ 1718.730649][T17059] handle_bug+0x9c/0x200 [ 1718.730694][T17059] exc_invalid_op+0x1a/0x50 [ 1718.730719][T17059] asm_exc_invalid_op+0x1a/0x20 [ 1718.730739][T17059] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 1718.730765][T17059] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 1718.730783][T17059] RSP: 0018:ffffc90004267d20 EFLAGS: 00010283 [ 1718.730818][T17059] RAX: 3941af4a9e904e00 RBX: ffff888035eb5000 RCX: 0000000000000000 [ 1718.730833][T17059] RDX: 00000000b9174e89 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 1718.730848][T17059] RBP: ffffc90004267e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 1718.730863][T17059] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 1718.730878][T17059] R13: 0000000000000000 R14: ffff888035eb5008 R15: ffff8880301d8000 [ 1718.730900][T17059] ? rt_spin_lock+0x1e0/0x400 [ 1718.730935][T17059] do_exit+0x150/0x23c0 [ 1718.730967][T17059] ? __pfx_do_exit+0x10/0x10 [ 1718.730989][T17059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1718.731020][T17059] ? __rcu_read_unlock+0x83/0xe0 [ 1718.731051][T17059] ? rt_spin_unlock+0x160/0x200 [ 1718.731080][T17059] do_group_exit+0x21b/0x2d0 [ 1718.731127][T17059] __x64_sys_exit_group+0x3f/0x40 [ 1718.731152][T17059] x64_sys_call+0x221a/0x2240 [ 1718.731172][T17059] do_syscall_64+0x14d/0xf80 [ 1718.731192][T17059] ? trace_irq_disable+0x3b/0x150 [ 1718.731216][T17059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.731249][T17059] ? clear_bhb_loop+0x40/0x90 [ 1718.731274][T17059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.731295][T17059] RIP: 0033:0x7f47e27dc799 [ 1718.731312][T17059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.731329][T17059] RSP: 002b:00007fff670149c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1718.731348][T17059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47e27dc799 [ 1718.731362][T17059] RDX: 00007f47e1a39000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1718.731375][T17059] RBP: 00007fff67014a2c R08: 0000000000000000 R09: 00000000000927c0 [ 1718.731388][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000274 [ 1718.731401][T17059] R13: 00000000000927c0 R14: 000000000018cf72 R15: 00007fff67014a80 [ 1718.731432][T17059] [ 1718.732030][T17059] Kernel Offset: disabled