last executing test programs: 1m4.971406134s ago: executing program 2 (id=1686): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) 1m3.688045362s ago: executing program 2 (id=1692): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c0003"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1m2.148947098s ago: executing program 2 (id=1697): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 1m1.681679712s ago: executing program 2 (id=1701): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m1.358412863s ago: executing program 2 (id=1704): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') 58.058336494s ago: executing program 2 (id=1722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00R'], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @multicast}, 0x10) 57.469239871s ago: executing program 32 (id=1722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00R'], 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @multicast}, 0x10) 39.254551169s ago: executing program 3 (id=1795): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 38.644619517s ago: executing program 3 (id=1796): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0xac, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 37.461931612s ago: executing program 3 (id=1798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) 37.100239187s ago: executing program 3 (id=1800): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) 36.358188456s ago: executing program 3 (id=1801): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000440)={'sit0\x00', 0x0}) 32.191488113s ago: executing program 0 (id=1809): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, 0x0, 0xffe) 31.15197741s ago: executing program 4 (id=1810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b00000000000000029000000360000006712000000000000040103061c8b5ad07e70126777779300ce2e0cea2b880000000000000000000000c2040000cd160401040401070502000404010f072000000003060c0600040000000000000072090000000000000000000000000000c910fe80000000000000000000000000001f0728000000010806feff02000000000000000800000000000000ff0700000066000001000000000000000000000013000001"], 0x1b0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) 31.11907289s ago: executing program 3 (id=1812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x942, 0x0, 0x9, 0x100000009, 0x8, 0xd8000000, 0x400003}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0xb, &(0x7f0000004200)) io_submit(0x0, 0x0, &(0x7f0000004540)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) 30.678777791s ago: executing program 4 (id=1813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x4, 0x0, 0x6, 0x7fff}, {0x0, 0x49, 0x80, 0x6}, {0x6, 0x6, 0xe, 0x1000}, {0x6, 0x8, 0x9}]}, 0x10) 29.74209469s ago: executing program 0 (id=1815): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000000002"], 0x50) 29.73270606s ago: executing program 4 (id=1816): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0xc2040, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) chdir(&(0x7f0000000080)='./file1\x00') gettid() r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x3, r3, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 28.695946942s ago: executing program 0 (id=1817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, 0x0) 28.621795118s ago: executing program 1 (id=1818): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 28.030829059s ago: executing program 1 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) 27.973812532s ago: executing program 0 (id=1820): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x30}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 27.260668306s ago: executing program 4 (id=1821): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ffb}]}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 25.8846154s ago: executing program 1 (id=1822): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) 19.599571082s ago: executing program 0 (id=1823): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 19.346355564s ago: executing program 4 (id=1824): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 19.027543068s ago: executing program 0 (id=1825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 19.019059359s ago: executing program 1 (id=1826): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 18.907747925s ago: executing program 4 (id=1827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) 18.32338828s ago: executing program 1 (id=1828): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) 16.691556228s ago: executing program 1 (id=1829): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.505475095s ago: executing program 33 (id=1812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x942, 0x0, 0x9, 0x100000009, 0x8, 0xd8000000, 0x400003}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0xb, &(0x7f0000004200)) io_submit(0x0, 0x0, &(0x7f0000004540)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) 3.76081441s ago: executing program 34 (id=1825): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.076825186s ago: executing program 35 (id=1827): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) 0s ago: executing program 36 (id=1829): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 80.427656][ T5794] cgroup: Unknown subsys name 'net' [ 80.686907][ T5794] cgroup: Unknown subsys name 'cpuset' [ 80.742840][ T5794] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.627488][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.945687][ T10] cfg80211: failed to load regulatory.db [ 88.406798][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.412388][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.431531][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.442572][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.443570][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.444195][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.445791][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.446417][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.447931][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.448254][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.559064][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.570652][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.579735][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.602019][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.616632][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.619567][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.620282][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.623752][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.643973][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.645057][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.695498][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.731723][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.733652][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.748422][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.754305][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.550263][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 89.564146][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 89.689050][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 89.920523][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 90.033211][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 90.512836][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.512989][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.513557][ T5813] bridge_slave_0: entered allmulticast mode [ 90.515890][ T5813] bridge_slave_0: entered promiscuous mode [ 90.522329][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.522451][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.522996][ T5810] bridge_slave_0: entered allmulticast mode [ 90.525625][ T5810] bridge_slave_0: entered promiscuous mode [ 90.545192][ T5818] Bluetooth: hci1: command tx timeout [ 90.623690][ T5818] Bluetooth: hci0: command tx timeout [ 90.657164][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.657257][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.657376][ T5813] bridge_slave_1: entered allmulticast mode [ 90.658941][ T5813] bridge_slave_1: entered promiscuous mode [ 90.663706][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.663841][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.664022][ T5810] bridge_slave_1: entered allmulticast mode [ 90.666598][ T5810] bridge_slave_1: entered promiscuous mode [ 90.702121][ T5815] Bluetooth: hci3: command tx timeout [ 90.702406][ T5818] Bluetooth: hci2: command tx timeout [ 90.783233][ T5818] Bluetooth: hci4: command tx timeout [ 90.983387][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.984444][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.984633][ T5817] bridge_slave_0: entered allmulticast mode [ 90.986172][ T5817] bridge_slave_0: entered promiscuous mode [ 91.253096][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.253252][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.253433][ T5817] bridge_slave_1: entered allmulticast mode [ 91.255184][ T5817] bridge_slave_1: entered promiscuous mode [ 91.377617][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.380802][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.513086][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.513234][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.515883][ T5816] bridge_slave_0: entered allmulticast mode [ 91.517654][ T5816] bridge_slave_0: entered promiscuous mode [ 91.523750][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.528217][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.603305][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.603433][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.603595][ T5825] bridge_slave_0: entered allmulticast mode [ 91.605461][ T5825] bridge_slave_0: entered promiscuous mode [ 91.608070][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.608194][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.608358][ T5816] bridge_slave_1: entered allmulticast mode [ 91.611082][ T5816] bridge_slave_1: entered promiscuous mode [ 91.906780][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.907029][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.907149][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.907310][ T5825] bridge_slave_1: entered allmulticast mode [ 91.909145][ T5825] bridge_slave_1: entered promiscuous mode [ 92.176134][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.305863][ T5813] team0: Port device team_slave_0 added [ 92.308034][ T5810] team0: Port device team_slave_0 added [ 92.436544][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.438736][ T5813] team0: Port device team_slave_1 added [ 92.440602][ T5810] team0: Port device team_slave_1 added [ 92.506104][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.509035][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.623208][ T5818] Bluetooth: hci1: command tx timeout [ 92.625570][ T5817] team0: Port device team_slave_0 added [ 92.628651][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.702304][ T5818] Bluetooth: hci0: command tx timeout [ 92.792115][ T5818] Bluetooth: hci2: command tx timeout [ 92.792155][ T5818] Bluetooth: hci3: command tx timeout [ 92.834880][ T5817] team0: Port device team_slave_1 added [ 92.862146][ T5815] Bluetooth: hci4: command tx timeout [ 92.964493][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.964505][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.964518][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.966657][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.966672][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.966696][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.404851][ T5816] team0: Port device team_slave_0 added [ 93.406060][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.406095][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.406125][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.407189][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.407199][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.407212][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.498733][ T5825] team0: Port device team_slave_0 added [ 93.506514][ T5816] team0: Port device team_slave_1 added [ 93.533005][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.533020][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.533045][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.537314][ T5825] team0: Port device team_slave_1 added [ 93.615426][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.615437][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.615450][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.823748][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.823764][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.823788][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.976423][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.976443][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.976469][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.977806][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.977820][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.977844][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.133683][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.133700][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.133726][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.158008][ T5813] hsr_slave_0: entered promiscuous mode [ 94.159501][ T5813] hsr_slave_1: entered promiscuous mode [ 94.308684][ T5810] hsr_slave_0: entered promiscuous mode [ 94.309706][ T5810] hsr_slave_1: entered promiscuous mode [ 94.310542][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 94.310640][ T5810] Cannot create hsr debugfs directory [ 94.427331][ T5817] hsr_slave_0: entered promiscuous mode [ 94.428269][ T5817] hsr_slave_1: entered promiscuous mode [ 94.429082][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 94.429100][ T5817] Cannot create hsr debugfs directory [ 94.702431][ T5815] Bluetooth: hci1: command tx timeout [ 94.782321][ T5815] Bluetooth: hci0: command tx timeout [ 94.862193][ T5815] Bluetooth: hci3: command tx timeout [ 94.862229][ T5815] Bluetooth: hci2: command tx timeout [ 94.878976][ T5816] hsr_slave_0: entered promiscuous mode [ 94.880466][ T5816] hsr_slave_1: entered promiscuous mode [ 94.881384][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 94.881408][ T5816] Cannot create hsr debugfs directory [ 94.943328][ T5818] Bluetooth: hci4: command tx timeout [ 95.069191][ T5825] hsr_slave_0: entered promiscuous mode [ 95.070006][ T5825] hsr_slave_1: entered promiscuous mode [ 95.070541][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 95.070560][ T5825] Cannot create hsr debugfs directory [ 96.414394][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.461430][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.476587][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.529609][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.631070][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.671464][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.707682][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.761477][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.782115][ T5818] Bluetooth: hci1: command tx timeout [ 96.862879][ T5818] Bluetooth: hci0: command tx timeout [ 96.870742][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.925263][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.942164][ T5818] Bluetooth: hci2: command tx timeout [ 96.942200][ T5818] Bluetooth: hci3: command tx timeout [ 96.965108][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.014988][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.024452][ T5818] Bluetooth: hci4: command tx timeout [ 97.165932][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.221039][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.264767][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.317397][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.459571][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.508438][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.509401][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.559285][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.579379][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.674233][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.699756][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.721861][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.722966][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.765721][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.765837][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.806289][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.846609][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.849726][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.850119][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.900128][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.900305][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.960346][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.984452][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.009752][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.009878][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.059614][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.059754][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.126731][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.146380][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.179400][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.179656][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.244259][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.244420][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.283966][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.328842][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.329040][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.376613][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.376752][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.477224][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.726751][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.814434][ T5813] veth0_vlan: entered promiscuous mode [ 98.861095][ T5813] veth1_vlan: entered promiscuous mode [ 98.993970][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.057829][ T5813] veth0_macvtap: entered promiscuous mode [ 99.099424][ T5813] veth1_macvtap: entered promiscuous mode [ 99.250422][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.299743][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.317216][ T5817] veth0_vlan: entered promiscuous mode [ 99.333145][ T1302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338279][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.340482][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.340675][ T1302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.350511][ T1302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.370546][ T1302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.386910][ T5817] veth1_vlan: entered promiscuous mode [ 99.660040][ T5810] veth0_vlan: entered promiscuous mode [ 99.707212][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.707237][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.723503][ T5817] veth0_macvtap: entered promiscuous mode [ 99.767356][ T5810] veth1_vlan: entered promiscuous mode [ 99.775383][ T5817] veth1_macvtap: entered promiscuous mode [ 99.780281][ T5816] veth0_vlan: entered promiscuous mode [ 99.784040][ T5825] veth0_vlan: entered promiscuous mode [ 99.834848][ T5816] veth1_vlan: entered promiscuous mode [ 99.838143][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.838162][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.838632][ T5825] veth1_vlan: entered promiscuous mode [ 99.883028][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.926997][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.949458][ T5810] veth0_macvtap: entered promiscuous mode [ 99.959078][ T990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.967915][ T990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.978420][ T990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.995959][ T5810] veth1_macvtap: entered promiscuous mode [ 99.999825][ T990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.061300][ T5825] veth0_macvtap: entered promiscuous mode [ 100.113097][ T5816] veth0_macvtap: entered promiscuous mode [ 100.136836][ T5825] veth1_macvtap: entered promiscuous mode [ 100.190654][ T5816] veth1_macvtap: entered promiscuous mode [ 100.230356][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.300162][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.347444][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.347463][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.371787][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.371928][ T1421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.383938][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.386865][ T1421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.436416][ T1421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.451563][ T1421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.466304][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.468569][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.585979][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.586065][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.586079][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.587215][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.629387][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.644392][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.867206][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.894597][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.899953][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.822991][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.862937][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.156235][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.156255][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.445064][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.445078][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.486322][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.486341][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.563004][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.563024][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.714889][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.714908][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.852522][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.852543][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.380487][ T5956] overlayfs: overlapping lowerdir path [ 106.988048][ T6006] process 'syz.0.33' launched '/dev/fd/8' with NULL argv: empty string added [ 108.924884][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 108.939856][ T6039] evm: overlay not supported [ 108.952055][ T37] audit: type=1800 audit(1763272755.109:2): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.47" name="blkio.bfq.group_wait_time" dev="overlay" ino=38 res=0 errno=0 [ 113.179035][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 115.309791][ T6103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.487354][ T6092] fuse: Bad value for 'group_id' [ 115.487374][ T6092] fuse: Bad value for 'group_id' [ 117.097259][ T6121] veth0: entered promiscuous mode [ 117.099907][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 117.148216][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 117.353425][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.353452][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.357617][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 117.357645][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.357662][ T9] usb 2-1: Product: syz [ 117.357674][ T9] usb 2-1: Manufacturer: syz [ 117.357687][ T9] usb 2-1: SerialNumber: syz [ 117.380494][ T9] usb 2-1: config 0 descriptor?? [ 117.574323][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 117.740090][ T9] usb 2-1: USB disconnect, device number 2 [ 117.775884][ T37] audit: type=1326 audit(1763272763.909:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6124 comm="syz.0.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7b5d6f6c9 code=0x0 [ 119.670082][ T6148] netlink: 188 bytes leftover after parsing attributes in process `syz.3.84'. [ 120.785428][ T6171] 9pnet: Could not find request transport: 0xffffffffffffffff [ 121.472029][ T992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.652017][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 121.658749][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.660146][ T992] usb 1-1: config 11 has too many interfaces: 183, using maximum allowed: 32 [ 121.660173][ T992] usb 1-1: config 11 has an invalid descriptor of length 72, skipping remainder of the config [ 121.660191][ T992] usb 1-1: config 11 has 0 interfaces, different from the descriptor's value: 183 [ 121.704787][ T992] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 121.704813][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.704827][ T992] usb 1-1: Product: syz [ 121.704838][ T992] usb 1-1: Manufacturer: syz [ 121.704849][ T992] usb 1-1: SerialNumber: syz [ 122.034402][ T992] usb 1-1: USB disconnect, device number 2 [ 123.611970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.798341][ T6210] hub 1-0:1.0: USB hub found [ 123.799795][ T6210] hub 1-0:1.0: 1 port detected [ 123.808723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.041950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.447592][ T6268] overlayfs: failed to clone upperpath [ 129.308189][ T6291] syz.3.139 (6291) used greatest stack depth: 17800 bytes left [ 130.299734][ T6327] syz.4.152 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.415536][ T6331] overlayfs: failed to clone upperpath [ 132.137882][ T6353] overlayfs: failed to resolve './file0': -2 [ 133.150636][ T6356] loop5: detected capacity change from 0 to 7 [ 133.221319][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.222707][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.701543][ T6374] netlink: 104 bytes leftover after parsing attributes in process `syz.2.168'. [ 133.960000][ T6356] Dev loop5: unable to read RDB block 7 [ 133.960066][ T6356] loop5: unable to read partition table [ 133.960293][ T6356] loop5: partition table beyond EOD, truncated [ 133.960351][ T6356] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 134.276395][ T6394] Bluetooth: MGMT ver 1.23 [ 134.404078][ T6395] loop5: detected capacity change from 0 to 7 [ 135.102175][ T6129] Dev loop5: unable to read RDB block 7 [ 135.102233][ T6129] loop5: unable to read partition table [ 135.102494][ T6129] loop5: partition table beyond EOD, truncated [ 136.675358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 136.692348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.427605][ T6431] hub 2-0:1.0: USB hub found [ 137.862114][ T6431] hub 2-0:1.0: 1 port detected [ 139.544109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 139.562540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 139.601001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 139.623114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 139.664025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 141.568551][ T6456] netlink: 104 bytes leftover after parsing attributes in process `syz.2.201'. [ 144.065415][ T6495] loop5: detected capacity change from 0 to 7 [ 145.731830][ T6495] Dev loop5: unable to read RDB block 7 [ 145.732126][ T6495] loop5: unable to read partition table [ 145.732394][ T6495] loop5: partition table beyond EOD, truncated [ 145.738247][ T6495] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 152.423417][ T6559] input: syz0 as /devices/virtual/input/input5 [ 152.433276][ T6565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.236'. [ 156.542146][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.0.240'. [ 160.967079][ T6634] netlink: 104 bytes leftover after parsing attributes in process `syz.0.260'. [ 161.521633][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.258'. [ 167.139897][ T6691] pimreg: entered allmulticast mode [ 167.674405][ T6697] netlink: 104 bytes leftover after parsing attributes in process `syz.2.281'. [ 170.440554][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 170.533819][ T6721] veth0_macvtap: left promiscuous mode [ 174.824331][ T6764] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 174.870206][ T6764] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 180.407046][ T37] audit: type=1326 audit(1763272826.499:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407102][ T37] audit: type=1326 audit(1763272826.509:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407151][ T37] audit: type=1326 audit(1763272826.509:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407193][ T37] audit: type=1326 audit(1763272826.509:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407235][ T37] audit: type=1326 audit(1763272826.509:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407277][ T37] audit: type=1326 audit(1763272826.509:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407319][ T37] audit: type=1326 audit(1763272826.519:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407361][ T37] audit: type=1326 audit(1763272826.519:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407402][ T37] audit: type=1326 audit(1763272826.519:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 180.407443][ T37] audit: type=1326 audit(1763272826.519:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 182.096888][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.141243][ T6833] loop5: detected capacity change from 0 to 7 [ 183.462542][ T6833] Dev loop5: unable to read RDB block 7 [ 183.462597][ T6833] loop5: unable to read partition table [ 183.462845][ T6833] loop5: partition table beyond EOD, truncated [ 183.500780][ T6833] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 185.076297][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.236164][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.222681][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.075861][ T6884] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 191.711334][ T6915] xt_l2tp: missing protocol rule (udp|l2tpip) [ 192.706297][ T6920] bridge0: port 3(team0) entered blocking state [ 192.706369][ T6920] bridge0: port 3(team0) entered disabled state [ 192.706520][ T6920] team0: entered allmulticast mode [ 192.706529][ T6920] team_slave_0: entered allmulticast mode [ 192.706540][ T6920] team_slave_1: entered allmulticast mode [ 192.708335][ T6920] team0: entered promiscuous mode [ 192.708345][ T6920] team_slave_0: entered promiscuous mode [ 192.708461][ T6920] team_slave_1: entered promiscuous mode [ 192.709447][ T6920] bridge0: port 3(team0) entered blocking state [ 192.709528][ T6920] bridge0: port 3(team0) entered forwarding state [ 194.469925][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469999][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.691527][ T6949] program syz.2.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.000184][ T6957] @: renamed from vlan0 (while UP) [ 198.218904][ T6961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.839939][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.283554][ T5894] IPVS: starting estimator thread 0... [ 200.372441][ T6987] IPVS: using max 7 ests per chain, 16800 per kthread [ 200.520724][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.521793][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 200.521828][ T31] usb 3-1: can't read configurations, error -71 [ 202.092492][ T7013] tipc: Failed to obtain node identity [ 202.092564][ T7013] tipc: Enabling of bearer rejected, failed to enable media [ 202.389864][ T5818] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 202.393205][ T5818] Bluetooth: hci0: command 0x1407 tx timeout [ 205.922022][ T992] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 205.994450][ T5931] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 206.018638][ T7052] Zero length message leads to an empty skb [ 207.331975][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 207.498004][ T5931] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 207.498031][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.498048][ T5931] usb 2-1: config 0 has no interface number 0 [ 207.498096][ T5931] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 207.498114][ T5931] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 207.498134][ T5931] usb 2-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.539998][ T5931] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 207.540028][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.540046][ T5931] usb 2-1: Product: syz [ 207.540058][ T5931] usb 2-1: Manufacturer: syz [ 207.540071][ T5931] usb 2-1: SerialNumber: syz [ 207.555795][ T5931] usb 2-1: config 0 descriptor?? [ 207.593930][ T7052] geneve2: entered promiscuous mode [ 207.593959][ T7052] geneve2: entered allmulticast mode [ 208.140039][ T37] kauditd_printk_skb: 37 callbacks suppressed [ 208.140055][ T37] audit: type=1804 audit(1763273110.311:51): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.387" name="bus" dev="ramfs" ino=15170 res=1 errno=0 [ 208.258175][ T7063] Invalid ELF header magic: != ELF [ 208.486344][ T5931] usb 2-1: probing VID:PID(0424:012C) [ 208.595783][ T5931] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 208.595962][ T5931] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 208.596909][ T5931] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 208.639005][ T5931] usb 2-1: USB disconnect, device number 3 [ 210.242138][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.523398][ T37] audit: type=1326 audit(1763273112.621:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.523626][ T37] audit: type=1326 audit(1763273112.621:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.524113][ T37] audit: type=1326 audit(1763273112.631:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.524309][ T37] audit: type=1326 audit(1763273112.631:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.524352][ T37] audit: type=1326 audit(1763273112.631:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.524588][ T37] audit: type=1326 audit(1763273112.651:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.524869][ T37] audit: type=1326 audit(1763273112.651:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.525211][ T37] audit: type=1326 audit(1763273112.661:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 210.525259][ T37] audit: type=1326 audit(1763273112.661:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 211.371994][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 211.377019][ T9] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 211.377036][ T9] usb 5-1: config 127 has no interface number 1 [ 211.377102][ T9] usb 5-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.377150][ T9] usb 5-1: config 127 interface 0 altsetting 10 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 211.377164][ T9] usb 5-1: config 127 interface 0 altsetting 10 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.377177][ T9] usb 5-1: config 127 interface 171 has no altsetting 0 [ 211.377186][ T9] usb 5-1: config 127 interface 0 has no altsetting 0 [ 211.398902][ T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 211.398984][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.399003][ T9] usb 5-1: Product: syz [ 211.399017][ T9] usb 5-1: Manufacturer: syz [ 211.399030][ T9] usb 5-1: SerialNumber: syz [ 211.911938][ T7077] Bluetooth: hci0: command 0x1407 tx timeout [ 211.911981][ T7077] Bluetooth: hci2: command 0x0406 tx timeout [ 211.912006][ T7077] Bluetooth: hci3: command 0x0406 tx timeout [ 211.912029][ T7077] Bluetooth: hci1: command 0x0406 tx timeout [ 211.912050][ T7077] Bluetooth: hci4: command 0x0406 tx timeout [ 212.097234][ T9] xr_serial 5-1:127.171: xr_serial converter detected [ 212.325856][ T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 212.325899][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 212.393361][ T992] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 212.393406][ T992] usb 3-1: can't read configurations, error -110 [ 212.455151][ T9] usb 5-1: USB disconnect, device number 2 [ 212.493723][ T9] xr_serial 5-1:127.171: device disconnected [ 212.542823][ T992] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 212.712010][ T992] usb 3-1: device descriptor read/64, error -32 [ 212.835000][ T992] usb usb3-port1: attempt power cycle [ 214.082300][ T7112] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.996731][ T7139] comedi comedi0: dac02: a I/O base address must be specified [ 216.160850][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 216.160870][ T37] audit: type=1326 audit(1763273118.331:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7140 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 216.161201][ T37] audit: type=1326 audit(1763273118.331:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7140 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 216.399355][ T7147] tipc: Started in network mode [ 216.399375][ T7147] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 216.400275][ T7147] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 216.401261][ T7147] tipc: Enabled bearer , priority 10 [ 216.651673][ T7156] loop9: detected capacity change from 0 to 7 [ 216.754691][ T7156] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.754739][ T7156] loop9: partition table partially beyond EOD, truncated [ 216.766295][ T7156] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 217.736578][ T31] tipc: Node number set to 1 [ 218.776969][ T7189] netlink: 176 bytes leftover after parsing attributes in process `syz.1.438'. [ 218.818359][ T7192] binder: 7190:7192 ioctl c0046209 0 returned -22 [ 219.545139][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.644209][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.849459][ T7203] netlink: 'syz.0.441': attribute type 3 has an invalid length. [ 220.461431][ T7226] netlink: 'syz.3.454': attribute type 33 has an invalid length. [ 220.461452][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.454'. [ 220.798276][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.662409][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.885449][ T7252] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 221.885470][ T7252] netlink: 5640 bytes leftover after parsing attributes in process `syz.0.465'. [ 221.913733][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 222.062028][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 222.067037][ T5819] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 222.067062][ T5819] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.098431][ T5819] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.098460][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.098480][ T5819] usb 5-1: Product: syz [ 222.098494][ T5819] usb 5-1: Manufacturer: syz [ 222.098507][ T5819] usb 5-1: SerialNumber: syz [ 222.379114][ T5819] usb 5-1: 0:2 : does not exist [ 222.379272][ T5819] usb 5-1: unit 97 not found! [ 222.555843][ T5819] usb 5-1: USB disconnect, device number 3 [ 222.560928][ T7270] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.640260][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.767259][ T7283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.767276][ T7283] IPv6: NLM_F_CREATE should be set when creating new route [ 222.767329][ T7283] IPv6: NLM_F_CREATE should be set when creating new route [ 223.570044][ T7300] pimreg: entered allmulticast mode [ 224.093467][ T7303] netlink: 104 bytes leftover after parsing attributes in process `syz.3.489'. [ 224.656849][ T7319] netlink: 'syz.1.496': attribute type 10 has an invalid length. [ 224.656870][ T7319] netlink: 55 bytes leftover after parsing attributes in process `syz.1.496'. [ 224.682083][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.844763][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.844785][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.849006][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 224.849035][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 224.849054][ T31] usb 1-1: SerialNumber: syz [ 225.146217][ T31] usb 1-1: 0:2 : does not exist [ 225.146320][ T31] usb 1-1: unit 5: unexpected type 0x03 [ 225.279344][ T31] usb 1-1: USB disconnect, device number 3 [ 225.377582][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.401321][ T7340] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 225.470190][ T7342] __vm_enough_memory: pid: 7342, comm: syz.2.508, bytes: 4503599627366400 not enough memory for the allocation [ 225.709620][ T7354] netlink: 144 bytes leftover after parsing attributes in process `syz.1.513'. [ 226.442084][ T5819] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 226.531756][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.506177][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.553186][ T7380] netlink: 512 bytes leftover after parsing attributes in process `syz.0.523'. [ 227.718657][ T5819] usb 3-1: config 0 has no interfaces? [ 227.718696][ T5819] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 227.718712][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.776967][ T5819] usb 3-1: config 0 descriptor?? [ 229.309318][ T7419] netlink: 'syz.1.544': attribute type 64 has an invalid length. [ 229.356099][ T7417] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 229.373438][ T7417] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 229.998618][ T7436] netlink: 'syz.3.552': attribute type 39 has an invalid length. [ 230.007603][ T7404] infiniband syz!: set active [ 230.007624][ T7404] infiniband syz!: added team_slave_0 [ 230.013933][ T7404] syz!: rxe_create_cq: returned err = -12 [ 230.014117][ T7404] infiniband syz!: Couldn't create ib_mad CQ [ 230.015296][ T7404] infiniband syz!: Couldn't open port 1 [ 230.130898][ T7404] RDS/IB: syz!: added [ 230.131685][ T7404] smc: adding ib device syz! with port count 1 [ 230.152303][ T7404] smc: ib device syz! port 1 has no pnetid [ 230.249871][ T992] usb 3-1: USB disconnect, device number 7 [ 231.173063][ T7475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.756589][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 231.756702][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 231.756723][ T7497] netlink: 5 bytes leftover after parsing attributes in process `syz.2.582'. [ 231.782034][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 232.162128][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 232.164533][ T5872] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 232.164559][ T5872] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 232.164578][ T5872] usb 2-1: config 162 has no interface number 0 [ 232.164593][ T5872] usb 2-1: config 162 has no interface number 1 [ 232.164663][ T5872] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.164706][ T5872] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 232.164729][ T5872] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 232.164753][ T5872] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 232.164778][ T5872] usb 2-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 232.164801][ T5872] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 232.164825][ T5872] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 232.164846][ T5872] usb 2-1: config 162 interface 79 has no altsetting 0 [ 232.164862][ T5872] usb 2-1: config 162 interface 183 has no altsetting 0 [ 232.169348][ T5872] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 232.169376][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.169395][ T5872] usb 2-1: Product: syz [ 232.169408][ T5872] usb 2-1: Manufacturer: syz [ 232.169421][ T5872] usb 2-1: SerialNumber: syz [ 232.454024][ T5872] pl2303 2-1:162.79: required endpoints missing [ 232.495708][ T5872] pl2303 2-1:162.183: pl2303 converter detected [ 232.497599][ T5872] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 232.498013][ T5872] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 232.501021][ T5872] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 232.502885][ T5872] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 232.503896][ T5872] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 232.512427][ T5872] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 232.513248][ T5872] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 232.513747][ T5872] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 232.514277][ T5872] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 232.516882][ T5872] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 232.517283][ T5872] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 232.536608][ T5872] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 232.589655][ T5872] usb 2-1: USB disconnect, device number 4 [ 232.638700][ T5872] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 232.641140][ T5872] pl2303 2-1:162.183: device disconnected [ 232.763840][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.831847][ T7511] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 232.849247][ T7511] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 233.593072][ T5880] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 233.748420][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.749331][ T5880] usb 3-1: not running at top speed; connect to a high speed hub [ 233.751496][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 233.751525][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 233.751550][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 64 [ 233.751576][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.751598][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 233.751618][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 254, setting to 64 [ 233.869166][ T5880] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 233.869195][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.869213][ T5880] usb 3-1: Product: syz [ 233.869225][ T5880] usb 3-1: Manufacturer: syz [ 233.869237][ T5880] usb 3-1: SerialNumber: syz [ 233.999938][ T5880] usb 3-1: config 0 descriptor?? [ 234.015476][ T7535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.015732][ T7535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.015962][ T7535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.070399][ T5880] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.345306][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.470660][ T5880] usb 3-1: USB disconnect, device number 8 [ 234.803910][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 235.572105][ T5931] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 235.734060][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 235.735078][ T5931] usb 5-1: too many configurations: 211, using maximum allowed: 8 [ 235.740263][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.740317][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.741398][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.741452][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.793105][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.793157][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.794583][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.794631][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.796002][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.796049][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.797248][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.797294][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.798568][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.799026][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.800383][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.800436][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 235.825471][ T5931] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.825500][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.825518][ T5931] usb 5-1: SerialNumber: syz [ 236.167013][ T5931] cdc_acm 5-1:1.0: Zero length descriptor references [ 236.167056][ T5931] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 236.221543][ T5931] usb 5-1: USB disconnect, device number 4 [ 236.673833][ T7595] IPv6: addrconf: prefix option has invalid lifetime [ 237.503006][ T7611] netlink: 332 bytes leftover after parsing attributes in process `syz.0.633'. [ 237.503066][ T7611] netlink: 'syz.0.633': attribute type 9 has an invalid length. [ 237.503078][ T7611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.633'. [ 237.503090][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.633'. [ 237.685165][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 237.904662][ T7621] capability: warning: `syz.2.640' uses deprecated v2 capabilities in a way that may be insecure [ 238.335375][ T7632] kvm: user requested TSC rate below hardware speed [ 239.163902][ T7660] vlan0: entered promiscuous mode [ 239.163922][ T7660] hsr0: entered promiscuous mode [ 240.211171][ T7675] capability: warning: `syz.3.660' uses 32-bit capabilities (legacy support in use) [ 240.686664][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'. [ 240.860412][ T7691] netlink: 204 bytes leftover after parsing attributes in process `syz.0.668'. [ 240.860438][ T7691] netlink: 72 bytes leftover after parsing attributes in process `syz.0.668'. [ 240.860489][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 241.145388][ T7708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.145570][ T7708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.146729][ T7708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.146813][ T7708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.147098][ T7708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.147169][ T7708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.160264][ T7708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.160350][ T7708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.161088][ T7708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.349011][ T7714] tipc: Enabling of bearer rejected, failed to enable media [ 242.808285][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 242.954479][ T5894] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 242.954538][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.956038][ T5894] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 242.956064][ T5894] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 242.956082][ T5894] usb 2-1: Manufacturer: syz [ 243.001738][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 243.005811][ T5894] usb 2-1: config 0 descriptor?? [ 243.117694][ T5894] rc_core: IR keymap rc-hauppauge not found [ 243.117722][ T5894] Registered IR keymap rc-empty [ 243.154272][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 243.166843][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 243.188069][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.188094][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 243.188144][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 243.188165][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.232389][ T9] usb 1-1: config 0 descriptor?? [ 243.240992][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 243.241408][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 243.302580][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 243.303979][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 243.304069][ T9] usb 1-1: media controller created [ 243.309149][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.451754][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 243.458549][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 243.491269][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 243.491706][ T7750] dvb-usb: bulk message failed: -22 (4/0) [ 243.552694][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 243.552717][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 243.558286][ T7751] usb 1-1: USB disconnect, device number 4 [ 243.827607][ T31] usb 2-1: USB disconnect, device number 5 [ 243.961078][ T7554] udevd[7554]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 243.989116][ T7751] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 244.606800][ T5823] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 244.750475][ T7788] @: renamed from vlan0 (while UP) [ 245.653847][ T7824] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 245.653867][ T7824] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 245.653878][ T7824] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 245.653878][ T7824] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 245.653893][ T7824] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 245.653904][ T7824] CUSE: DEVNAME unspecified [ 246.443466][ T7857] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.191138][ T7883] binder: 7881:7883 ioctl c00c620f 0 returned -14 [ 247.432179][ T5894] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 247.583674][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 247.585969][ T5894] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 247.585996][ T5894] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 247.586014][ T5894] usb 3-1: config 0 has no interface number 0 [ 247.586059][ T5894] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.586083][ T5894] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 247.586107][ T5894] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.588475][ T5894] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 247.588503][ T5894] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 247.588520][ T5894] usb 3-1: Product: syz [ 247.588533][ T5894] usb 3-1: Manufacturer: syz [ 247.611068][ T5894] usb 3-1: config 0 descriptor?? [ 247.613724][ T7884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.925707][ T7913] netlink: 'syz.1.766': attribute type 11 has an invalid length. [ 247.925730][ T7913] netlink: 'syz.1.766': attribute type 11 has an invalid length. [ 247.925744][ T7913] netlink: 204 bytes leftover after parsing attributes in process `syz.1.766'. [ 248.290135][ T5894] usb 3-1: USB disconnect, device number 9 [ 248.419469][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 248.572108][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 248.618214][ T7939] netlink: 44 bytes leftover after parsing attributes in process `syz.3.778'. [ 248.749250][ T5872] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 248.749279][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.749297][ T5872] usb 2-1: Product: syz [ 248.749311][ T5872] usb 2-1: Manufacturer: syz [ 248.749324][ T5872] usb 2-1: SerialNumber: syz [ 248.763558][ T5872] usb 2-1: config 0 descriptor?? [ 248.786649][ T5872] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 248.832530][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.841051][ T5872] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 248.841111][ T5872] usb 2-1: media controller created [ 249.020047][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.179058][ T5872] DVB: Unable to find symbol mt352_attach() [ 249.267116][ T5872] DVB: Unable to find symbol nxt6000_attach() [ 249.267131][ T5872] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 249.285271][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 249.317738][ T5872] dvb-usb: schedule remote query interval to 1000 msecs. [ 249.317761][ T5872] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 249.317775][ T5872] dvb-usb: bulk message failed: -22 (7/0) [ 249.317789][ T5872] dvb-usb: bulk message failed: -22 (7/0) [ 249.339463][ T5872] usb 2-1: USB disconnect, device number 6 [ 249.403043][ T37] audit: type=1326 audit(1763273151.581:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.403093][ T37] audit: type=1326 audit(1763273151.581:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.488330][ T37] audit: type=1326 audit(1763273151.661:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.488387][ T37] audit: type=1326 audit(1763273151.661:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.488429][ T37] audit: type=1326 audit(1763273151.661:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.489114][ T37] audit: type=1326 audit(1763273151.661:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.489158][ T37] audit: type=1326 audit(1763273151.661:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7968 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x7ffc0000 [ 249.618063][ T7967] block device autoloading is deprecated and will be removed. [ 249.821570][ T5872] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 251.131315][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 251.776124][ T8020] sp0: Synchronizing with TNC [ 252.165247][ T8034] syz.0.819 (8034) used obsolete PPPIOCDETACH ioctl [ 252.721683][ T8038] binder: 8036:8038 ioctl c018620c 200000000180 returned -22 [ 253.292109][ T5872] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 253.445600][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.445655][ T5872] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 253.445678][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.488470][ T5872] usb 3-1: config 0 descriptor?? [ 253.966494][ T5872] sigmamicro 0003:1C4F:0059.0001: hidraw0: USB HID v1.05 Device [HID 1c4f:0059] on usb-dummy_hcd.2-1/input0 [ 254.002109][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 254.117612][ T5879] usb 3-1: USB disconnect, device number 10 [ 254.152039][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 254.156989][ T31] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 254.157016][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.157034][ T31] usb 5-1: Product: syz [ 254.157047][ T31] usb 5-1: Manufacturer: syz [ 254.157060][ T31] usb 5-1: SerialNumber: syz [ 254.201699][ T8075] fido_id[8075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 254.250177][ T31] usb 5-1: config 0 descriptor?? [ 254.279788][ T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 254.773929][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 254.783834][ T8103] netlink: 'syz.2.850': attribute type 23 has an invalid length. [ 254.942264][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 254.945150][ T5879] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.945183][ T5879] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.945208][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.945249][ T5879] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 254.945269][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.950165][ T5879] usb 2-1: config 0 descriptor?? [ 255.104123][ T31] gspca_ov534_9: reg_w failed -71 [ 255.379354][ T5879] saitek 0003:0738:1705.0002: report_id 0 is invalid [ 255.379378][ T5879] saitek 0003:0738:1705.0002: item 0 0 1 8 parsing failed [ 255.380244][ T5879] saitek 0003:0738:1705.0002: parse failed [ 255.380348][ T5879] saitek 0003:0738:1705.0002: probe with driver saitek failed with error -22 [ 255.391963][ T31] gspca_ov534_9: Unknown sensor 0000 [ 255.392066][ T31] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 255.405093][ T5931] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.406064][ T31] usb 5-1: USB disconnect, device number 5 [ 255.554147][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 255.557520][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.557551][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.557572][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.557610][ T5931] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.557630][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.564616][ T5931] usb 3-1: config 0 descriptor?? [ 255.602318][ T31] usb 2-1: USB disconnect, device number 7 [ 255.913854][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.914816][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.163202][ T5931] HID 045e:07da: Invalid code 65791 type 1 [ 256.171516][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10 [ 256.846559][ T5931] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 257.102252][ T9] usb 3-1: USB disconnect, device number 11 [ 257.340030][ T8137] fido_id[8137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 258.872807][ T8187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 258.872820][ T8187] IPv6: NLM_F_CREATE should be set when creating new route [ 258.978333][ T8192] netlink: 'syz.0.884': attribute type 6 has an invalid length. [ 258.978355][ T8192] netlink: 14623 bytes leftover after parsing attributes in process `syz.0.884'. [ 259.732042][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.882037][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 259.886100][ T5879] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.886134][ T5879] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.886158][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.886192][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 259.886214][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.967256][ T5879] usb 5-1: config 0 descriptor?? [ 260.112296][ T8221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.898'. [ 260.152838][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.190272][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.410101][ T5879] apple 0003:05AC:0247.0004: fixing up Magic Keyboard JIS report descriptor [ 260.411697][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.411734][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.411761][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.411788][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.411814][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.411841][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.463126][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.463174][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.463200][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.463225][ T5879] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 260.506820][ T5879] apple 0003:05AC:0247.0004: unexpected long global item [ 260.507692][ T5879] apple 0003:05AC:0247.0004: parse failed [ 260.507793][ T5879] apple 0003:05AC:0247.0004: probe with driver apple failed with error -22 [ 260.642450][ T5872] usb 5-1: USB disconnect, device number 6 [ 260.748520][ T31] kernel read not supported for file /binder/stats (pid: 31 comm: kworker/1:0) [ 262.582000][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.734546][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.734579][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.734617][ T5879] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 262.734640][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.792075][ T5879] usb 3-1: config 0 descriptor?? [ 263.092079][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.415505][ T5879] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71 [ 263.420353][ T5879] usb 3-1: USB disconnect, device number 12 [ 264.032130][ T5931] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 264.145114][ T8312] 9pnet_fd: Insufficient options for proto=fd [ 264.185801][ T5931] usb 2-1: config 2 has an invalid interface number: 50 but max is 0 [ 264.185828][ T5931] usb 2-1: config 2 has no interface number 0 [ 264.185873][ T5931] usb 2-1: config 2 interface 50 altsetting 2 endpoint 0x82 has invalid maxpacket 1967, setting to 64 [ 264.185888][ T5931] usb 2-1: config 2 interface 50 has no altsetting 0 [ 264.188306][ T5931] usb 2-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 264.188333][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.188355][ T5931] usb 2-1: Product: syz [ 264.188368][ T5931] usb 2-1: Manufacturer: syz [ 264.188382][ T5931] usb 2-1: SerialNumber: syz [ 264.202216][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 264.209361][ T8304] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 264.235148][ T5931] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 264.356874][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.356940][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.356964][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 264.356976][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.375295][ T31] usb 3-1: config 0 descriptor?? [ 264.933529][ T5931] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 264.940534][ T31] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 265.202520][ T5931] usb 2-1: USB disconnect, device number 8 [ 265.234930][ T31] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 32: -71 [ 265.234971][ T31] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense firmware info: -71 [ 265.235016][ T31] playstation 0003:054C:0DF2.0006: Failed to get firmware info from DualSense [ 265.235035][ T31] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 265.276805][ T31] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 265.307973][ T31] usb 3-1: USB disconnect, device number 13 [ 266.023588][ T8344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.950'. [ 266.053448][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.338885][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.642137][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.889767][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.072703][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'. [ 267.072731][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'. [ 267.355896][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 267.969224][ T8396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.421667][ T37] audit: type=1107 audit(1763273170.581:75): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 268.533411][ T8421] netlink: 'syz.4.986': attribute type 14 has an invalid length. [ 269.166284][ T8445] tap0: tun_chr_ioctl cmd 1074025677 [ 269.166506][ T8445] tap0: linktype set to 823 [ 270.086024][ T8486] ptrace attach of "./syz-executor exec"[5810] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 270.758509][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 270.833589][ T8513] netlink: 'syz.4.1025': attribute type 2 has an invalid length. [ 271.490227][ T8543] tipc: Enabling of bearer rejected, already enabled [ 271.599076][ T8545] tap0: tun_chr_ioctl cmd 1074025677 [ 271.599291][ T8545] tap0: linktype set to 774 [ 271.744447][ T1302] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.938977][ T992] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 271.987528][ T8563] 9pnet_fd: Insufficient options for proto=fd [ 272.084128][ T992] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 272.084156][ T992] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 272.084173][ T992] usb 5-1: config 135 has no interface number 0 [ 272.084204][ T992] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 272.084242][ T992] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 272.084267][ T992] usb 5-1: config 135 interface 230 has no altsetting 0 [ 272.091730][ T992] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 272.091758][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.091776][ T992] usb 5-1: Product: syz [ 272.091788][ T992] usb 5-1: Manufacturer: syz [ 272.091800][ T992] usb 5-1: SerialNumber: syz [ 272.173527][ T8569] block nbd1: Unsupported socket: should be TCP or UNIX. [ 272.200897][ T992] uvcvideo 5-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 272.200937][ T992] uvcvideo 5-1:135.230: No valid video chain found. [ 272.398817][ T31] usb 5-1: USB disconnect, device number 7 [ 272.692073][ T992] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 272.862420][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 272.871178][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.871222][ T992] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 272.871239][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.926061][ T992] usb 2-1: config 0 descriptor?? [ 273.109298][ T8607] ip6gretap1: entered promiscuous mode [ 273.380595][ T992] hid_parser_main: 831 callbacks suppressed [ 273.380616][ T992] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 273.380649][ T992] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 273.380676][ T992] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 273.380700][ T992] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 273.380727][ T992] logitech-djreceiver 0003:046D:C513.0007: unknown main item tag 0x0 [ 273.476193][ T8620] net_ratelimit: 67 callbacks suppressed [ 273.476214][ T8620] netlink: zone id is out of range [ 273.476222][ T8620] netlink: zone id is out of range [ 273.476912][ T8620] netlink: set zone limit has 8 unknown bytes [ 273.596539][ T8622] syz.3.1078 (8622) used greatest stack depth: 17720 bytes left [ 273.645921][ T31] usb 2-1: USB disconnect, device number 9 [ 273.740375][ T8624] tun0: tun_chr_ioctl cmd 1074025675 [ 273.740402][ T8624] tun0: persist enabled [ 274.266812][ T8657] sctp: [Deprecated]: syz.1.1094 (pid 8657) Use of int in maxseg socket option. [ 274.266812][ T8657] Use struct sctp_assoc_value instead [ 274.517211][ T8669] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 274.632089][ T31] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 274.787853][ T31] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 274.787881][ T31] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 274.787899][ T31] usb 2-1: config 0 has no interface number 0 [ 274.787945][ T31] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 274.787965][ T31] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.788003][ T31] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 274.788024][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.808750][ T31] usb 2-1: config 0 descriptor?? [ 275.422158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.455467][ T31] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input12 [ 275.492168][ T31] input: failed to attach handler kbd to device input12, error: -5 [ 275.653926][ T31] usb 2-1: USB disconnect, device number 10 [ 276.432068][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 276.584930][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 276.587800][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.587825][ T31] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 276.591202][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.591229][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.591247][ T31] usb 2-1: Product: syz [ 276.591259][ T31] usb 2-1: Manufacturer: syz [ 276.591278][ T31] usb 2-1: SerialNumber: syz [ 276.823621][ T31] usb 2-1: USB disconnect, device number 11 [ 279.242036][ T5991] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 279.392071][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 279.394610][ T5991] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 279.394637][ T5991] usb 5-1: config 0 has no interface number 0 [ 279.400218][ T5991] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 279.400245][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.400263][ T5991] usb 5-1: Product: syz [ 279.400275][ T5991] usb 5-1: Manufacturer: syz [ 279.400289][ T5991] usb 5-1: SerialNumber: syz [ 279.409936][ T5991] usb 5-1: config 0 descriptor?? [ 279.449835][ T5991] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 279.707199][ T5991] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 279.741789][ T5991] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 280.101855][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 280.105196][ T5879] usb 5-1: USB disconnect, device number 8 [ 280.131808][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 280.201060][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 280.213958][ T5879] quatech2 5-1:0.51: device disconnected [ 280.671022][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.262039][ T5991] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 282.339581][ T8787] syz.3.1151 uses obsolete (PF_INET,SOCK_PACKET) [ 282.416190][ T5991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.416257][ T5991] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.416280][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.428753][ T5991] usb 3-1: config 0 descriptor?? [ 282.449391][ T5991] pwc: Askey VC010 type 2 USB webcam detected. [ 282.564602][ T8791] tipc: Started in network mode [ 282.565020][ T8791] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 282.602926][ T8791] tipc: Enabled bearer , priority 10 [ 282.782128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.855044][ T5991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 282.857297][ T5991] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.942155][ T5894] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 283.059780][ T5991] pwc: recv_control_msg error -71 req 04 val 1000 [ 283.060421][ T5991] pwc: recv_control_msg error -71 req 04 val 1300 [ 283.060908][ T5991] pwc: recv_control_msg error -71 req 04 val 1400 [ 283.061410][ T5991] pwc: recv_control_msg error -71 req 02 val 2000 [ 283.062129][ T5991] pwc: recv_control_msg error -71 req 02 val 2100 [ 283.062602][ T5991] pwc: recv_control_msg error -71 req 04 val 1500 [ 283.063057][ T5991] pwc: recv_control_msg error -71 req 02 val 2500 [ 283.063738][ T5991] pwc: recv_control_msg error -71 req 02 val 2400 [ 283.064293][ T5991] pwc: recv_control_msg error -71 req 02 val 2600 [ 283.064808][ T5991] pwc: recv_control_msg error -71 req 02 val 2900 [ 283.065265][ T5991] pwc: recv_control_msg error -71 req 02 val 2800 [ 283.066105][ T5991] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.066573][ T5991] pwc: recv_control_msg error -71 req 04 val 1200 [ 283.076467][ T5991] pwc: Registered as video103. [ 283.092805][ T5991] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 283.099755][ T5894] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 283.099783][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.152916][ T5991] usb 3-1: USB disconnect, device number 14 [ 283.162164][ T5894] usb 2-1: config 0 descriptor?? [ 283.190442][ T5894] cp210x 2-1:0.0: cp210x converter detected [ 283.576469][ T5894] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 283.712093][ T5931] tipc: Node number set to 4269801494 [ 283.838547][ T5894] usb 2-1: cp210x converter now attached to ttyUSB0 [ 283.989125][ T5879] usb 2-1: USB disconnect, device number 12 [ 284.018002][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 284.049628][ T8823] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.050518][ T5894] IPVS: starting estimator thread 0... [ 284.133349][ T8825] IPVS: using max 8 ests per chain, 19200 per kthread [ 284.162665][ T5879] cp210x 2-1:0.0: device disconnected [ 284.376137][ T8833] vxcan1: tx address claim with different name [ 285.937396][ T8855] ======================================================= [ 285.937396][ T8855] WARNING: The mand mount option has been deprecated and [ 285.937396][ T8855] and is ignored by this kernel. Remove the mand [ 285.937396][ T8855] option from the mount to silence this warning. [ 285.937396][ T8855] ======================================================= [ 285.985809][ T8855] overlayfs: failed to clone lowerpath [ 287.607924][ T8886] netlink: 'syz.0.1192': attribute type 5 has an invalid length. [ 287.658870][ T8890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.713327][ T8886] batman_adv: batadv0: Adding interface: vxlan0 [ 287.713344][ T8886] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.713376][ T8886] batman_adv: batadv0: Interface activated: vxlan0 [ 287.717207][ T1424] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.717639][ T1424] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.717696][ T1424] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.717733][ T1424] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.808357][ T8892] input: syz1 as /devices/virtual/input/input18 [ 288.262181][ T5894] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 288.525156][ T5894] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.525190][ T5894] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.525211][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.525243][ T5894] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 288.525264][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.578049][ T5894] usb 3-1: config 0 descriptor?? [ 289.099350][ T5894] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 289.099386][ T5894] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 289.115736][ T5894] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 289.177468][ T5894] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 289.199995][ T5894] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0008/input/input19 [ 289.415037][ T5894] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 289.415074][ T5894] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 289.501601][ T5894] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 290.327820][ T8945] syz.3.1214 (8945) used greatest stack depth: 15384 bytes left [ 290.432674][ T5894] usb 3-1: reset full-speed USB device number 15 using dummy_hcd [ 290.782082][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 290.934489][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.934520][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 290.934546][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.934569][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.934608][ T5879] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.934627][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.012299][ T5879] usb 5-1: config 0 descriptor?? [ 291.013600][ T8952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 291.332201][ T5991] usb 3-1: USB disconnect, device number 15 [ 291.467840][ T5879] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 291.467888][ T5879] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 291.467915][ T5879] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 291.467942][ T5879] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 291.467969][ T5879] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 291.467995][ T5879] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 291.590950][ T5879] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 291.707574][ T5991] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 291.750983][ T8976] warning: `syz.1.1227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 291.862835][ T31] usb 5-1: USB disconnect, device number 9 [ 293.181417][ T9023] overlayfs: failed to clone lowerpath [ 293.214603][ T9023] overlayfs: failed to clone lowerpath [ 295.051439][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 295.381731][ T9062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.405185][ T31] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 295.405213][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.405231][ T31] usb 5-1: Product: syz [ 295.405244][ T31] usb 5-1: Manufacturer: syz [ 295.405257][ T31] usb 5-1: SerialNumber: syz [ 295.449474][ T31] usb 5-1: config 0 descriptor?? [ 295.464077][ T31] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 295.871238][ T37] audit: type=1800 audit(1763273198.041:76): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1262" name="bus" dev="overlay" ino=1295 res=0 errno=0 [ 296.862152][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.882947][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 298.199245][ T5879] usb 5-1: USB disconnect, device number 10 [ 299.054704][ T37] audit: type=1326 audit(1763273201.231:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9133 comm="syz.0.1283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7b5d6f6c9 code=0x0 [ 299.086785][ T9137] netlink: 'syz.4.1284': attribute type 10 has an invalid length. [ 299.086799][ T9137] netlink: 'syz.4.1284': attribute type 11 has an invalid length. [ 299.086805][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'. [ 299.849994][ T37] audit: type=1326 audit(1763273202.021:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9158 comm="syz.3.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x0 [ 300.475417][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 300.789656][ T37] audit: type=1326 audit(1763273202.961:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9187 comm="syz.3.1302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f17aff6c9 code=0x0 [ 301.249435][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 301.479511][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030691000: rx timeout, send abort [ 301.980293][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030692000: rx timeout, send abort [ 301.982312][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030691000: abort rx timeout. Force session deactivation [ 302.228620][ T9174] team0 (unregistering): Port device team_slave_0 removed [ 302.284909][ T9174] team0 (unregistering): Port device team_slave_1 removed [ 302.480361][ C1] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff888030692000: abort rx timeout. Force session deactivation [ 302.585797][ T9237] fuse: Bad value for 'fd' [ 303.726907][ T37] audit: type=1326 audit(1763273205.901:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.727228][ T37] audit: type=1326 audit(1763273205.901:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.727581][ T37] audit: type=1326 audit(1763273205.901:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.728046][ T37] audit: type=1326 audit(1763273205.901:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.729043][ T37] audit: type=1326 audit(1763273205.901:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.729740][ T37] audit: type=1326 audit(1763273205.901:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.730104][ T37] audit: type=1326 audit(1763273205.901:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.730445][ T37] audit: type=1326 audit(1763273205.901:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.730699][ T37] audit: type=1326 audit(1763273205.901:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 303.947982][ T37] audit: type=1326 audit(1763273205.901:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9268 comm="syz.1.1340" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 304.838351][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 304.887691][ T9319] dummy0: entered allmulticast mode [ 304.890566][ T9318] dummy0: left allmulticast mode [ 305.408228][ T9340] overlayfs: missing 'lowerdir' [ 305.925796][ T9352] misc userio: Can't change port type on an already running userio instance [ 306.530379][ T9380] binder: 9379:9380 ioctl c00c6211 0 returned -14 [ 306.707819][ T9388] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 307.740621][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 307.740646][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1417'. [ 308.860195][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 308.860212][ T37] audit: type=1326 audit(1763273211.031:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.860489][ T37] audit: type=1326 audit(1763273211.031:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.912767][ T37] audit: type=1326 audit(1763273211.091:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.913037][ T37] audit: type=1326 audit(1763273211.091:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.913540][ T37] audit: type=1326 audit(1763273211.091:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.913843][ T37] audit: type=1326 audit(1763273211.091:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.914535][ T37] audit: type=1326 audit(1763273211.091:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.915045][ T37] audit: type=1326 audit(1763273211.091:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.915498][ T37] audit: type=1326 audit(1763273211.091:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 308.915876][ T37] audit: type=1326 audit(1763273211.091:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.4.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 309.338416][ T9477] tc_dump_action: action bad kind [ 309.413665][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 309.413771][ T9484] bridge_slave_1: left allmulticast mode [ 309.413793][ T9484] bridge_slave_1: left promiscuous mode [ 309.414060][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.433628][ T9481] 9pnet_virtio: no channels available for device ./file0 [ 309.543536][ T9484] bridge_slave_0: left allmulticast mode [ 309.543566][ T9484] bridge_slave_0: left promiscuous mode [ 309.543828][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.243579][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 311.348503][ T9573] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1481'. [ 312.080526][ T9597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.492289][ T9718] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1544'. [ 315.932849][ T5872] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 316.478949][ T5872] usb 3-1: too many configurations: 244, using maximum allowed: 8 [ 316.503981][ T5872] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 316.504010][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.504028][ T5872] usb 3-1: Product: syz [ 316.504041][ T5872] usb 3-1: Manufacturer: syz [ 316.504054][ T5872] usb 3-1: SerialNumber: syz [ 316.727709][ T9740] netlink: 'syz.3.1553': attribute type 4 has an invalid length. [ 316.886547][ T5872] rtl8150 3-1:1.0: couldn't reset the device [ 316.887124][ T5872] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 316.923538][ T5872] usb 3-1: USB disconnect, device number 16 [ 317.107451][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 317.107468][ T37] audit: type=1326 audit(1763273219.281:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 317.107963][ T37] audit: type=1326 audit(1763273219.281:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 317.108422][ T37] audit: type=1326 audit(1763273219.281:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 317.109126][ T37] audit: type=1326 audit(1763273219.281:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9752 comm="syz.1.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb376b9f6c9 code=0x7ffc0000 [ 317.353797][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.353877][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.408378][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 320.013893][ T5872] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 320.186794][ T5872] usb 2-1: config 0 has no interfaces? [ 320.186831][ T5872] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 320.186853][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.403412][ T5872] usb 2-1: config 0 descriptor?? [ 320.653034][ T5872] usb 2-1: USB disconnect, device number 13 [ 322.009573][ T9867] binder: 9866:9867 ioctl c018620c 200000000000 returned -22 [ 322.853052][ T9871] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 325.022131][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.182085][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 325.184067][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 334.088606][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.327160][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.652034][ T5931] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 338.810625][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.810649][ T5931] usb 5-1: config 0 has no interfaces? [ 338.814151][ T5931] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 338.814179][ T5931] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 338.814199][ T5931] usb 5-1: Product: syz [ 338.814212][ T5931] usb 5-1: Manufacturer: syz [ 338.814225][ T5931] usb 5-1: SerialNumber: syz [ 338.922494][ T5931] usb 5-1: config 0 descriptor?? [ 339.162179][ T5872] usb 5-1: USB disconnect, device number 11 [ 339.354154][T10123] binder: Bad value for 'max' [ 340.661705][T10127] fuse: Bad value for 'fd' [ 342.473216][T10162] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1727'. [ 344.323238][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.347809][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.349447][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.351059][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.352089][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.218085][ T1302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.383471][ T5823] Bluetooth: hci4: command tx timeout [ 347.220527][ T1302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.332148][ T5991] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 347.492143][ T5991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.492167][ T5991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.492534][ T5991] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.492619][ T5991] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.495838][ T5991] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.495864][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.495882][ T5991] usb 5-1: Product: syz [ 347.495903][ T5991] usb 5-1: Manufacturer: syz [ 347.495916][ T5991] usb 5-1: SerialNumber: syz [ 347.614993][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 347.776603][ T31] usb 2-1: config 0 has no interfaces? [ 347.796853][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 347.796940][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.796959][ T31] usb 2-1: Product: syz [ 347.796973][ T31] usb 2-1: Manufacturer: syz [ 347.796986][ T31] usb 2-1: SerialNumber: syz [ 347.922261][ T31] usb 2-1: config 0 descriptor?? [ 348.158792][ T31] usb 2-1: USB disconnect, device number 14 [ 348.382551][T10221] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1743'. [ 348.461983][ T5823] Bluetooth: hci4: command tx timeout [ 348.630946][ T1302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.385126][ T1302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.130943][ T31] usb 5-1: USB disconnect, device number 12 [ 350.522855][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 350.545000][ T5823] Bluetooth: hci4: command tx timeout [ 350.676098][T10253] overlayfs: missing 'lowerdir' [ 350.716177][T10251] bridge_slave_1: left allmulticast mode [ 350.716206][T10251] bridge_slave_1: left promiscuous mode [ 350.716473][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.234704][T10251] bridge_slave_0: left allmulticast mode [ 351.241401][T10251] bridge_slave_0: left promiscuous mode [ 351.241698][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.632348][ T5823] Bluetooth: hci4: command tx timeout [ 353.322490][ T1302] team0: left allmulticast mode [ 353.322512][ T1302] team_slave_0: left allmulticast mode [ 353.322716][ T1302] team_slave_1: left allmulticast mode [ 353.322863][ T1302] team0: left promiscuous mode [ 353.322875][ T1302] team_slave_0: left promiscuous mode [ 353.323244][ T1302] team_slave_1: left promiscuous mode [ 353.327769][ T1302] bridge0: port 3(team0) entered disabled state [ 353.715651][ T1302] bridge_slave_1: left allmulticast mode [ 353.715679][ T1302] bridge_slave_1: left promiscuous mode [ 353.763455][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.150872][ T1302] bridge_slave_0: left allmulticast mode [ 354.150892][ T1302] bridge_slave_0: left promiscuous mode [ 354.151058][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.259351][T10311] ALSA: mixer_oss: invalid OSS volume 'u' [ 367.987603][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.045664][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.093299][ T1302] bond0 (unregistering): Released all slaves [ 370.824891][T10174] chnl_net:caif_netlink_parms(): no params data found [ 371.619360][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.599291][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.328772][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.444691][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.782194][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.206673][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.221786][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.542296][ T37] audit: type=1326 audit(1763273281.711:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.552605][ T37] audit: type=1326 audit(1763273281.721:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.820194][ T37] audit: type=1326 audit(1763273281.991:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.820263][ T37] audit: type=1326 audit(1763273281.991:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.820316][ T37] audit: type=1326 audit(1763273281.991:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.822064][ T37] audit: type=1326 audit(1763273281.991:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.822159][ T37] audit: type=1326 audit(1763273281.991:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.822211][ T37] audit: type=1326 audit(1763273281.991:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.822253][ T37] audit: type=1326 audit(1763273281.991:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 379.822294][ T37] audit: type=1326 audit(1763273281.991:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312a03f6c9 code=0x7ffc0000 [ 388.527835][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.742291][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.742881][T10174] bridge_slave_0: entered allmulticast mode [ 388.808338][T10174] bridge_slave_0: entered promiscuous mode [ 388.822270][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.025504][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.026059][T10174] bridge_slave_1: entered allmulticast mode [ 389.112263][T10174] bridge_slave_1: entered promiscuous mode [ 391.067033][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.138209][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.142485][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.175668][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.385311][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.662598][ T5818] Bluetooth: hci5: command tx timeout [ 395.742055][ T5818] Bluetooth: hci5: command tx timeout [ 396.843185][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.886848][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.875348][ T5818] Bluetooth: hci5: command tx timeout [ 400.041640][ T5818] Bluetooth: hci5: command tx timeout [ 408.064450][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 408.134742][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 408.136343][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 408.137587][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 408.138407][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.241025][ T5823] Bluetooth: hci6: command tx timeout [ 411.368750][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 411.380974][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 411.382802][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 411.383879][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 411.402261][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 411.943202][ T5812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 411.949394][ T5823] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 411.950779][ T5823] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 411.973894][ T5823] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 411.974712][ T5823] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 412.323663][ T5818] Bluetooth: hci6: command tx timeout [ 413.982176][ T5823] Bluetooth: hci7: command tx timeout [ 414.572033][ T5818] Bluetooth: hci6: command tx timeout [ 414.710336][ T5818] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 414.824083][ T5818] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 414.826965][ T5818] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 414.828134][ T5818] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 414.828900][ T5818] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 415.112175][ T5823] Bluetooth: hci8: command tx timeout [ 416.204185][ T5823] Bluetooth: hci7: command tx timeout [ 416.642004][ T5823] Bluetooth: hci6: command tx timeout [ 417.182301][ T5818] Bluetooth: hci8: command tx timeout [ 417.188936][ T5823] Bluetooth: hci9: command tx timeout [ 418.222420][ T5823] Bluetooth: hci7: command tx timeout [ 419.262176][ T5823] Bluetooth: hci9: command tx timeout [ 419.262209][ T5823] Bluetooth: hci8: command tx timeout [ 420.302228][ T5818] Bluetooth: hci7: command tx timeout [ 421.342099][ T5818] Bluetooth: hci8: command tx timeout [ 421.342133][ T5818] Bluetooth: hci9: command tx timeout [ 423.422030][ T5823] Bluetooth: hci9: command tx timeout [ 440.594803][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.652635][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.442876][ C1] sched: DL replenish lagged too much [ 456.627066][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.647438][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.648819][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.650096][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.651319][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.268881][T10482] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 458.785776][ T5818] Bluetooth: hci4: command tx timeout [ 460.863898][ T5818] Bluetooth: hci4: command tx timeout [ 462.972546][ T5818] Bluetooth: hci4: command tx timeout [ 463.633291][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.009830][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.081132][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.943660][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.033242][ T5823] Bluetooth: hci4: command tx timeout [ 465.584590][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.742165][ T5823] Bluetooth: hci5: command tx timeout [ 467.894402][ T5818] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 467.917566][ T5818] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 467.929177][ T5818] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 467.936510][ T5818] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 468.052324][ T5818] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 469.840686][ T5818] Bluetooth: hci5: command tx timeout [ 470.253522][ T5818] Bluetooth: hci10: command tx timeout [ 471.171733][ T5823] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 471.206230][ T5823] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 471.222304][ T5823] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 471.226539][ T5823] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 471.227346][ T5823] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 471.902074][ T5823] Bluetooth: hci5: command tx timeout [ 472.388214][ T5823] Bluetooth: hci10: command tx timeout [ 473.448381][ T5815] Bluetooth: hci11: command tx timeout [ 473.557166][ T5823] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 473.609426][ T5823] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 473.610770][ T5823] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 473.612125][ T5823] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 473.634491][ T5823] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 474.051945][ T5812] Bluetooth: hci5: command tx timeout [ 474.462090][ T5812] Bluetooth: hci10: command tx timeout [ 475.880145][ T5812] Bluetooth: hci11: command tx timeout [ 475.880253][ T5812] Bluetooth: hci12: command tx timeout [ 476.582416][ T5812] Bluetooth: hci10: command tx timeout [ 477.982528][ T5812] Bluetooth: hci11: command tx timeout [ 477.982562][ T5812] Bluetooth: hci12: command tx timeout [ 480.172040][ T5823] Bluetooth: hci12: command tx timeout [ 480.172079][ T5823] Bluetooth: hci11: command tx timeout [ 482.221993][ T5812] Bluetooth: hci12: command tx timeout [ 491.422109][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 493.385640][T10543] chnl_net:caif_netlink_parms(): no params data found [ 501.669055][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.669157][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.007657][T10543] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.007820][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.008081][T10543] bridge_slave_0: entered allmulticast mode [ 502.038055][T10543] bridge_slave_0: entered promiscuous mode [ 503.226642][T10543] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.442721][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.443032][T10543] bridge_slave_1: entered allmulticast mode [ 503.450890][T10543] bridge_slave_1: entered promiscuous mode [ 512.467551][T10556] chnl_net:caif_netlink_parms(): no params data found [ 515.789565][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 515.829878][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 515.833854][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 515.835573][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 515.836412][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 519.662209][ T5823] Bluetooth: hci6: command tx timeout [ 521.742025][ T5823] Bluetooth: hci6: command tx timeout [ 524.082058][ T5823] Bluetooth: hci6: command tx timeout [ 526.151937][ T5812] Bluetooth: hci6: command tx timeout [ 526.378484][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 527.023803][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 527.079531][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 527.081302][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 527.099049][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.590273][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 528.622984][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 528.626774][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 528.628126][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 528.633175][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 529.202226][ T5812] Bluetooth: hci4: command tx timeout [ 531.040705][ T5815] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 531.152207][ T38] INFO: task syz.3.1812:10392 blocked for more than 143 seconds. [ 531.152248][ T38] Not tainted syzkaller #0 [ 531.152259][ T38] Blocked by coredump. [ 531.152265][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.152273][ T38] task:syz.3.1812 state:D stack:25256 pid:10392 tgid:10386 ppid:5816 task_flags:0x40044c flags:0x00080001 [ 531.152344][ T38] Call Trace: [ 531.152355][ T38] [ 531.152370][ T38] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.152431][ T38] ? __pfx___schedule+0x10/0x10 [ 531.152476][ T38] ? schedule+0x91/0x360 [ 531.152513][ T38] schedule+0x165/0x360 [ 531.152541][ T38] schedule_timeout+0x9a/0x270 [ 531.152567][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 531.152606][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.152632][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.152657][ T38] ? wait_for_completion+0x267/0x5d0 [ 531.152686][ T38] wait_for_completion+0x2bf/0x5d0 [ 531.152727][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 531.152768][ T38] exit_aio+0x2f1/0x3b0 [ 531.152801][ T38] ? __pfx_exit_aio+0x10/0x10 [ 531.152839][ T38] ? uprobe_clear_state+0x288/0x2a0 [ 531.152866][ T38] ? mm_update_next_owner+0xa7/0x870 [ 531.152899][ T38] __mmput+0x68/0x3d0 [ 531.152924][ T38] exit_mm+0x1da/0x2c0 [ 531.152955][ T38] ? __pfx_exit_mm+0x10/0x10 [ 531.152986][ T38] ? rcu_is_watching+0x15/0xb0 [ 531.153009][ T38] do_exit+0x648/0x2300 [ 531.153035][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 531.153075][ T38] ? __pfx_do_exit+0x10/0x10 [ 531.153099][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 531.153121][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 531.153158][ T38] do_group_exit+0x21c/0x2d0 [ 531.153177][ T38] ? rt_spin_unlock+0x161/0x200 [ 531.153203][ T38] get_signal+0x125d/0x1310 [ 531.153249][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 531.153274][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 531.153314][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 531.153345][ T38] exit_to_user_mode_loop+0x72/0x130 [ 531.153371][ T38] do_syscall_64+0x2bd/0xfa0 [ 531.153397][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.153423][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.153443][ T38] ? clear_bhb_loop+0x60/0xb0 [ 531.153468][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.153487][ T38] RIP: 0033:0x7f1f17aff6c9 [ 531.153511][ T38] RSP: 002b:00007f1f15d3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 531.153532][ T38] RAX: 0000000000010106 RBX: 00007f1f17d56090 RCX: 00007f1f17aff6c9 [ 531.153546][ T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 531.153559][ T38] RBP: 00007f1f17b81f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.153572][ T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 531.153584][ T38] R13: 00007f1f17d56128 R14: 00007f1f17d56090 R15: 00007ffd9bd014c8 [ 531.153619][ T38] [ 531.153628][ T38] INFO: task syz.4.1827:10442 blocked for more than 143 seconds. [ 531.153642][ T38] Not tainted syzkaller #0 [ 531.153652][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.153662][ T38] task:syz.4.1827 state:D stack:25160 pid:10442 tgid:10442 ppid:5810 task_flags:0x400040 flags:0x00080002 [ 531.153721][ T38] Call Trace: [ 531.153728][ T38] [ 531.153741][ T38] __schedule+0x16f3/0x4c20 [ 531.153795][ T38] ? __pfx___schedule+0x10/0x10 [ 531.153841][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.153872][ T38] rt_mutex_schedule+0x77/0xf0 [ 531.153891][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 531.153914][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 531.153955][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 531.153980][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 531.154004][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 531.154024][ T38] ? __lock_acquire+0xab9/0xd20 [ 531.154061][ T38] ? rcu_barrier+0x4c/0x570 [ 531.154087][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 531.154116][ T38] ? rcu_barrier+0x4c/0x570 [ 531.154134][ T38] mutex_lock_nested+0x16a/0x1d0 [ 531.154154][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 531.154182][ T38] rcu_barrier+0x4c/0x570 [ 531.154205][ T38] ? rt_write_unlock+0x191/0x230 [ 531.154235][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 531.154264][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 531.154293][ T38] kvm_put_kvm+0x6ca/0xa80 [ 531.154328][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 531.154354][ T38] kvm_vm_release+0x46/0x50 [ 531.154377][ T38] __fput+0x45b/0xa80 [ 531.154410][ T38] task_work_run+0x1d4/0x260 [ 531.154433][ T38] ? __pfx_task_work_run+0x10/0x10 [ 531.154457][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 531.154486][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 531.154519][ T38] do_syscall_64+0x2bd/0xfa0 [ 531.154544][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.154570][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.154589][ T38] ? clear_bhb_loop+0x60/0xb0 [ 531.154614][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.154632][ T38] RIP: 0033:0x7f312a03f6c9 [ 531.154648][ T38] RSP: 002b:00007ffd05292258 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 531.154668][ T38] RAX: 0000000000000000 RBX: 000000000005ced4 RCX: 00007f312a03f6c9 [ 531.154681][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 531.154693][ T38] RBP: 00007f312a297da0 R08: 0000000000000001 R09: 0000000e0529254f [ 531.154706][ T38] R10: 0000001b2eb20000 R11: 0000000000000246 R12: 00007f312a29609c [ 531.154720][ T38] R13: 00007f312a296090 R14: ffffffffffffffff R15: 00007ffd05292370 [ 531.154753][ T38] [ 531.154761][ T38] INFO: task syz.1.1829:10450 blocked for more than 143 seconds. [ 531.154774][ T38] Not tainted syzkaller #0 [ 531.154784][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.154793][ T38] task:syz.1.1829 state:D stack:25160 pid:10450 tgid:10450 ppid:5813 task_flags:0x400040 flags:0x00080003 [ 531.154851][ T38] Call Trace: [ 531.154858][ T38] [ 531.154870][ T38] __schedule+0x16f3/0x4c20 [ 531.154924][ T38] ? __pfx___schedule+0x10/0x10 [ 531.154970][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.155000][ T38] rt_mutex_schedule+0x77/0xf0 [ 531.155018][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 531.155041][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 531.155083][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 531.155108][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 531.155132][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 531.155152][ T38] ? __lock_acquire+0xab9/0xd20 [ 531.155189][ T38] ? rcu_barrier+0x4c/0x570 [ 531.155215][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 531.155243][ T38] ? rcu_barrier+0x4c/0x570 [ 531.155260][ T38] mutex_lock_nested+0x16a/0x1d0 [ 531.155280][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 531.155329][ T38] rcu_barrier+0x4c/0x570 [ 531.155352][ T38] ? rt_write_unlock+0x191/0x230 [ 531.155381][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 531.155410][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 531.155438][ T38] kvm_put_kvm+0x6ca/0xa80 [ 531.155472][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 531.155498][ T38] kvm_vm_release+0x46/0x50 [ 531.155528][ T38] __fput+0x45b/0xa80 [ 531.155558][ T38] task_work_run+0x1d4/0x260 [ 531.155581][ T38] ? __pfx_task_work_run+0x10/0x10 [ 531.155605][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 531.155634][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 531.155661][ T38] do_syscall_64+0x2bd/0xfa0 [ 531.155685][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.155712][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.155731][ T38] ? clear_bhb_loop+0x60/0xb0 [ 531.155754][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.155773][ T38] RIP: 0033:0x7fb376b9f6c9 [ 531.155789][ T38] RSP: 002b:00007ffcdb988278 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 531.155809][ T38] RAX: 0000000000000000 RBX: 00007fb376df7da0 RCX: 00007fb376b9f6c9 [ 531.155822][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 531.155834][ T38] RBP: 00007fb376df7da0 R08: 000000000000976c R09: 0000000fdb98856f [ 531.155848][ T38] R10: 00000000005f44c4 R11: 0000000000000246 R12: 000000000005dfd0 [ 531.155861][ T38] R13: 00007fb376df5fa0 R14: ffffffffffffffff R15: 00007ffcdb988390 [ 531.155896][ T38] [ 531.155937][ T38] [ 531.155937][ T38] Showing all locks held in the system: [ 531.155953][ T38] 5 locks held by ktimers/1/29: [ 531.155965][ T38] 1 lock held by khungtaskd/38: [ 531.155976][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 531.156040][ T38] 4 locks held by kworker/u8:8/1302: [ 531.156051][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 531.156100][ T38] #1: ffffc90005267ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 531.156147][ T38] #2: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 531.156192][ T38] #3: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.156238][ T38] 5 locks held by kworker/u8:15/1428: [ 531.156250][ T38] 3 locks held by kworker/u8:18/1476: [ 531.156260][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 531.156314][ T38] #1: ffffc90005687ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 531.156361][ T38] #2: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 531.156425][ T38] 10 locks held by dhcpcd/5471: [ 531.156436][ T38] 2 locks held by getty/5563: [ 531.156447][ T38] #0: ffff88823bf3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.156496][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 531.156558][ T38] 3 locks held by kworker/u9:2/5812: [ 531.156569][ T38] #0: ffff88805c202138 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 531.156617][ T38] #1: ffffc90004c37ba0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 531.156666][ T38] #2: ffff88803d8dce88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 531.156713][ T38] 4 locks held by kworker/u9:6/5823: [ 531.156724][ T38] #0: ffff8880302bb138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 531.156774][ T38] #1: ffffc90004ca7ba0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 531.156821][ T38] #2: ffff88803ea380a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1500 [ 531.156871][ T38] #3: ffffffff8e9cb9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 531.156927][ T38] 1 lock held by syz-executor/10174: [ 531.156938][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.156983][ T38] 1 lock held by syz.0.1825/10438: [ 531.156993][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157037][ T38] 1 lock held by syz.4.1827/10442: [ 531.157047][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157091][ T38] 1 lock held by syz.1.1829/10450: [ 531.157101][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157145][ T38] 1 lock held by syz-executor/10463: [ 531.157156][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157201][ T38] 1 lock held by syz-executor/10482: [ 531.157212][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157256][ T38] 2 locks held by syz-executor/10489: [ 531.157268][ T38] #0: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 531.157310][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157355][ T38] 1 lock held by syz-executor/10490: [ 531.157365][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157409][ T38] 2 locks held by syz-executor/10495: [ 531.157420][ T38] #0: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 531.157461][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 531.157513][ T38] 1 lock held by syz-executor/10543: [ 531.157523][ T38] #0: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 531.157574][ T38] 4 locks held by syz-executor/10556: [ 531.157585][ T38] #0: ffff88805b648e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 531.157632][ T38] #1: ffff88805b6480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 531.157684][ T38] #2: ffffffff8e9cb9f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 531.157726][ T38] #3: ffff88803db78b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 531.157781][ T38] 2 locks held by syz-executor/10562: [ 531.157792][ T38] #0: ffff88806a860e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 531.157839][ T38] #1: ffff88806a8600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 531.157889][ T38] 2 locks held by syz-executor/10565: [ 531.157900][ T38] #0: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 531.157940][ T38] #1: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 531.157993][ T38] 2 locks held by syz-executor/10566: [ 531.158004][ T38] #0: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 531.158045][ T38] #1: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 531.158099][ T38] 2 locks held by syz-executor/10627: [ 531.158110][ T38] #0: ffffffff8e856620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 531.158152][ T38] #1: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 531.158202][ T38] 1 lock held by syz-executor/10644: [ 531.158213][ T38] #0: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 531.158264][ T38] 1 lock held by syz-executor/10647: [ 531.158275][ T38] #0: ffffffff8e863538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 531.158326][ T38] 1 lock held by dhcpcd/10651: [ 531.158336][ T38] #0: ffff888038a10358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 531.158383][ T38] 1 lock held by dhcpcd/10652: [ 531.158394][ T38] #0: ffff88803bec0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 531.158440][ T38] 1 lock held by dhcpcd/10654: [ 531.158451][ T38] #0: ffff88803bbd8358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 531.158497][ T38] [ 531.158508][ T38] ============================================= [ 531.158508][ T38] [ 531.158519][ T38] NMI backtrace for cpu 0 [ 531.158546][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.158566][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.158577][ T38] Call Trace: [ 531.158584][ T38] [ 531.158592][ T38] dump_stack_lvl+0x189/0x250 [ 531.158624][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.158651][ T38] ? __pfx__printk+0x10/0x10 [ 531.158687][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 531.158712][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 531.158737][ T38] ? __pfx__printk+0x10/0x10 [ 531.158763][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.158787][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 531.158812][ T38] watchdog+0xf60/0xfa0 [ 531.158843][ T38] ? watchdog+0x1e2/0xfa0 [ 531.158875][ T38] kthread+0x711/0x8a0 [ 531.158905][ T38] ? __pfx_watchdog+0x10/0x10 [ 531.158931][ T38] ? __pfx_kthread+0x10/0x10 [ 531.158955][ T38] ? rt_spin_unlock+0x150/0x200 [ 531.158981][ T38] ? rt_spin_unlock+0x161/0x200 [ 531.159000][ T38] ? __pfx_kthread+0x10/0x10 [ 531.159029][ T38] ret_from_fork+0x4bc/0x870 [ 531.159054][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 531.159083][ T38] ? __switch_to_asm+0x39/0x70 [ 531.159101][ T38] ? __switch_to_asm+0x33/0x70 [ 531.159118][ T38] ? __pfx_kthread+0x10/0x10 [ 531.159146][ T38] ret_from_fork_asm+0x1a/0x30 [ 531.159182][ T38] [ 531.159189][ T38] Sending NMI from CPU 0 to CPUs 1: [ 531.159217][ C1] NMI backtrace for cpu 1 [ 531.159240][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 531.159260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.159271][ C1] RIP: 0010:unwind_next_frame+0x214/0x2390 [ 531.159297][ C1] Code: ef 08 8b 15 ce 65 86 0b 8d 42 ff 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 24 03 ff 8f 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d [ 531.159314][ C1] RSP: 0018:ffffc90000a3e398 EFLAGS: 00000a02 [ 531.159330][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 916f383191496100 [ 531.159342][ C1] RDX: 000000000009c51f RSI: ffffffff8b3dddc0 RDI: ffffffff8b3ddd80 [ 531.159355][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81736c15 [ 531.159368][ C1] R10: ffffc90000a3e4b8 R11: ffffffff81aaccb0 R12: ffffffff8184d11e [ 531.159382][ C1] R13: ffffffff90011668 R14: ffffc90000a3e468 R15: 00000000000084d1 [ 531.159395][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 531.159410][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.159423][ C1] CR2: 0000560249237950 CR3: 0000000038148000 CR4: 00000000003526f0 [ 531.159439][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 531.159450][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 531.159461][ C1] Call Trace: [ 531.159468][ C1] [ 531.159479][ C1] ? unwind_next_frame+0xa5/0x2390 [ 531.159502][ C1] ? run_ktimerd+0xcf/0x190 [ 531.159527][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.159548][ C1] arch_stack_walk+0x11c/0x150 [ 531.159574][ C1] ? run_ktimerd+0xcf/0x190 [ 531.159599][ C1] stack_trace_save+0x9c/0xe0 [ 531.159618][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 531.159637][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 531.159663][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.159690][ C1] kasan_save_track+0x3e/0x80 [ 531.159712][ C1] ? kasan_save_track+0x3e/0x80 [ 531.159732][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 531.159760][ C1] ? __kmalloc_cache_noprof+0x1ef/0x6c0 [ 531.159783][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 531.159809][ C1] ? dst_init+0xd9/0x450 [ 531.159829][ C1] ? dst_alloc+0x12a/0x170 [ 531.159849][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 531.159873][ C1] ? ip_route_output_key_hash+0x174/0x280 [ 531.159895][ C1] ? ip_route_output_flow+0x2a/0x150 [ 531.159914][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 531.159939][ C1] ? synproxy_send_tcp+0x3a7/0x700 [ 531.159958][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 531.159979][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 531.160004][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 531.160027][ C1] ? nft_do_chain+0x40c/0x1920 [ 531.160049][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 531.160072][ C1] ? nf_hook_slow+0xc5/0x220 [ 531.160091][ C1] ? NF_HOOK+0x206/0x3a0 [ 531.160106][ C1] ? NF_HOOK+0x30c/0x3a0 [ 531.160121][ C1] ? __netif_receive_skb+0x143/0x380 [ 531.160146][ C1] ? process_backlog+0x31e/0x900 [ 531.160161][ C1] ? __napi_poll+0xb6/0x540 [ 531.160184][ C1] ? net_rx_action+0x5f7/0xda0 [ 531.160199][ C1] ? handle_softirqs+0x22f/0x710 [ 531.160218][ C1] ? run_ktimerd+0xcf/0x190 [ 531.160259][ C1] __kasan_kmalloc+0x93/0xb0 [ 531.160283][ C1] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 531.160306][ C1] ? ref_tracker_alloc+0x13b/0x450 [ 531.160332][ C1] ref_tracker_alloc+0x13b/0x450 [ 531.160358][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 531.160389][ C1] ? dst_alloc+0x105/0x170 [ 531.160409][ C1] ? rcu_is_watching+0x15/0xb0 [ 531.160427][ C1] dst_init+0xd9/0x450 [ 531.160451][ C1] dst_alloc+0x12a/0x170 [ 531.160474][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 531.160502][ C1] ? ip_route_output_key_hash+0xc1/0x280 [ 531.160525][ C1] ip_route_output_key_hash+0x174/0x280 [ 531.160547][ C1] ? __lock_acquire+0xab9/0xd20 [ 531.160572][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 531.160604][ C1] ip_route_output_flow+0x2a/0x150 [ 531.160624][ C1] ? ip_route_me_harder+0x6ae/0xf10 [ 531.160650][ C1] ip_route_me_harder+0x6c4/0xf10 [ 531.160680][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 531.160715][ C1] ? rcu_is_watching+0x15/0xb0 [ 531.160737][ C1] synproxy_send_tcp+0x3a7/0x700 [ 531.160768][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 531.160797][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 531.160817][ C1] ? nft_fib_reduce+0x428/0x640 [ 531.160839][ C1] ? synproxy_pernet+0x45/0x270 [ 531.160866][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 531.160894][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 531.160920][ C1] ? nf_ip_checksum+0x13c/0x510 [ 531.160946][ C1] nft_synproxy_do_eval+0x345/0x570 [ 531.160973][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 531.160998][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 531.161029][ C1] nft_do_chain+0x40c/0x1920 [ 531.161061][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 531.161100][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 531.161119][ C1] nft_do_chain_inet+0x25d/0x340 [ 531.161142][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 531.161172][ C1] ? NF_HOOK+0x9a/0x3a0 [ 531.161189][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 531.161213][ C1] nf_hook_slow+0xc5/0x220 [ 531.161236][ C1] NF_HOOK+0x206/0x3a0 [ 531.161254][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 531.161272][ C1] ? NF_HOOK+0x9a/0x3a0 [ 531.161288][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 531.161303][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 531.161323][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 531.161342][ C1] ? skb_dst+0x4f/0xd0 [ 531.161359][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 531.161378][ C1] NF_HOOK+0x30c/0x3a0 [ 531.161395][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 531.161411][ C1] ? NF_HOOK+0x9a/0x3a0 [ 531.161427][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 531.161445][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 531.161468][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 531.161483][ C1] __netif_receive_skb+0x143/0x380 [ 531.161510][ C1] ? process_backlog+0x27b/0x900 [ 531.161526][ C1] process_backlog+0x31e/0x900 [ 531.161549][ C1] __napi_poll+0xb6/0x540 [ 531.161576][ C1] net_rx_action+0x5f7/0xda0 [ 531.161591][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.161616][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 531.161647][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 531.161682][ C1] handle_softirqs+0x22f/0x710 [ 531.161709][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 531.161735][ C1] run_ktimerd+0xcf/0x190 [ 531.161765][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 531.161793][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 531.161814][ C1] smpboot_thread_fn+0x542/0xa60 [ 531.161836][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 531.161865][ C1] kthread+0x711/0x8a0 [ 531.161886][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 531.161904][ C1] ? __pfx_kthread+0x10/0x10 [ 531.161923][ C1] ? rt_spin_unlock+0x150/0x200 [ 531.161947][ C1] ? rt_spin_unlock+0x161/0x200 [ 531.161966][ C1] ? __pfx_kthread+0x10/0x10 [ 531.161992][ C1] ret_from_fork+0x4bc/0x870 [ 531.162013][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 531.162038][ C1] ? __switch_to_asm+0x39/0x70 [ 531.162055][ C1] ? __switch_to_asm+0x33/0x70 [ 531.162072][ C1] ? __pfx_kthread+0x10/0x10 [ 531.162097][ C1] ret_from_fork_asm+0x1a/0x30 [ 531.162125][ C1] [ 531.282004][ T5815] Bluetooth: hci4: command tx timeout [ 531.367833][ T5815] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 531.420288][ T5815] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 531.536464][ T5815] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 531.537404][ T5815] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 533.193717][T10643] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 533.194108][T10643] CPU: 0 UID: 0 PID: 10643 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 533.194131][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.194143][T10643] Call Trace: [ 533.194150][T10643] [ 533.194158][T10643] dump_stack_lvl+0x189/0x250 [ 533.194195][T10643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.194222][T10643] ? __pfx__printk+0x10/0x10 [ 533.194245][T10643] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.194268][T10643] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.194291][T10643] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 533.194316][T10643] warn_alloc+0x22e/0x3b0 [ 533.194351][T10643] ? __pfx_warn_alloc+0x10/0x10 [ 533.194386][T10643] ? __get_vm_area_node+0x2bc/0x350 [ 533.194412][T10643] ? kcov_ioctl+0x58/0x650 [ 533.194441][T10643] __vmalloc_node_range_noprof+0x690/0x12d0 [ 533.194491][T10643] ? smack_file_ioctl+0x2ac/0x340 [ 533.194522][T10643] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 533.194558][T10643] vmalloc_user_noprof+0xad/0xf0 [ 533.194582][T10643] ? kcov_ioctl+0x58/0x650 [ 533.194615][T10643] kcov_ioctl+0x58/0x650 [ 533.194648][T10643] ? bpf_lsm_file_ioctl+0x9/0x20 [ 533.194666][T10643] ? __pfx_kcov_ioctl+0x10/0x10 [ 533.194691][T10643] __se_sys_ioctl+0xff/0x170 [ 533.194715][T10643] do_syscall_64+0xfa/0xfa0 [ 533.194741][T10643] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.194768][T10643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.194787][T10643] ? clear_bhb_loop+0x60/0xb0 [ 533.194810][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.194829][T10643] RIP: 0033:0x7f5b9361f2cb [ 533.194846][T10643] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 533.194863][T10643] RSP: 002b:00007ffe723a4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.194882][T10643] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f5b9361f2cb [ 533.194896][T10643] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 533.194909][T10643] RBP: 00007f5b93875f40 R08: 00000000000000da R09: 0000000000000000 [ 533.194921][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.194933][T10643] R13: 0000000000000003 R14: 00007ffe723a4398 R15: 0000000000000000 [ 533.194964][T10643] [ 533.194981][T10643] Mem-Info: [ 533.194990][T10643] active_anon:271 inactive_anon:25370 isolated_anon:0 [ 533.194990][T10643] active_file:20646 inactive_file:40759 isolated_file:0 [ 533.194990][T10643] unevictable:768 dirty:258 writeback:58 [ 533.194990][T10643] slab_reclaimable:11889 slab_unreclaimable:158190 [ 533.194990][T10643] mapped:71224 shmem:18267 pagetables:2458 [ 533.194990][T10643] sec_pagetables:0 bounce:0 [ 533.194990][T10643] kernel_misc_reclaimable:0 [ 533.194990][T10643] free:1148613 free_pcp:2509 free_cma:0 [ 533.195048][T10643] Node 0 active_anon:1084kB inactive_anon:101480kB active_file:82324kB inactive_file:163036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:284844kB dirty:1028kB writeback:232kB shmem:71532kB kernel_stack:13844kB pagetables:9708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.195095][T10643] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.195161][T10643] Node 0 DMA free:15304kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 533.195220][T10643] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 533.195253][T10643] Node 0 DMA32 free:673440kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1084kB inactive_anon:101480kB active_file:82324kB inactive_file:163036kB unevictable:1536kB writepending:1360kB zspages:0kB present:3129332kB managed:2576080kB mlocked:0kB bounce:0kB free_pcp:10020kB local_pcp:6252kB free_cma:0kB [ 533.195315][T10643] lowmem_reserve[]: 0 0 1 1 1 [ 533.195345][T10643] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.195399][T10643] lowmem_reserve[]: 0 0 0 0 0 [ 533.195429][T10643] Node 1 Normal free:3905708kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.195487][T10643] lowmem_reserve[]: 0 0 0 0 0 [ 533.195518][T10643] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15304kB [ 533.195668][T10643] Node 0 DMA32: 150*4kB (UME) 53*8kB (UE) 633*16kB (UME) 462*32kB (UME) 302*64kB (UME) 211*128kB (UME) 94*256kB (ME) 33*512kB (UME) 9*1024kB (ME) 7*2048kB (UM) 131*4096kB (M) = 673360kB [ 533.195817][T10643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 533.195910][T10643] Node 1 Normal: 203*4kB (UE) 40*8kB (UME) 34*16kB (UE) 227*32kB (UE) 101*64kB (UME) 25*128kB (UME) 12*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 2*2048kB (ME) 945*4096kB (M) = 3905708kB [ 533.196064][T10643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.196081][T10643] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 533.196097][T10643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.196113][T10643] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 533.196128][T10643] 79668 total pagecache pages [ 533.196139][T10643] 0 pages in swap cache [ 533.196146][T10643] Free swap = 124996kB [ 533.196153][T10643] Total swap = 124996kB [ 533.196160][T10643] 2097051 pages RAM [ 533.196167][T10643] 0 pages HighMem/MovableOnly [ 533.196174][T10643] 421005 pages reserved [ 533.196181][T10643] 0 pages cma reserved [ 533.712663][ T5815] Bluetooth: hci4: command tx timeout [ 533.902163][ T5815] Bluetooth: hci7: command tx timeout [ 534.251998][ T5815] Bluetooth: hci13: command tx timeout [ 535.852066][ T5815] Bluetooth: hci4: command tx timeout [ 536.052030][ T5815] Bluetooth: hci7: command tx timeout [ 536.332043][ T5815] Bluetooth: hci13: command tx timeout [ 538.062234][ T5812] Bluetooth: hci7: command tx timeout [ 538.428239][ T5812] Bluetooth: hci13: command tx timeout [ 539.996211][ T5812] Bluetooth: hci8: command 0x0406 tx timeout [ 539.996254][ T5812] Bluetooth: hci9: command 0x0406 tx timeout [ 540.212082][ T5818] Bluetooth: hci7: command tx timeout [ 540.652056][ T5818] Bluetooth: hci13: command tx timeout