last executing test programs: 11m3.024232773s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 11m2.804841451s ago: executing program 0 (id=6): fallocate(0xffffffffffffffff, 0x1, 0x3, 0x5) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000540), 0x20, 0x0, 0x0) 11m2.636805261s ago: executing program 1 (id=2): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="e6"], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 11m2.449331518s ago: executing program 1 (id=7): syz_emit_vhci(0x0, 0x0) 11m2.120538257s ago: executing program 1 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x25, 0x1, 0x3, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) 11m1.100262505s ago: executing program 1 (id=9): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0x5, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) read(r4, &(0x7f0000000a40)=""/141, 0x8d) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz0\x00', 0xa7d}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0f, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3e56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)="18", 0x1) 10m59.677572452s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 10m59.384430897s ago: executing program 1 (id=14): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="e6"], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 10m57.948951329s ago: executing program 3 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x56899130b459a9f4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0xe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) 10m57.668601051s ago: executing program 3 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa4}}, 0x0) 10m57.28783667s ago: executing program 3 (id=19): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x14004, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@euid_lt={'euid<', r4}}], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 10m56.076921428s ago: executing program 3 (id=22): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) read$dsp(r1, 0x0, 0x0) 10m55.109413826s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 10m54.537876782s ago: executing program 3 (id=25): socket(0x11, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_secret(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8805) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) 10m47.175984777s ago: executing program 32 (id=6): fallocate(0xffffffffffffffff, 0x1, 0x3, 0x5) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000540), 0x20, 0x0, 0x0) 10m44.177708521s ago: executing program 33 (id=14): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="e6"], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 10m39.365393449s ago: executing program 34 (id=25): socket(0x11, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_secret(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8805) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) 9m20.688782317s ago: executing program 2 (id=149): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x13, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0xfc}}, 0x14) 9m20.6861507s ago: executing program 2 (id=150): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x1, {0x8, 0x6, 0xf, 0x689, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20004014}, 0x85) getgroups(0x27, &(0x7f0000002540)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x1000000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 9m20.483834896s ago: executing program 2 (id=151): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) userfaultfd(0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) 9m19.054102783s ago: executing program 2 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) r4 = openat(r3, &(0x7f0000000400)='./file1\x00', 0x80c0, 0x4) fchown(r4, 0x0, 0x0) 9m17.564707511s ago: executing program 2 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(0x0, 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 9m17.312794613s ago: executing program 2 (id=155): openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x4000, 0x9, 0x81, 0x34e, 0x0, [{0x9, 0x2, 0xc7, '\x00', 0x5}, {0x5, 0x3, 0x9c, '\x00', 0x7f}, {0x1, 0x6, 0x2, '\x00', 0x6}, {0x1, 0x5, 0x3, '\x00', 0x2}, {0xd, 0x6, 0x0, '\x00', 0x2}, {0x40, 0x2, 0x0, '\x00', 0x1}, {0x6, 0x8d, 0x1, '\x00', 0x4}, {0x2b, 0x5, 0x1, '\x00', 0x10}, {0x3, 0x6, 0x35, '\x00', 0x6}, {0x6, 0x6, 0x9, '\x00', 0x9}, {0x4, 0x2, 0x0, '\x00', 0x1}, {0x2, 0x10, 0x8, '\x00', 0x2}, {0x9, 0x7d, 0xe, '\x00', 0x1}, {0x40, 0x9, 0x9, '\x00', 0xff}, {0x5, 0x22, 0x2e, '\x00', 0xd}, {0x9, 0x18, 0x7, '\x00', 0xff}, {0x10, 0x7, 0x6, '\x00', 0x4}, {0x61, 0xfa, 0xf3, '\x00', 0x5}, {0x5, 0x0, 0xf8, '\x00', 0x8}, {0xab, 0xd4, 0xf2, '\x00', 0xf9}, {0x7, 0x9e, 0xa0, '\x00', 0x5}, {0x40, 0xd, 0x7e, '\x00', 0x3}, {0xfa, 0x9, 0x2f, '\x00', 0x7}, {0x7f, 0x2, 0x3, '\x00', 0x2}]}}) 9m2.267620765s ago: executing program 35 (id=155): openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x4000, 0x9, 0x81, 0x34e, 0x0, [{0x9, 0x2, 0xc7, '\x00', 0x5}, {0x5, 0x3, 0x9c, '\x00', 0x7f}, {0x1, 0x6, 0x2, '\x00', 0x6}, {0x1, 0x5, 0x3, '\x00', 0x2}, {0xd, 0x6, 0x0, '\x00', 0x2}, {0x40, 0x2, 0x0, '\x00', 0x1}, {0x6, 0x8d, 0x1, '\x00', 0x4}, {0x2b, 0x5, 0x1, '\x00', 0x10}, {0x3, 0x6, 0x35, '\x00', 0x6}, {0x6, 0x6, 0x9, '\x00', 0x9}, {0x4, 0x2, 0x0, '\x00', 0x1}, {0x2, 0x10, 0x8, '\x00', 0x2}, {0x9, 0x7d, 0xe, '\x00', 0x1}, {0x40, 0x9, 0x9, '\x00', 0xff}, {0x5, 0x22, 0x2e, '\x00', 0xd}, {0x9, 0x18, 0x7, '\x00', 0xff}, {0x10, 0x7, 0x6, '\x00', 0x4}, {0x61, 0xfa, 0xf3, '\x00', 0x5}, {0x5, 0x0, 0xf8, '\x00', 0x8}, {0xab, 0xd4, 0xf2, '\x00', 0xf9}, {0x7, 0x9e, 0xa0, '\x00', 0x5}, {0x40, 0xd, 0x7e, '\x00', 0x3}, {0xfa, 0x9, 0x2f, '\x00', 0x7}, {0x7f, 0x2, 0x3, '\x00', 0x2}]}}) 1m21.1856212s ago: executing program 4 (id=710): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) socket(0x10, 0x3, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000380)={0x1, r8, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000080)={0x0, r8, r7}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/528]) 1m18.946950452s ago: executing program 4 (id=712): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2100004d695ab500900b9200000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x24044000) 1m18.496405402s ago: executing program 4 (id=716): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4c, 0x0, &(0x7f0000000240)) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) 1m17.073456854s ago: executing program 4 (id=720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) msgget(0x2, 0x340) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f00000000c0)=0xfffffffd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r5, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1m15.50207317s ago: executing program 4 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m14.03921609s ago: executing program 4 (id=723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) read$FUSE(r6, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 57.079096774s ago: executing program 36 (id=723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) read$FUSE(r6, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 29.887834317s ago: executing program 8 (id=779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000300)={0x17, 0xa, 0x2, "ba2000fc0000000000ffff00", 0x3247504d}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x1, 0x4, 0x2}) sendmsg$nl_route(r0, 0x0, 0x4054) 28.424775876s ago: executing program 8 (id=780): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1, 0x8b, 0x3a, 0x20, 0x711, 0x210, 0x7c8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x62, 0x1, 0x0, 0x5b, 0x37, 0xe1, 0x4}}]}}]}}, 0x0) 23.31638554s ago: executing program 8 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000300)={0x17, 0xa, 0x2, "ba2000fc0000000000ffff00", 0x3247504d}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x1, 0x4, 0x2}) sendmsg$nl_route(r0, 0x0, 0x4054) 19.208888387s ago: executing program 8 (id=797): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 16.060907454s ago: executing program 5 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) 14.012120869s ago: executing program 5 (id=802): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0xfffffffe, 0x35b}, &(0x7f0000000380)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 13.716794276s ago: executing program 5 (id=805): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x4) 12.651421665s ago: executing program 5 (id=806): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0xa0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 10.104052262s ago: executing program 8 (id=810): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4c, 0x0, &(0x7f0000000240)) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) 9.040621559s ago: executing program 5 (id=813): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000016c0)=ANY=[@ANYRES16], &(0x7f00000000c0)={0x0, 0x0, 0x81, &(0x7f0000000040)=ANY=[], 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x2801}}]}) 8.254761961s ago: executing program 7 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 8.016614285s ago: executing program 6 (id=815): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5, 0xc8, 0x4}}}, 0x7) chdir(0x0) 6.66445078s ago: executing program 7 (id=816): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x4) 6.095363334s ago: executing program 6 (id=817): mq_open(&(0x7f00000002c0)='*#&\x00', 0x40, 0x20, &(0x7f0000000300)={0x2, 0x5, 0xffffffffffffffff, 0xe}) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44024}], 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x5) 5.621329071s ago: executing program 7 (id=818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, 0x0, 0x0) msgget$private(0x0, 0x8) 4.940593299s ago: executing program 7 (id=819): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2290, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 4.787629318s ago: executing program 6 (id=820): mq_open(&(0x7f00000002c0)='*#&\x00', 0x40, 0x20, &(0x7f0000000300)={0x2, 0x5, 0xffffffffffffffff, 0xe}) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r1, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r1, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44024}], 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x5) 3.337035006s ago: executing program 6 (id=821): msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x4, 0x0) r0 = msgget$private(0x0, 0x420) creat(0x0, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup(0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES32, @ANYRES16=r3, @ANYRES16=r2, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000680)=""/79) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$kcm(0x2d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_newnexthop={0x4c, 0x68, 0x10, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0xa}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4001) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) msgctl$IPC_RMID(r0, 0x0) 3.314149164s ago: executing program 8 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0xa0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 3.256737158s ago: executing program 7 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.446833099s ago: executing program 6 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 1.444758737s ago: executing program 7 (id=825): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x0, r7, r6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) 1.041749638s ago: executing program 5 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) 0s ago: executing program 6 (id=827): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x4) kernel console output (not intermixed with test programs): 403.085794][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.086628][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.807396][ T7469] tty tty29: ldisc open failed (-12), clearing slot 28 [ 404.463470][ T7476] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 405.362936][ T5854] Bluetooth: hci4: command tx timeout [ 407.403201][ T5854] Bluetooth: hci4: command tx timeout [ 407.756000][ T1304] bridge_slave_1: left allmulticast mode [ 407.756033][ T1304] bridge_slave_1: left promiscuous mode [ 407.756317][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.042225][ T1304] bridge_slave_0: left allmulticast mode [ 408.042258][ T1304] bridge_slave_0: left promiscuous mode [ 408.042531][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.134995][ T1304] bridge_slave_1: left allmulticast mode [ 408.135028][ T1304] bridge_slave_1: left promiscuous mode [ 408.135268][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.252066][ T1304] bridge_slave_0: left allmulticast mode [ 408.252098][ T1304] bridge_slave_0: left promiscuous mode [ 408.252361][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.348347][ T1304] bridge_slave_1: left allmulticast mode [ 408.348380][ T1304] bridge_slave_1: left promiscuous mode [ 408.348642][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.411953][ T1304] bridge_slave_0: left allmulticast mode [ 408.411991][ T1304] bridge_slave_0: left promiscuous mode [ 408.412287][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.872822][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.991700][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.086702][ T1304] bond0 (unregistering): Released all slaves [ 409.321680][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.421471][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.480568][ T5854] Bluetooth: hci4: command tx timeout [ 409.504920][ T1304] bond0 (unregistering): Released all slaves [ 409.801410][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.887262][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.946029][ T1304] bond0 (unregistering): Released all slaves [ 410.680668][ T1304] hsr_slave_0: left promiscuous mode [ 410.727350][ T1304] hsr_slave_1: left promiscuous mode [ 410.727998][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.762666][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.920697][ T1304] hsr_slave_0: left promiscuous mode [ 410.962244][ T1304] hsr_slave_1: left promiscuous mode [ 410.964098][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.011517][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.190427][ T1304] hsr_slave_0: left promiscuous mode [ 411.210464][ T1304] hsr_slave_1: left promiscuous mode [ 411.211407][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.252302][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.560378][ T5854] Bluetooth: hci4: command tx timeout [ 412.021124][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 412.389718][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 412.507529][ T7499] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 416.021635][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 416.411412][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 418.241425][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 418.342732][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 419.663868][ T7466] chnl_net:caif_netlink_parms(): no params data found [ 420.265345][ T7527] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 421.194418][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.194653][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.194864][ T7466] bridge_slave_0: entered allmulticast mode [ 421.197638][ T7466] bridge_slave_0: entered promiscuous mode [ 421.261696][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.263609][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.263829][ T7466] bridge_slave_1: entered allmulticast mode [ 421.279757][ T7466] bridge_slave_1: entered promiscuous mode [ 421.612824][ T7466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.711385][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.731478][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.751149][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.770012][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.786296][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.788769][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.387814][ T7466] team0: Port device team_slave_0 added [ 422.715551][ T7466] team0: Port device team_slave_1 added [ 422.915392][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.938530][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.939768][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.958617][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.959522][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.892316][ T5854] Bluetooth: hci5: command tx timeout [ 424.780973][ T7550] new mount options do not match the existing superblock, will be ignored [ 424.795781][ T7550] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 424.869642][ T37] audit: type=1326 audit(1757856178.790:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 424.870045][ T37] audit: type=1326 audit(1757856178.790:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 425.016404][ T5854] Bluetooth: hci0: command tx timeout [ 425.092411][ T37] audit: type=1326 audit(1757856178.790:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 425.335665][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.335684][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.335721][ T7466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.417645][ T37] audit: type=1326 audit(1757856179.600:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 425.417696][ T37] audit: type=1326 audit(1757856179.600:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 425.478328][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.478345][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.478370][ T7466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.642333][ T7551] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 425.960542][ T5854] Bluetooth: hci5: command tx timeout [ 426.417903][ T7561] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 427.011785][ T7466] hsr_slave_0: entered promiscuous mode [ 427.013208][ T7466] hsr_slave_1: entered promiscuous mode [ 428.577576][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.593458][ T5860] Bluetooth: hci5: command tx timeout [ 428.599224][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.608522][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.627219][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.628179][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.560046][ T7586] new mount options do not match the existing superblock, will be ignored [ 430.576902][ T7586] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 430.656784][ T37] audit: type=1326 audit(1757856184.570:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 430.657241][ T37] audit: type=1326 audit(1757856184.570:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 430.657584][ T37] audit: type=1326 audit(1757856184.570:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7582 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 431.112145][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.112680][ T5854] Bluetooth: hci5: command tx timeout [ 431.112737][ T5854] Bluetooth: hci6: command tx timeout [ 431.164084][ T7585] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 431.328690][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.752512][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.876124][ T7598] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 432.344050][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.170605][ T5847] Bluetooth: hci6: command tx timeout [ 433.938883][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 434.995991][ T7539] chnl_net:caif_netlink_parms(): no params data found [ 435.240419][ T5847] Bluetooth: hci6: command tx timeout [ 437.088367][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.342539][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.345571][ T5847] Bluetooth: hci6: command tx timeout [ 438.238526][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.365979][ T7623] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 439.199939][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.200082][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.214982][ T7532] bridge_slave_0: entered allmulticast mode [ 439.217882][ T7532] bridge_slave_0: entered promiscuous mode [ 439.252602][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.252817][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.253018][ T7532] bridge_slave_1: entered allmulticast mode [ 439.256035][ T7532] bridge_slave_1: entered promiscuous mode [ 439.631843][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.635843][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.636096][ T7539] bridge_slave_0: entered allmulticast mode [ 439.638895][ T7539] bridge_slave_0: entered promiscuous mode [ 439.693190][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.693500][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.693646][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.693844][ T7539] bridge_slave_1: entered allmulticast mode [ 439.698809][ T7539] bridge_slave_1: entered promiscuous mode [ 439.810742][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.130547][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.130611][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.247482][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.356765][ T7532] team0: Port device team_slave_0 added [ 440.363449][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.418279][ T7532] team0: Port device team_slave_1 added [ 440.502042][ T7568] chnl_net:caif_netlink_parms(): no params data found [ 440.805005][ T7539] team0: Port device team_slave_0 added [ 440.834427][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.834443][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.834478][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.837409][ T7539] team0: Port device team_slave_1 added [ 440.987092][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.987103][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.987117][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.081234][ T1304] bridge_slave_1: left allmulticast mode [ 441.081265][ T1304] bridge_slave_1: left promiscuous mode [ 441.081425][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.152480][ T1304] bridge_slave_0: left allmulticast mode [ 441.152511][ T1304] bridge_slave_0: left promiscuous mode [ 441.155363][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.226421][ T1304] bridge_slave_1: left allmulticast mode [ 441.226453][ T1304] bridge_slave_1: left promiscuous mode [ 441.226685][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.302151][ T1304] bridge_slave_0: left allmulticast mode [ 441.302190][ T1304] bridge_slave_0: left promiscuous mode [ 441.302451][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.385091][ T1304] bridge_slave_1: left allmulticast mode [ 441.385125][ T1304] bridge_slave_1: left promiscuous mode [ 441.385381][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.462047][ T1304] bridge_slave_0: left allmulticast mode [ 441.462079][ T1304] bridge_slave_0: left promiscuous mode [ 441.462337][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.940912][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.031065][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.095322][ T1304] bond0 (unregistering): Released all slaves [ 443.447062][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.458414][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.811524][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.915662][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.181259][ T5209] udevd[5209]: worker [7338] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 445.246800][ T2369] pvrusb2: request_firmware fatal error with code=-110 [ 445.246830][ T2369] pvrusb2: Failure uploading firmware1 [ 445.246841][ T2369] pvrusb2: Device initialization was not successful. [ 445.246848][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 445.246858][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 445.247920][ T5924] pvrusb2: Device being rendered inoperable [ 445.941565][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.964767][ T1304] bond0 (unregistering): Released all slaves [ 446.532262][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.621353][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.684339][ T1304] bond0 (unregistering): Released all slaves [ 447.372167][ T7466] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 447.977225][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.977241][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.977267][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.002699][ T7466] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 448.099291][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.099307][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.099332][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.112364][ T7466] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 448.424363][ T7466] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 448.539075][ T7650] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 448.539098][ T7650] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.374'. [ 448.851781][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.851968][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.852215][ T7568] bridge_slave_0: entered allmulticast mode [ 448.855018][ T7568] bridge_slave_0: entered promiscuous mode [ 448.878909][ T7532] hsr_slave_0: entered promiscuous mode [ 448.892611][ T7532] hsr_slave_1: entered promiscuous mode [ 448.899542][ T7532] debugfs: 'hsr0' already exists in 'hsr' [ 448.899566][ T7532] Cannot create hsr debugfs directory [ 448.916490][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.916642][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.916882][ T7568] bridge_slave_1: entered allmulticast mode [ 448.925587][ T7568] bridge_slave_1: entered promiscuous mode [ 449.381504][ T7539] hsr_slave_0: entered promiscuous mode [ 449.382866][ T7539] hsr_slave_1: entered promiscuous mode [ 449.383841][ T7539] debugfs: 'hsr0' already exists in 'hsr' [ 449.383862][ T7539] Cannot create hsr debugfs directory [ 449.473355][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.883308][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.692780][ T1304] hsr_slave_0: left promiscuous mode [ 450.955719][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.977634][ T1304] hsr_slave_1: left promiscuous mode [ 450.986219][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.011468][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.089634][ T7664] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 452.220425][ T37] audit: type=1326 audit(1757856206.380:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 452.220786][ T37] audit: type=1326 audit(1757856206.380:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 452.221053][ T37] audit: type=1326 audit(1757856206.390:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7665 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 452.375876][ T7669] new mount options do not match the existing superblock, will be ignored [ 452.389417][ T7669] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 452.973218][ T1304] hsr_slave_0: left promiscuous mode [ 453.000764][ T7669] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 453.030463][ T1304] hsr_slave_1: left promiscuous mode [ 453.031489][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.121341][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.380610][ T1304] hsr_slave_0: left promiscuous mode [ 454.433106][ T1304] hsr_slave_1: left promiscuous mode [ 454.434061][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.481660][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.915202][ T7687] netlink: 'syz.4.381': attribute type 1 has an invalid length. [ 454.915224][ T7687] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.381'. [ 456.201220][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 457.500068][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 457.546246][ T7695] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 459.918648][ T37] audit: type=1326 audit(1757856214.070:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7699 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 459.919810][ T37] audit: type=1326 audit(1757856214.070:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7699 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 460.064057][ T7703] new mount options do not match the existing superblock, will be ignored [ 460.079511][ T7703] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 460.327088][ T37] audit: type=1326 audit(1757856214.080:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7699 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 460.596337][ T7703] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 460.607418][ T7702] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 460.831277][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 461.041372][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 461.502209][ T7716] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 461.502230][ T7716] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.388'. [ 464.195060][ T7725] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 465.281370][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 465.591345][ T7730] new mount options do not match the existing superblock, will be ignored [ 465.602458][ T7730] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 465.690996][ T37] audit: type=1326 audit(1757856219.600:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 465.691327][ T37] audit: type=1326 audit(1757856219.600:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 465.691637][ T37] audit: type=1326 audit(1757856219.610:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7726 comm="syz.4.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 466.170772][ T7729] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 466.219188][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.248281][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.260580][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.261942][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.262821][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.507032][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 468.403127][ T37] audit: type=1326 audit(1757856222.560:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7748 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 468.403480][ T37] audit: type=1326 audit(1757856222.560:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7748 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 468.403803][ T37] audit: type=1326 audit(1757856222.570:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7748 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 468.557486][ T7753] new mount options do not match the existing superblock, will be ignored [ 468.574738][ T7753] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 469.119236][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.122477][ T5854] Bluetooth: hci1: command tx timeout [ 469.151381][ T7753] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 469.163030][ T7751] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 469.326094][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.644068][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.014039][ T7762] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 470.014067][ T7762] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.395'. [ 470.978115][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.018210][ T7568] team0: Port device team_slave_0 added [ 471.171823][ T5854] Bluetooth: hci1: command tx timeout [ 471.281034][ T7768] Bluetooth: MGMT ver 1.23 [ 472.178080][ T7568] team0: Port device team_slave_1 added [ 472.202271][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.770726][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.770749][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.770774][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.796362][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.796378][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.796403][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.240670][ T5854] Bluetooth: hci1: command tx timeout [ 473.397565][ T7568] hsr_slave_0: entered promiscuous mode [ 473.398945][ T7568] hsr_slave_1: entered promiscuous mode [ 473.399885][ T7568] debugfs: 'hsr0' already exists in 'hsr' [ 473.399910][ T7568] Cannot create hsr debugfs directory [ 475.306605][ T7789] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 475.306628][ T7789] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.402'. [ 475.431812][ T5854] Bluetooth: hci1: command tx timeout [ 475.582296][ T7736] chnl_net:caif_netlink_parms(): no params data found [ 476.331008][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.331160][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.331405][ T7736] bridge_slave_0: entered allmulticast mode [ 476.334155][ T7736] bridge_slave_0: entered promiscuous mode [ 476.372271][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.372408][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.372652][ T7736] bridge_slave_1: entered allmulticast mode [ 476.407775][ T7736] bridge_slave_1: entered promiscuous mode [ 476.580535][ T990] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 476.665530][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.680658][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.730571][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 476.736693][ T990] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 476.736723][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.736742][ T990] usb 5-1: Product: syz [ 476.736756][ T990] usb 5-1: Manufacturer: syz [ 476.736770][ T990] usb 5-1: SerialNumber: syz [ 476.787981][ T990] usb 5-1: config 0 descriptor?? [ 476.997314][ T990] usb read operation failed. (-32) [ 477.180819][ T7736] team0: Port device team_slave_0 added [ 477.399369][ T990] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 477.413726][ T990] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 477.413754][ T990] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 477.517760][ T7736] team0: Port device team_slave_1 added [ 477.865739][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.865754][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.865777][ T7736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.868035][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.868048][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.868070][ T7736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.301992][ T7736] hsr_slave_0: entered promiscuous mode [ 478.303343][ T7736] hsr_slave_1: entered promiscuous mode [ 478.304247][ T7736] debugfs: 'hsr0' already exists in 'hsr' [ 478.304270][ T7736] Cannot create hsr debugfs directory [ 478.717234][ T7532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.775782][ T7532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.804953][ T7532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.889846][ T7532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.257114][ T7539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.351320][ T7539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 479.429108][ T7539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 479.491441][ T1304] bridge_slave_1: left allmulticast mode [ 479.491501][ T1304] bridge_slave_1: left promiscuous mode [ 479.491672][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.552025][ T1304] bridge_slave_0: left allmulticast mode [ 479.552056][ T1304] bridge_slave_0: left promiscuous mode [ 479.552324][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.638334][ T1304] bridge_slave_1: left allmulticast mode [ 479.638367][ T1304] bridge_slave_1: left promiscuous mode [ 479.638604][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.692007][ T1304] bridge_slave_0: left allmulticast mode [ 479.692039][ T1304] bridge_slave_0: left promiscuous mode [ 479.692289][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.051033][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.131512][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.199310][ T1304] bond0 (unregistering): Released all slaves [ 480.621399][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.121185][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.183810][ T1304] bond0 (unregistering): Released all slaves [ 481.230854][ T7539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.798703][ T7568] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 481.970485][ T1304] hsr_slave_0: left promiscuous mode [ 482.010460][ T1304] hsr_slave_1: left promiscuous mode [ 482.011200][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.064026][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.300419][ T1304] hsr_slave_0: left promiscuous mode [ 482.351549][ T1304] hsr_slave_1: left promiscuous mode [ 482.353166][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.406986][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.593940][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.624945][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.627354][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.629395][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.631196][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 483.101868][ T7829] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 483.101891][ T7829] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.409'. [ 483.705988][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 483.921092][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 484.277235][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.324962][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.753870][ T5847] Bluetooth: hci3: command tx timeout [ 484.820945][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.822310][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.823126][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.994388][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.338476][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.890800][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 486.021175][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 486.141792][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.232584][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.518555][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.550383][ T7568] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 486.801564][ T5860] Bluetooth: hci3: command tx timeout [ 486.949244][ T5860] Bluetooth: hci4: command tx timeout [ 487.338765][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.995934][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.926334][ T5860] Bluetooth: hci3: command tx timeout [ 489.152633][ T5860] Bluetooth: hci4: command tx timeout [ 489.261288][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.267182][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.272789][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.320284][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.331902][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.415756][ T7568] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 491.000475][ T5860] Bluetooth: hci3: command tx timeout [ 491.160432][ T5860] Bluetooth: hci4: command tx timeout [ 491.163981][ T7859] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 491.164001][ T7859] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.416'. [ 491.400365][ T5860] Bluetooth: hci0: command tx timeout [ 492.651583][ T7736] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 492.778218][ T7736] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 492.889517][ T7736] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 492.939833][ T7736] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 493.008571][ T7847] chnl_net:caif_netlink_parms(): no params data found [ 493.036420][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 493.089041][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 493.240331][ T5860] Bluetooth: hci4: command tx timeout [ 493.490509][ T5860] Bluetooth: hci0: command tx timeout [ 494.231868][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.232104][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.232299][ T7847] bridge_slave_0: entered allmulticast mode [ 494.234451][ T7847] bridge_slave_0: entered promiscuous mode [ 494.236517][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.236664][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.236855][ T7834] bridge_slave_0: entered allmulticast mode [ 494.238929][ T7834] bridge_slave_0: entered promiscuous mode [ 494.473988][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.474137][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.474327][ T7847] bridge_slave_1: entered allmulticast mode [ 494.478209][ T7847] bridge_slave_1: entered promiscuous mode [ 494.484838][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.484969][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.485142][ T7834] bridge_slave_1: entered allmulticast mode [ 494.489220][ T7834] bridge_slave_1: entered promiscuous mode [ 494.492274][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.492422][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.492604][ T7826] bridge_slave_0: entered allmulticast mode [ 494.495209][ T7826] bridge_slave_0: entered promiscuous mode [ 494.882652][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.882899][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.883136][ T7826] bridge_slave_1: entered allmulticast mode [ 494.885871][ T7826] bridge_slave_1: entered promiscuous mode [ 495.134265][ T7847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.137417][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.424531][ T7847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.426662][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.560589][ T5860] Bluetooth: hci0: command tx timeout [ 495.564528][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.739803][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.204621][ T7894] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 497.642876][ T5860] Bluetooth: hci0: command tx timeout [ 499.114044][ T7847] team0: Port device team_slave_0 added [ 499.154235][ T7834] team0: Port device team_slave_0 added [ 499.420990][ T7847] team0: Port device team_slave_1 added [ 499.423971][ T7834] team0: Port device team_slave_1 added [ 499.428278][ T7826] team0: Port device team_slave_0 added [ 500.514283][ T7826] team0: Port device team_slave_1 added [ 500.833258][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.833275][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.833300][ T7847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.834663][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.834676][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.834699][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.844313][ T7909] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 500.844333][ T7909] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.423'. [ 501.004875][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.004891][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.004916][ T7847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.118904][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.118920][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.118946][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.121318][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.121332][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.121356][ T7826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.229610][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.229626][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.229651][ T7826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.567123][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567197][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.005003][ T7847] hsr_slave_0: entered promiscuous mode [ 502.006376][ T7847] hsr_slave_1: entered promiscuous mode [ 502.029931][ T7834] hsr_slave_0: entered promiscuous mode [ 502.037390][ T7834] hsr_slave_1: entered promiscuous mode [ 502.038346][ T7834] debugfs: 'hsr0' already exists in 'hsr' [ 502.038369][ T7834] Cannot create hsr debugfs directory [ 502.472962][ T7826] hsr_slave_0: entered promiscuous mode [ 502.474290][ T7826] hsr_slave_1: entered promiscuous mode [ 502.475218][ T7826] debugfs: 'hsr0' already exists in 'hsr' [ 502.475240][ T7826] Cannot create hsr debugfs directory [ 504.171555][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.701308][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.743194][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.743544][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.794778][ T1556] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.794929][ T1556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.185572][ T7932] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 507.185595][ T7932] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.430'. [ 507.314283][ T7736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.196426][ T7736] veth0_vlan: entered promiscuous mode [ 508.350079][ T1304] bridge_slave_1: left allmulticast mode [ 508.350112][ T1304] bridge_slave_1: left promiscuous mode [ 508.362624][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.566276][ T1304] bridge_slave_0: left allmulticast mode [ 508.566310][ T1304] bridge_slave_0: left promiscuous mode [ 508.566594][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.975211][ T1304] bridge_slave_1: left allmulticast mode [ 508.975246][ T1304] bridge_slave_1: left promiscuous mode [ 508.975496][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.042031][ T1304] bridge_slave_0: left allmulticast mode [ 509.042066][ T1304] bridge_slave_0: left promiscuous mode [ 509.042331][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.085599][ T1304] bridge_slave_1: left allmulticast mode [ 509.085621][ T1304] bridge_slave_1: left promiscuous mode [ 509.085807][ T1304] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.144252][ T1304] bridge_slave_0: left allmulticast mode [ 509.144274][ T1304] bridge_slave_0: left promiscuous mode [ 509.144438][ T1304] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.536308][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.591295][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.652807][ T1304] bond0 (unregistering): Released all slaves [ 509.961410][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.022297][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.074492][ T1304] bond0 (unregistering): Released all slaves [ 510.391035][ T1304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.460829][ T1304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.510696][ T1304] bond0 (unregistering): Released all slaves [ 510.531987][ T7942] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 510.545626][ T7736] veth1_vlan: entered promiscuous mode [ 511.078988][ T7736] veth0_macvtap: entered promiscuous mode [ 511.138865][ T7736] veth1_macvtap: entered promiscuous mode [ 512.704821][ T1304] hsr_slave_0: left promiscuous mode [ 512.743356][ T1304] hsr_slave_1: left promiscuous mode [ 512.745149][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.879766][ T37] audit: type=1326 audit(1757856267.030:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 512.880151][ T37] audit: type=1326 audit(1757856267.030:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 513.026677][ T7961] new mount options do not match the existing superblock, will be ignored [ 513.043317][ T7961] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 513.258050][ T37] audit: type=1326 audit(1757856267.040:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7957 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 513.493291][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.691807][ T7962] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 513.990441][ T1304] hsr_slave_0: left promiscuous mode [ 514.030450][ T1304] hsr_slave_1: left promiscuous mode [ 514.031419][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.100537][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 514.100561][ T7972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.438'. [ 514.301212][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.510427][ T1304] hsr_slave_0: left promiscuous mode [ 514.599772][ T1304] hsr_slave_1: left promiscuous mode [ 514.623020][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.671416][ T1304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.011326][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 516.200559][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 517.611255][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 517.751325][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 518.893868][ T1304] team0 (unregistering): Port device team_slave_1 removed [ 519.031307][ T1304] team0 (unregistering): Port device team_slave_0 removed [ 519.785985][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.829439][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.877904][ T1556] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.897193][ T1556] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.913208][ T1556] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.913256][ T1556] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.457018][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.457039][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.462136][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.599205][ T7847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 520.665191][ T7847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 520.714750][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.714769][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.728007][ T7847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 520.828091][ T7847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 521.159332][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.361947][ T7834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 523.618513][ T7834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 523.647237][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.966785][ T7834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 524.057154][ T7834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 524.490444][ T7826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 524.536285][ T7826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 524.685012][ T7826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 524.815467][ T7826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.173147][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.935478][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.022013][ T8038] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 527.022929][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.971961][ T7847] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.028122][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.028872][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.050865][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.140775][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.148046][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.148227][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.297712][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.303541][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.394329][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.394622][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.464711][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.495067][ T1556] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.497745][ T1556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.778705][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.838420][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.875252][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.875403][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.948359][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.948569][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.482503][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.657465][ T7847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.737763][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.8.454'. [ 530.737787][ T8065] netlink: 40 bytes leftover after parsing attributes in process `syz.8.454'. [ 531.249355][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.452475][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.177625][ T7847] veth0_vlan: entered promiscuous mode [ 532.205498][ T7847] veth1_vlan: entered promiscuous mode [ 532.477092][ T7834] veth0_vlan: entered promiscuous mode [ 532.494444][ T7847] veth0_macvtap: entered promiscuous mode [ 532.532514][ T7834] veth1_vlan: entered promiscuous mode [ 532.535913][ T7847] veth1_macvtap: entered promiscuous mode [ 532.693881][ T7847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.742137][ T7826] veth0_vlan: entered promiscuous mode [ 532.745026][ T7847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.813190][ T7826] veth1_vlan: entered promiscuous mode [ 532.815956][ T1291] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.819314][ T1291] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.843426][ T1291] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.089148][ T1291] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.202424][ T7834] veth0_macvtap: entered promiscuous mode [ 533.425356][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.493000][ T7834] veth1_macvtap: entered promiscuous mode [ 533.570501][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 533.689756][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.731462][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 533.745040][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 533.806738][ T8100] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 534.311020][ T10] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 534.311049][ T10] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 534.311070][ T10] usb 9-1: config 13 has no interface number 0 [ 534.311119][ T10] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 534.311144][ T10] usb 9-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.311170][ T10] usb 9-1: config 13 interface 50 has no altsetting 0 [ 534.330009][ T10] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 534.330047][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.330067][ T10] usb 9-1: Product: syz [ 534.330082][ T10] usb 9-1: Manufacturer: syz [ 534.330096][ T10] usb 9-1: SerialNumber: syz [ 534.357108][ T8095] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 534.562026][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.664959][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.665014][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 534.920349][ T10] usb 9-1: USB disconnect, device number 2 [ 534.985854][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.235832][ T8106] udevd[8106]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.334453][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.392222][ T7826] veth0_macvtap: entered promiscuous mode [ 535.392831][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.392847][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.457168][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.553799][ T7826] veth1_macvtap: entered promiscuous mode [ 535.596897][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.768515][ T1291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.778951][ T1291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.818026][ T1291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.868052][ T1291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.868707][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.868722][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.927699][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.964548][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.103363][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.184969][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.334858][ T3614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.355070][ T3614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.357110][ T3614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.362604][ T3614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.579297][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.579318][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.882792][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.47'. [ 537.882860][ T8122] netlink: 40 bytes leftover after parsing attributes in process `syz.7.47'. [ 537.899312][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.609964][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.043196][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.074409][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.074432][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.211943][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.701607][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.989431][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.102208][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.102229][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.644295][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.644316][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.695822][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.8.465'. [ 540.695854][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.8.465'. [ 541.199901][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.408756][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.475910][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.507508][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.549515][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.263158][ T8150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.620756][ T990] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 542.620872][ T990] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 542.635272][ T990] usb 5-1: USB disconnect, device number 44 [ 544.266657][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 544.296170][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 544.309089][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 544.347491][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 544.361702][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.670433][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 544.812105][ T9] usb 7-1: device descriptor read/64, error -71 [ 545.117326][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.8.472'. [ 545.117351][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.8.472'. [ 545.336681][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.419961][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.894264][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.974020][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 546.083016][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.154668][ T9] usb 7-1: device descriptor read/64, error -71 [ 546.490975][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.494532][ T9] usb usb7-port1: attempt power cycle [ 547.040280][ T5854] Bluetooth: hci3: command tx timeout [ 547.110379][ T8180] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 547.153045][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.401295][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.678317][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 547.678385][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.477'. [ 547.702912][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.748510][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.234131][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.493559][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.494957][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 549.084298][ T5854] Bluetooth: hci3: command tx timeout [ 549.267860][ T8199] new mount options do not match the existing superblock, will be ignored [ 549.314520][ T8199] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 549.333951][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.934726][ T37] audit: type=1326 audit(1757856303.280:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.8.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 549.934777][ T37] audit: type=1326 audit(1757856303.280:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.8.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 549.934816][ T37] audit: type=1326 audit(1757856303.280:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.8.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 550.087957][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.198862][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.281313][ T37] audit: type=1326 audit(1757856304.460:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.8.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 550.281370][ T37] audit: type=1326 audit(1757856304.460:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8195 comm="syz.8.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 550.347880][ T8199] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 550.704134][ T1471] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.323019][ T1471] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.960373][ T5854] Bluetooth: hci3: command tx timeout [ 552.115511][ T9] usb 7-1: device descriptor read/8, error -71 [ 552.465225][ T8216] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 553.343202][ T1471] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.989352][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.6.484'. [ 553.989379][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.6.484'. [ 554.085595][ T5854] Bluetooth: hci3: command tx timeout [ 555.000812][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.046534][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.427216][ T1471] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.442511][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.565805][ T8238] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 556.988963][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.182573][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.222601][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.326833][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.695774][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.765352][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.636991][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.656944][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.756054][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.001429][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.075291][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.171677][ T8162] chnl_net:caif_netlink_parms(): no params data found [ 563.009146][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.009222][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.510563][ T1471] bridge_slave_1: left allmulticast mode [ 564.510605][ T1471] bridge_slave_1: left promiscuous mode [ 564.510871][ T1471] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.021644][ T8278] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 565.151653][ T1471] bridge_slave_0: left allmulticast mode [ 565.152231][ T1471] bridge_slave_0: left promiscuous mode [ 565.318597][ T1471] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.704261][ T37] audit: type=1326 audit(1757856320.840:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.7.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 566.704649][ T37] audit: type=1326 audit(1757856320.840:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.7.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 566.704945][ T37] audit: type=1326 audit(1757856320.850:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8284 comm="syz.7.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 566.841040][ T8292] new mount options do not match the existing superblock, will be ignored [ 566.854143][ T8292] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 568.032046][ T8293] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 571.993716][ T5917] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 572.130387][ T5917] usb 9-1: device descriptor read/64, error -71 [ 572.370353][ T5917] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 572.527307][ T5917] usb 9-1: device descriptor read/64, error -71 [ 572.630953][ T5917] usb usb9-port1: attempt power cycle [ 572.946251][ T1471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.971353][ T5917] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 572.990626][ T5917] usb 9-1: device descriptor read/8, error -71 [ 573.046157][ T1471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.118365][ T1471] bond0 (unregistering): Released all slaves [ 573.162319][ T8294] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 575.694254][ T37] audit: type=1326 audit(1757856329.870:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.694392][ T37] audit: type=1326 audit(1757856329.870:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.694491][ T37] audit: type=1326 audit(1757856329.870:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.694575][ T37] audit: type=1326 audit(1757856329.870:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.694814][ T37] audit: type=1326 audit(1757856329.870:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.694855][ T37] audit: type=1326 audit(1757856329.870:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.694939][ T37] audit: type=1326 audit(1757856329.870:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.695067][ T37] audit: type=1326 audit(1757856329.870:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.695194][ T37] audit: type=1326 audit(1757856329.870:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 575.739078][ T37] audit: type=1326 audit(1757856329.920:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8339 comm="syz.8.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 576.283998][ T8354] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 577.044657][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.045348][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.104979][ T8162] bridge_slave_0: entered allmulticast mode [ 577.136966][ T8162] bridge_slave_0: entered promiscuous mode [ 579.267852][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.269175][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.269396][ T8162] bridge_slave_1: entered allmulticast mode [ 579.331019][ T8162] bridge_slave_1: entered promiscuous mode [ 580.747914][ T8388] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 580.748373][ T8391] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 581.232155][ T5828] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 582.272167][ T5828] usb 8-1: device descriptor read/64, error -71 [ 582.650394][ T5828] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 583.072030][ T8408] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 583.274715][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.912638][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.916754][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.422502][ T1471] hsr_slave_0: left promiscuous mode [ 584.450853][ T1471] hsr_slave_1: left promiscuous mode [ 584.452353][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.452383][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.515266][ T1471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.515299][ T1471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.230483][ T1471] veth1_macvtap: left promiscuous mode [ 585.230609][ T1471] veth0_macvtap: left promiscuous mode [ 585.230908][ T1471] veth1_vlan: left promiscuous mode [ 585.231126][ T1471] veth0_vlan: left promiscuous mode [ 585.274645][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.806592][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.018497][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.097221][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.380276][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.615796][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.247720][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.278255][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.523256][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.971968][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.000366][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.094864][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.594330][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.646017][ T8457] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 590.375420][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.584761][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.640792][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 591.985106][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.219941][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.420366][ T5932] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 592.590384][ T5932] usb 9-1: device descriptor read/64, error -71 [ 592.776747][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 592.776763][ T37] audit: type=1326 audit(1757856346.950:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.776806][ T37] audit: type=1326 audit(1757856346.950:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.776843][ T37] audit: type=1326 audit(1757856346.950:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.776881][ T37] audit: type=1326 audit(1757856346.950:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.776921][ T37] audit: type=1326 audit(1757856346.950:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.776960][ T37] audit: type=1326 audit(1757856346.950:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.776999][ T37] audit: type=1326 audit(1757856346.950:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.777039][ T37] audit: type=1326 audit(1757856346.950:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.777078][ T37] audit: type=1326 audit(1757856346.950:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.777116][ T37] audit: type=1326 audit(1757856346.960:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 592.840470][ T5932] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 593.140443][ T5932] usb 9-1: device descriptor read/64, error -71 [ 593.251787][ T5932] usb usb9-port1: attempt power cycle [ 593.590679][ T5932] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 595.121371][ T1471] team0 (unregistering): Port device team_slave_1 removed [ 595.502003][ T1471] team0 (unregistering): Port device team_slave_0 removed [ 596.534935][ T5932] usb 9-1: device descriptor read/8, error -71 [ 599.661974][ T8469] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 599.787856][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 599.787874][ T37] audit: type=1326 audit(1757856353.970:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.787919][ T37] audit: type=1326 audit(1757856353.970:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.788607][ T37] audit: type=1326 audit(1757856353.970:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.788649][ T37] audit: type=1326 audit(1757856353.970:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.788688][ T37] audit: type=1326 audit(1757856353.970:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.789198][ T37] audit: type=1326 audit(1757856353.970:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.789238][ T37] audit: type=1326 audit(1757856353.970:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.789279][ T37] audit: type=1326 audit(1757856353.970:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.790061][ T37] audit: type=1326 audit(1757856353.970:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 599.790104][ T37] audit: type=1326 audit(1757856353.970:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8510 comm="syz.7.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 600.925363][ T8162] team0: Port device team_slave_0 added [ 600.961536][ T8162] team0: Port device team_slave_1 added [ 601.043289][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.560'. [ 601.043312][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz.6.560'. [ 602.011341][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.011358][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.011384][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.014111][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.014124][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.014150][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.316869][ T8162] hsr_slave_0: entered promiscuous mode [ 603.357922][ T8162] hsr_slave_1: entered promiscuous mode [ 603.359518][ T8162] debugfs: 'hsr0' already exists in 'hsr' [ 603.359542][ T8162] Cannot create hsr debugfs directory [ 603.522281][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 603.675204][ T9] usb 5-1: device descriptor read/64, error -71 [ 603.971783][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 604.110354][ T9] usb 5-1: device descriptor read/64, error -71 [ 604.230636][ T9] usb usb5-port1: attempt power cycle [ 604.600996][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 606.039787][ T1291] bridge_slave_1: left allmulticast mode [ 606.040746][ T1291] bridge_slave_1: left promiscuous mode [ 606.041001][ T1291] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.156139][ T1291] bridge_slave_0: left allmulticast mode [ 606.156172][ T1291] bridge_slave_0: left promiscuous mode [ 606.157002][ T1291] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.181820][ T9] usb 5-1: device descriptor read/8, error -71 [ 606.540822][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 606.540840][ T37] audit: type=1326 audit(1757856360.720:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.540882][ T37] audit: type=1326 audit(1757856360.720:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544315][ T37] audit: type=1326 audit(1757856360.720:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544358][ T37] audit: type=1326 audit(1757856360.720:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544399][ T37] audit: type=1326 audit(1757856360.720:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544438][ T37] audit: type=1326 audit(1757856360.720:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544477][ T37] audit: type=1326 audit(1757856360.720:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544515][ T37] audit: type=1326 audit(1757856360.720:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544554][ T37] audit: type=1326 audit(1757856360.720:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.544592][ T37] audit: type=1326 audit(1757856360.720:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.8.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 606.976918][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.997728][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 607.009530][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.017444][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.018285][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.553046][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.605183][ T8586] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 609.614331][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.614335][ T5860] Bluetooth: hci3: command tx timeout [ 609.720754][ T1291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.821267][ T1291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.875410][ T1291] bond0 (unregistering): Released all slaves [ 610.105489][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.958788][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.343805][ T1291] hsr_slave_0: left promiscuous mode [ 611.423367][ T1291] hsr_slave_1: left promiscuous mode [ 611.482312][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 611.502796][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.547924][ T1291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.642231][ T5854] Bluetooth: hci3: command tx timeout [ 613.731626][ T5854] Bluetooth: hci3: command tx timeout [ 614.079143][ T8627] net_ratelimit: 232 callbacks suppressed [ 614.079186][ T8627] netlink: zone id is out of range [ 614.091969][ T8626] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 614.355612][ T1291] team0 (unregistering): Port device team_slave_1 removed [ 614.501720][ T8627] netlink: set zone limit has 4 unknown bytes [ 614.951206][ T1291] team0 (unregistering): Port device team_slave_0 removed [ 614.982873][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 614.982888][ T37] audit: type=1326 audit(1757856369.140:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.982927][ T37] audit: type=1326 audit(1757856369.140:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.982958][ T37] audit: type=1326 audit(1757856369.140:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.982995][ T37] audit: type=1326 audit(1757856369.140:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.983035][ T37] audit: type=1326 audit(1757856369.140:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.983074][ T37] audit: type=1326 audit(1757856369.140:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.983113][ T37] audit: type=1326 audit(1757856369.140:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.983153][ T37] audit: type=1326 audit(1757856369.140:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.983187][ T37] audit: type=1326 audit(1757856369.140:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 614.983226][ T37] audit: type=1326 audit(1757856369.140:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8628 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 615.817181][ T5854] Bluetooth: hci3: command tx timeout [ 616.170615][ T9] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 616.324690][ T9] usb 9-1: config 0 has an invalid interface number: 59 but max is 0 [ 616.324718][ T9] usb 9-1: config 0 has no interface number 0 [ 616.327776][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 616.327804][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.327824][ T9] usb 9-1: Product: syz [ 616.327837][ T9] usb 9-1: Manufacturer: syz [ 616.327851][ T9] usb 9-1: SerialNumber: syz [ 616.430550][ T9] usb 9-1: config 0 descriptor?? [ 616.520497][ T9] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 617.829787][ T2369] usb 9-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 617.829807][ T2369] usb 9-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 617.835638][ T9] usb 9-1: USB disconnect, device number 12 [ 618.195614][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 619.509787][ T8675] new mount options do not match the existing superblock, will be ignored [ 619.525934][ T8675] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 620.261982][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 620.262001][ T37] audit: type=1326 audit(1757856374.410:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262045][ T37] audit: type=1326 audit(1757856374.410:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262085][ T37] audit: type=1326 audit(1757856374.410:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262125][ T37] audit: type=1326 audit(1757856374.410:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262165][ T37] audit: type=1326 audit(1757856374.410:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262204][ T37] audit: type=1326 audit(1757856374.410:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262244][ T37] audit: type=1326 audit(1757856374.410:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262284][ T37] audit: type=1326 audit(1757856374.410:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262324][ T37] audit: type=1326 audit(1757856374.410:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.262363][ T37] audit: type=1326 audit(1757856374.410:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8668 comm="syz.7.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 620.271081][ T8675] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 620.683069][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.683219][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.683474][ T8573] bridge_slave_0: entered allmulticast mode [ 620.703460][ T8573] bridge_slave_0: entered promiscuous mode [ 620.774044][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.774187][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.774419][ T8573] bridge_slave_1: entered allmulticast mode [ 620.793209][ T8573] bridge_slave_1: entered promiscuous mode [ 621.337225][ T8696] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 621.757229][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.793514][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.473020][ T8573] team0: Port device team_slave_0 added [ 622.493013][ T8573] team0: Port device team_slave_1 added [ 622.928834][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.928844][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.928858][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.990562][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.990579][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.990605][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.415078][ T8573] hsr_slave_0: entered promiscuous mode [ 623.415805][ T8573] hsr_slave_1: entered promiscuous mode [ 623.416275][ T8573] debugfs: 'hsr0' already exists in 'hsr' [ 623.416289][ T8573] Cannot create hsr debugfs directory [ 624.477285][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.477359][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.530341][ T31] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 624.902310][ T31] usb 8-1: config 0 has an invalid interface number: 59 but max is 0 [ 624.902328][ T31] usb 8-1: config 0 has no interface number 0 [ 624.904147][ T31] usb 8-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 624.904162][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.904173][ T31] usb 8-1: Product: syz [ 624.904180][ T31] usb 8-1: Manufacturer: syz [ 624.904187][ T31] usb 8-1: SerialNumber: syz [ 624.907504][ T31] usb 8-1: config 0 descriptor?? [ 624.964882][ T31] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 625.245408][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.427098][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.546817][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.633668][ T8710] netlink: 'syz.7.604': attribute type 1 has an invalid length. [ 625.689517][ T31] usb 8-1: USB disconnect, device number 4 [ 625.904641][ T31] pvrusb2: Device being rendered inoperable [ 626.179233][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.749690][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 626.749707][ T37] audit: type=1326 audit(1757856380.930:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.749751][ T37] audit: type=1326 audit(1757856380.930:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.750323][ T37] audit: type=1326 audit(1757856380.930:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.750368][ T37] audit: type=1326 audit(1757856380.930:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.750406][ T37] audit: type=1326 audit(1757856380.940:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.810953][ T37] audit: type=1326 audit(1757856380.980:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.811004][ T37] audit: type=1326 audit(1757856380.980:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.811043][ T37] audit: type=1326 audit(1757856380.980:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.811083][ T37] audit: type=1326 audit(1757856380.980:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 626.811121][ T37] audit: type=1326 audit(1757856380.980:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8723 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 629.933821][ T8573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 630.264976][ T8573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.452520][ T8573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.556553][ T8573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 631.986858][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.044283][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.095581][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.100414][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.133753][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.140415][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.005085][ T8770] "syz.6.618" (8770) uses obsolete ecb(arc4) skcipher [ 633.512393][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.015727][ T8573] veth0_vlan: entered promiscuous mode [ 636.034691][ T8573] veth1_vlan: entered promiscuous mode [ 636.181709][ T8573] veth0_macvtap: entered promiscuous mode [ 636.187212][ T8573] veth1_macvtap: entered promiscuous mode [ 636.191095][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.329110][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.046798][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.079379][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.100733][ T161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.101981][ T161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.169773][ T161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.185192][ T161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.800342][ T7984] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 640.930293][ T7984] usb 7-1: device descriptor read/64, error -71 [ 641.170394][ T7984] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 641.401868][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.401889][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.460485][ T7984] usb 7-1: device descriptor read/64, error -71 [ 641.572847][ T7984] usb usb7-port1: attempt power cycle [ 641.776330][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.776345][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.916397][ T7984] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 641.931194][ T7984] usb 7-1: device descriptor read/8, error -71 [ 642.180496][ T7984] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 642.202646][ T7984] usb 7-1: device descriptor read/8, error -71 [ 642.312222][ T7984] usb usb7-port1: unable to enumerate USB device [ 643.413896][ T7984] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 643.775081][ T7984] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 643.775108][ T7984] usb 5-1: config 0 has no interface number 0 [ 643.779136][ T7984] usb 5-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 643.779164][ T7984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.779184][ T7984] usb 5-1: Product: syz [ 643.779197][ T7984] usb 5-1: Manufacturer: syz [ 643.779212][ T7984] usb 5-1: SerialNumber: syz [ 644.174223][ T7984] usb 5-1: config 0 descriptor?? [ 645.419326][ T7984] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 645.907045][ T8867] new mount options do not match the existing superblock, will be ignored [ 645.931257][ T8867] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 646.684552][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 646.684570][ T37] audit: type=1326 audit(1757856400.060:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684614][ T37] audit: type=1326 audit(1757856400.070:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684651][ T37] audit: type=1326 audit(1757856400.070:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684691][ T37] audit: type=1326 audit(1757856400.070:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684731][ T37] audit: type=1326 audit(1757856400.070:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684769][ T37] audit: type=1326 audit(1757856400.080:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684806][ T37] audit: type=1326 audit(1757856400.080:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684853][ T37] audit: type=1326 audit(1757856400.080:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684891][ T37] audit: type=1326 audit(1757856400.090:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.684929][ T37] audit: type=1326 audit(1757856400.100:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8863 comm="syz.7.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 646.737413][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.639'. [ 646.737434][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.6.639'. [ 646.877863][ T7984] usb 5-1: USB disconnect, device number 49 [ 646.881670][ T7984] pvrusb2: Device being rendered inoperable [ 646.954008][ T8867] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 648.788812][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.188029][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.507394][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.331769][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.456161][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.529837][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.621848][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.741578][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.213038][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.788651][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.051034][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.264255][ T8897] netlink: zone id is out of range [ 652.885721][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.912243][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.310932][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.487849][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.737519][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.878502][ T8924] new mount options do not match the existing superblock, will be ignored [ 653.893859][ T8924] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 654.540276][ T5917] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 654.626478][ T8922] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 654.626818][ T8924] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 654.844602][ T8897] netlink: set zone limit has 4 unknown bytes [ 655.858379][ T5917] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 656.232824][ T5917] usb 8-1: config 0 has an invalid interface number: 59 but max is 0 [ 656.232903][ T5917] usb 8-1: config 0 has no interface number 0 [ 656.672716][ T5917] usb 8-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=6d.dd [ 656.672753][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.672773][ T5917] usb 8-1: Product: syz [ 656.672788][ T5917] usb 8-1: Manufacturer: syz [ 656.672801][ T5917] usb 8-1: SerialNumber: syz [ 656.729708][ T5917] usb 8-1: config 0 descriptor?? [ 656.825388][ T5917] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 657.692070][ T8932] netlink: 'syz.7.654': attribute type 1 has an invalid length. [ 657.692085][ T8932] netlink: 'syz.7.654': attribute type 2 has an invalid length. [ 658.166253][ T5917] usb 8-1: USB disconnect, device number 6 [ 658.176902][ T5917] pvrusb2: Device being rendered inoperable [ 661.201443][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 661.201465][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.672'. [ 661.403123][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.8.673'. [ 662.008686][ T9005] new mount options do not match the existing superblock, will be ignored [ 662.026942][ T9005] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 664.034377][ T9003] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 664.034783][ T9005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 664.220286][ T5917] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 665.582521][ T5917] usb 7-1: device descriptor read/all, error -71 [ 669.094273][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 669.094298][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.686'. [ 671.408937][ T9066] lo speed is unknown, defaulting to 1000 [ 671.409064][ T9066] lo speed is unknown, defaulting to 1000 [ 671.416169][ T9066] lo speed is unknown, defaulting to 1000 [ 671.426102][ T9066] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 671.439121][ T9066] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 671.531071][ T9066] lo speed is unknown, defaulting to 1000 [ 671.532768][ T9066] lo speed is unknown, defaulting to 1000 [ 671.535571][ T9066] lo speed is unknown, defaulting to 1000 [ 671.537069][ T9066] lo speed is unknown, defaulting to 1000 [ 671.538574][ T9066] lo speed is unknown, defaulting to 1000 [ 671.540048][ T9066] lo speed is unknown, defaulting to 1000 [ 672.940205][ T7985] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 673.070353][ T7985] usb 7-1: device descriptor read/64, error -71 [ 673.610303][ T7985] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 673.862129][ T7985] usb 7-1: device descriptor read/64, error -71 [ 673.971674][ T7985] usb usb7-port1: attempt power cycle [ 674.170548][ T9084] random: crng reseeded on system resumption [ 674.340256][ T7985] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 674.374154][ T7985] usb 7-1: device descriptor read/8, error -71 [ 676.558589][ T9102] new mount options do not match the existing superblock, will be ignored [ 676.572637][ T9102] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 677.132333][ T9101] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 677.132719][ T9102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 677.165238][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 677.165256][ T37] audit: type=1326 audit(1757856430.560:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.8.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 677.165301][ T37] audit: type=1326 audit(1757856430.560:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.8.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 677.165341][ T37] audit: type=1326 audit(1757856430.570:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9096 comm="syz.8.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 681.382786][ T2369] pvrusb2: request_firmware fatal error with code=-110 [ 681.382804][ T2369] pvrusb2: Failure uploading firmware1 [ 681.382812][ T2369] pvrusb2: Device initialization was not successful. [ 681.382819][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 681.382828][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 681.386167][ T9] pvrusb2: Device being rendered inoperable [ 682.311067][ T9132] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 683.110338][ T8365] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 683.264033][ T8365] usb 7-1: unable to get BOS descriptor or descriptor too short [ 683.264803][ T8365] usb 7-1: not running at top speed; connect to a high speed hub [ 683.266901][ T8365] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.266924][ T8365] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.487390][ T8365] usb 7-1: string descriptor 0 read error: -22 [ 683.487550][ T8365] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.487574][ T8365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.104405][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.391108][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.469455][ T37] audit: type=1326 audit(1757856438.570:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9138 comm="syz.7.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 684.469515][ T37] audit: type=1326 audit(1757856438.570:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9138 comm="syz.7.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 684.469555][ T37] audit: type=1326 audit(1757856438.570:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9138 comm="syz.7.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb924b1eba9 code=0x7ffc0000 [ 684.657298][ T9145] new mount options do not match the existing superblock, will be ignored [ 684.670876][ T9145] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 684.730894][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.897669][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.094408][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.135988][ T9145] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 685.140938][ T9144] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 685.273299][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.454903][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.518603][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 685.582096][ T8365] usb 7-1: can't set config #1, error -71 [ 685.612830][ T8365] usb 7-1: USB disconnect, device number 16 [ 685.752050][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.851677][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.886925][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.886999][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.210989][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.127882][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.473176][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.495274][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.8.718'. [ 687.540753][ T8365] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 687.654105][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.814261][ T9179] new mount options do not match the existing superblock, will be ignored [ 687.826635][ T9179] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 687.872252][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.032578][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.055232][ T37] audit: type=1326 audit(1757856441.820:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 688.055622][ T37] audit: type=1326 audit(1757856441.820:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 688.055928][ T37] audit: type=1326 audit(1757856441.820:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.4.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f2205eba9 code=0x7ffc0000 [ 688.317971][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.511608][ T8365] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 688.511672][ T8365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.511698][ T8365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.511719][ T8365] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 688.515874][ T8365] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 688.515902][ T8365] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 688.515922][ T8365] usb 6-1: Manufacturer: syz [ 688.549126][ T9178] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 688.549451][ T9180] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 688.631032][ T8365] usb 6-1: config 0 descriptor?? [ 688.918365][ T8365] usbhid 6-1:0.0: can't add hid device: -71 [ 688.918495][ T8365] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 688.970861][ T8365] usb 6-1: USB disconnect, device number 2 [ 691.010583][ T8365] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 691.215780][ T8365] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.215806][ T8365] usb 6-1: config 0 has no interfaces? [ 691.215837][ T8365] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 691.215860][ T8365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.267875][ T8365] usb 6-1: config 0 descriptor?? [ 692.348520][ T9202] netlink: 68 bytes leftover after parsing attributes in process `syz.6.725'. [ 693.480516][ T7984] usb 6-1: USB disconnect, device number 3 [ 693.710349][ T8365] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 693.840295][ T8365] usb 8-1: device descriptor read/64, error -71 [ 694.080950][ T8365] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 694.234552][ T8365] usb 8-1: device descriptor read/64, error -71 [ 694.344990][ T8365] usb usb8-port1: attempt power cycle [ 694.776367][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.970329][ T8365] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 694.997196][ T8365] usb 8-1: device descriptor read/8, error -71 [ 695.287673][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.439386][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.011064][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.019682][ T9221] new mount options do not match the existing superblock, will be ignored [ 696.032112][ T9221] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 696.325236][ T37] audit: type=1326 audit(1757856450.040:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2c87eba9 code=0x7ffc0000 [ 696.325637][ T37] audit: type=1326 audit(1757856450.050:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2c87eba9 code=0x7ffc0000 [ 696.325942][ T37] audit: type=1326 audit(1757856450.050:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9217 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8e2c87eba9 code=0x7ffc0000 [ 696.628596][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.677522][ T9222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 696.683160][ T9220] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 696.822249][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.132728][ C0] vkms_vblank_simulate: vblank timer overrun [ 697.427139][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.017691][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.191857][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.961500][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.529313][ T9250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 700.796178][ T8098] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 706.922761][ T8098] usb 9-1: device descriptor read/all, error -110 [ 709.700161][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.854299][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.005587][ T9275] new mount options do not match the existing superblock, will be ignored [ 710.015178][ T9275] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 710.070026][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.220495][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.484202][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.588012][ T37] audit: type=1326 audit(1757856464.020:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9269 comm="syz.8.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 710.588801][ T37] audit: type=1326 audit(1757856464.020:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9269 comm="syz.8.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 710.589244][ T37] audit: type=1326 audit(1757856464.020:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9269 comm="syz.8.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0fa0beeba9 code=0x7ffc0000 [ 710.739063][ T9274] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 710.845849][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.413171][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.496431][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.049656][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.567432][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.607080][ C1] vkms_vblank_simulate: vblank timer overrun [ 712.836189][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.992616][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 714.011828][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 714.013236][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 714.027981][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.055696][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.097436][ T9302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 715.387275][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.897469][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.190976][ T5854] Bluetooth: hci5: command tx timeout [ 716.361242][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.934902][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.290207][ T5854] Bluetooth: hci5: command tx timeout [ 720.370358][ T5854] Bluetooth: hci5: command tx timeout [ 721.520449][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.8.756'. [ 721.520890][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.8.756'. [ 723.114602][ T5854] Bluetooth: hci5: command tx timeout [ 724.241894][ T9343] netlink: 38 bytes leftover after parsing attributes in process `syz.7.762'. [ 727.096230][ T9353] warning: `syz.6.765' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 727.248876][ T9300] lo speed is unknown, defaulting to 1000 [ 727.258952][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.303771][ T7985] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 727.426042][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.857785][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.068084][ C1] vkms_vblank_simulate: vblank timer overrun [ 730.948431][ T6281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.778969][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.390624][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.219333][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.435852][ T6281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.954940][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.609144][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.942753][ T9391] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 736.408948][ T6281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.097309][ T6281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.480485][ T7985] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 738.074158][ T7985] usb 9-1: Using ep0 maxpacket: 32 [ 738.130926][ T7985] usb 9-1: config 211 has an invalid interface number: 98 but max is 0 [ 738.130967][ T7985] usb 9-1: config 211 has no interface number 0 [ 738.131090][ T7985] usb 9-1: config 211 interface 98 has no altsetting 0 [ 738.168092][ T7985] usb 9-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 738.168136][ T7985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.168187][ T7985] usb 9-1: Product: syz [ 738.168201][ T7985] usb 9-1: Manufacturer: syz [ 738.168255][ T7985] usb 9-1: SerialNumber: syz [ 740.646571][ T7985] mct_u232 9-1:211.98: MCT U232 converter detected [ 740.652400][ T7985] mct_u232 ttyUSB0: expected endpoint missing [ 740.668198][ T7985] usb 9-1: USB disconnect, device number 16 [ 740.694116][ T7985] mct_u232 9-1:211.98: device disconnected [ 740.711927][ T9432] netlink: set zone limit has 4 unknown bytes [ 740.774713][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 742.449893][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.247838][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.409770][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.711728][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.550843][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.552372][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.840318][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.289372][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.578916][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.117248][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.557174][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.729894][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.033644][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.087598][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.299450][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.617159][ T7985] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 756.831680][ T7985] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 756.831910][ T7985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.831960][ T7985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.832018][ T7985] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 757.137732][ T7985] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 757.137813][ T7985] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 757.137858][ T7985] usb 7-1: Manufacturer: syz [ 757.201058][ T7985] usb 7-1: config 0 descriptor?? [ 757.460424][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.544832][ T7985] usbhid 7-1:0.0: can't add hid device: -71 [ 757.545027][ T7985] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 757.568270][ T7985] usb 7-1: USB disconnect, device number 17 [ 757.640260][ T5932] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 758.040266][ T5932] usb 6-1: device descriptor read/64, error -71 [ 758.290298][ T5932] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 758.420282][ T5932] usb 6-1: device descriptor read/64, error -71 [ 758.585832][ T5932] usb usb6-port1: attempt power cycle [ 759.000264][ T5932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 759.789870][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.922064][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.985178][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.099486][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.744310][ T5932] usb 6-1: device descriptor read/8, error -71 [ 763.641503][ T9577] [ 763.641516][ T9577] ====================================================== [ 763.641525][ T9577] WARNING: possible circular locking dependency detected [ 763.641543][ T9577] syzkaller #0 Not tainted [ 763.641554][ T9577] ------------------------------------------------------ [ 763.641562][ T9577] syz.7.825/9577 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 763.641574][ T9577] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 763.641640][ T9577] [ 763.641640][ T9577] but task is already holding lock: [ 763.641647][ T9577] ffff88814335e3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 763.641696][ T9577] [ 763.641696][ T9577] which lock already depends on the new lock. [ 763.641696][ T9577] [ 763.641704][ T9577] [ 763.641704][ T9577] the existing dependency chain (in reverse order) is: [ 763.641712][ T9577] [ 763.641712][ T9577] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 763.641738][ T9577] lock_acquire+0x120/0x360 [ 763.641762][ T9577] rt_spin_lock+0x88/0x2c0 [ 763.641783][ T9577] drm_crtc_vblank_on_config+0x2cd/0x860 [ 763.641807][ T9577] drm_crtc_vblank_on+0x88/0xc0 [ 763.641829][ T9577] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 763.641854][ T9577] vkms_atomic_commit_tail+0x69/0x210 [ 763.641884][ T9577] commit_tail+0x281/0x3a0 [ 763.641906][ T9577] drm_atomic_helper_commit+0xa6b/0xb10 [ 763.641929][ T9577] drm_atomic_commit+0x262/0x2c0 [ 763.641950][ T9577] drm_client_modeset_commit_atomic+0x620/0x760 [ 763.641969][ T9577] drm_client_modeset_commit_locked+0xce/0x4d0 [ 763.641988][ T9577] drm_client_modeset_commit+0x4a/0x70 [ 763.642006][ T9577] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 763.642030][ T9577] drm_fb_helper_set_par+0xaf/0x100 [ 763.642053][ T9577] fbcon_init+0x1255/0x2370 [ 763.642079][ T9577] visual_init+0x2ef/0x650 [ 763.642103][ T9577] do_bind_con_driver+0x890/0xf70 [ 763.642129][ T9577] do_take_over_console+0x899/0xa10 [ 763.642155][ T9577] do_fbcon_takeover+0x118/0x200 [ 763.642181][ T9577] fbcon_fb_registered+0x35e/0x610 [ 763.642206][ T9577] register_framebuffer+0x70f/0x890 [ 763.642223][ T9577] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 763.642249][ T9577] drm_fbdev_client_hotplug+0x16f/0x230 [ 763.642274][ T9577] drm_client_register+0x16f/0x210 [ 763.642301][ T9577] drm_fbdev_client_setup+0x19f/0x3f0 [ 763.642325][ T9577] drm_client_setup+0x10a/0x230 [ 763.642348][ T9577] vkms_init+0x3e0/0x4b0 [ 763.642369][ T9577] do_one_initcall+0x233/0x820 [ 763.642385][ T9577] do_initcall_level+0x104/0x190 [ 763.642408][ T9577] do_initcalls+0x59/0xa0 [ 763.642430][ T9577] kernel_init_freeable+0x334/0x4b0 [ 763.642455][ T9577] kernel_init+0x1d/0x1d0 [ 763.642475][ T9577] ret_from_fork+0x439/0x7d0 [ 763.642497][ T9577] ret_from_fork_asm+0x1a/0x30 [ 763.642515][ T9577] [ 763.642515][ T9577] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 763.642541][ T9577] lock_acquire+0x120/0x360 [ 763.642564][ T9577] rt_spin_lock+0x88/0x2c0 [ 763.642585][ T9577] vblank_disable_fn+0x72/0x190 [ 763.642605][ T9577] call_timer_fn+0x17e/0x5f0 [ 763.642628][ T9577] __run_timer_base+0x648/0x970 [ 763.642649][ T9577] run_timer_softirq+0xb7/0x180 [ 763.642670][ T9577] handle_softirqs+0x22f/0x710 [ 763.642692][ T9577] run_ktimerd+0xcf/0x190 [ 763.642715][ T9577] smpboot_thread_fn+0x53f/0xa60 [ 763.642737][ T9577] kthread+0x70e/0x8a0 [ 763.642762][ T9577] ret_from_fork+0x439/0x7d0 [ 763.642784][ T9577] ret_from_fork_asm+0x1a/0x30 [ 763.642802][ T9577] [ 763.642802][ T9577] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 763.642827][ T9577] lock_acquire+0x120/0x360 [ 763.642849][ T9577] call_timer_fn+0xdb/0x5f0 [ 763.642878][ T9577] __run_timer_base+0x648/0x970 [ 763.642899][ T9577] run_timer_softirq+0xb7/0x180 [ 763.642920][ T9577] handle_softirqs+0x22f/0x710 [ 763.642941][ T9577] run_ktimerd+0xcf/0x190 [ 763.642965][ T9577] smpboot_thread_fn+0x53f/0xa60 [ 763.642986][ T9577] kthread+0x70e/0x8a0 [ 763.643012][ T9577] ret_from_fork+0x439/0x7d0 [ 763.643034][ T9577] ret_from_fork_asm+0x1a/0x30 [ 763.643051][ T9577] [ 763.643051][ T9577] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 763.643077][ T9577] lock_acquire+0x120/0x360 [ 763.643099][ T9577] rt_spin_lock+0x88/0x2c0 [ 763.643119][ T9577] __run_timer_base+0x114/0x970 [ 763.643140][ T9577] run_timer_softirq+0x67/0x180 [ 763.643161][ T9577] handle_softirqs+0x22f/0x710 [ 763.643182][ T9577] run_ktimerd+0xcf/0x190 [ 763.643206][ T9577] smpboot_thread_fn+0x53f/0xa60 [ 763.643227][ T9577] kthread+0x70e/0x8a0 [ 763.643252][ T9577] ret_from_fork+0x439/0x7d0 [ 763.643274][ T9577] ret_from_fork_asm+0x1a/0x30 [ 763.643291][ T9577] [ 763.643291][ T9577] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 763.643316][ T9577] validate_chain+0xb9b/0x2140 [ 763.643343][ T9577] __lock_acquire+0xab9/0xd20 [ 763.643365][ T9577] reacquire_held_locks+0x127/0x1d0 [ 763.643391][ T9577] lock_release+0x1b4/0x3e0 [ 763.643414][ T9577] __local_bh_enable_ip+0x10c/0x270 [ 763.643436][ T9577] hrtimer_cancel+0x39/0x60 [ 763.643460][ T9577] drm_vblank_disable_and_save+0x1bc/0x380 [ 763.643482][ T9577] drm_crtc_vblank_off+0x22e/0x820 [ 763.643505][ T9577] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 763.643529][ T9577] vkms_atomic_commit_tail+0x51/0x210 [ 763.643552][ T9577] commit_tail+0x281/0x3a0 [ 763.643574][ T9577] drm_atomic_helper_commit+0xa6b/0xb10 [ 763.643597][ T9577] drm_atomic_commit+0x262/0x2c0 [ 763.643616][ T9577] drm_atomic_connector_commit_dpms+0x364/0x480 [ 763.643639][ T9577] drm_mode_obj_set_property_ioctl+0x617/0xdf0 [ 763.643663][ T9577] drm_connector_property_set_ioctl+0xe9/0x170 [ 763.643690][ T9577] drm_ioctl_kernel+0x2d2/0x3a0 [ 763.643716][ T9577] drm_ioctl+0x685/0xb20 [ 763.643740][ T9577] __se_sys_ioctl+0xff/0x170 [ 763.643759][ T9577] do_syscall_64+0xfa/0x3b0 [ 763.643775][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.643793][ T9577] [ 763.643793][ T9577] other info that might help us debug this: [ 763.643793][ T9577] [ 763.643800][ T9577] Chain exists of: [ 763.643800][ T9577] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 763.643800][ T9577] [ 763.643833][ T9577] Possible unsafe locking scenario: [ 763.643833][ T9577] [ 763.643839][ T9577] CPU0 CPU1 [ 763.643845][ T9577] ---- ---- [ 763.643851][ T9577] lock(&dev->vblank_time_lock); [ 763.643870][ T9577] lock(&dev->vbl_lock); [ 763.643884][ T9577] lock(&dev->vblank_time_lock); [ 763.643899][ T9577] lock((softirq_ctrl.lock)); [ 763.643912][ T9577] [ 763.643912][ T9577] *** DEADLOCK *** [ 763.643912][ T9577] [ 763.643918][ T9577] 8 locks held by syz.7.825/9577: [ 763.643930][ T9577] #0: ffffc90006487a60 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_obj_set_property_ioctl+0x512/0xdf0 [ 763.643982][ T9577] #1: ffffc90006487a88 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_obj_set_property_ioctl+0x512/0xdf0 [ 763.644034][ T9577] #2: ffff88814335e4b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 763.644085][ T9577] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 763.644133][ T9577] #4: ffff88814335e420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 763.644183][ T9577] #5: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 763.644230][ T9577] #6: ffff88814335e3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 763.644280][ T9577] #7: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 763.644327][ T9577] [ 763.644327][ T9577] stack backtrace: [ 763.644355][ T9577] CPU: 0 UID: 0 PID: 9577 Comm: syz.7.825 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 763.644378][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.644398][ T9577] Call Trace: [ 763.644406][ T9577] [ 763.644414][ T9577] dump_stack_lvl+0x189/0x250 [ 763.644445][ T9577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.644473][ T9577] ? __pfx__printk+0x10/0x10 [ 763.644495][ T9577] ? print_lock_name+0xde/0x100 [ 763.644516][ T9577] print_circular_bug+0x2ee/0x310 [ 763.644537][ T9577] check_noncircular+0x134/0x160 [ 763.644569][ T9577] validate_chain+0xb9b/0x2140 [ 763.644600][ T9577] ? preempt_schedule+0xae/0xc0 [ 763.644625][ T9577] ? preempt_schedule_common+0x83/0xd0 [ 763.644652][ T9577] ? preempt_schedule+0xae/0xc0 [ 763.644677][ T9577] ? __pfx_preempt_schedule+0x10/0x10 [ 763.644707][ T9577] __lock_acquire+0xab9/0xd20 [ 763.644735][ T9577] reacquire_held_locks+0x127/0x1d0 [ 763.644763][ T9577] ? __local_bh_disable_ip+0x264/0x400 [ 763.644789][ T9577] lock_release+0x1b4/0x3e0 [ 763.644814][ T9577] ? __local_bh_enable_ip+0x100/0x270 [ 763.644840][ T9577] __local_bh_enable_ip+0x10c/0x270 [ 763.644869][ T9577] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 763.644895][ T9577] ? rt_spin_unlock+0x65/0x80 [ 763.644919][ T9577] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 763.644948][ T9577] ? hrtimer_cancel_wait_running+0x142/0x180 [ 763.644978][ T9577] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 763.645005][ T9577] hrtimer_cancel+0x39/0x60 [ 763.645032][ T9577] drm_vblank_disable_and_save+0x1bc/0x380 [ 763.645058][ T9577] drm_crtc_vblank_off+0x22e/0x820 [ 763.645085][ T9577] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 763.645115][ T9577] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 763.645144][ T9577] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 763.645177][ T9577] vkms_atomic_commit_tail+0x51/0x210 [ 763.645201][ T9577] ? read_tsc+0x9/0x20 [ 763.645223][ T9577] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 763.645247][ T9577] commit_tail+0x281/0x3a0 [ 763.645274][ T9577] drm_atomic_helper_commit+0xa6b/0xb10 [ 763.645302][ T9577] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 763.645327][ T9577] drm_atomic_commit+0x262/0x2c0 [ 763.645350][ T9577] ? __pfx_drm_atomic_commit+0x10/0x10 [ 763.645371][ T9577] ? drm_atomic_add_affected_connectors+0x397/0x410 [ 763.645394][ T9577] ? __pfx___drm_printfn_info+0x10/0x10 [ 763.645429][ T9577] drm_atomic_connector_commit_dpms+0x364/0x480 [ 763.645457][ T9577] drm_mode_obj_set_property_ioctl+0x617/0xdf0 [ 763.645485][ T9577] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 763.645515][ T9577] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [ 763.645539][ T9577] ? __lock_acquire+0xab9/0xd20 [ 763.645568][ T9577] ? do_raw_spin_lock+0x121/0x290 [ 763.645595][ T9577] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 763.645631][ T9577] ? rt_mutex_slowunlock+0x493/0x8a0 [ 763.645655][ T9577] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 763.645679][ T9577] ? rt_spin_lock+0x1bb/0x2c0 [ 763.645703][ T9577] drm_connector_property_set_ioctl+0xe9/0x170 [ 763.645732][ T9577] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 763.645762][ T9577] ? __rcu_read_unlock+0x84/0xe0 [ 763.645787][ T9577] ? drm_is_current_master+0x1a2/0x210 [ 763.645813][ T9577] drm_ioctl_kernel+0x2d2/0x3a0 [ 763.645842][ T9577] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 763.645876][ T9577] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 763.645907][ T9577] drm_ioctl+0x685/0xb20 [ 763.645933][ T9577] ? smk_tskacc+0x2fc/0x370 [ 763.645963][ T9577] ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [ 763.645995][ T9577] ? __pfx_drm_ioctl+0x10/0x10 [ 763.646028][ T9577] ? __fget_files+0x2a/0x420 [ 763.646056][ T9577] ? bpf_lsm_file_ioctl+0x9/0x20 [ 763.646079][ T9577] ? __pfx_drm_ioctl+0x10/0x10 [ 763.646106][ T9577] __se_sys_ioctl+0xff/0x170 [ 763.646128][ T9577] do_syscall_64+0xfa/0x3b0 [ 763.646147][ T9577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.646166][ T9577] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 763.646184][ T9577] ? clear_bhb_loop+0x60/0xb0 [ 763.646206][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.646229][ T9577] RIP: 0033:0x7fb924b1eba9 [ 763.646250][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.646268][ T9577] RSP: 002b:00007fb922d65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.646289][ T9577] RAX: ffffffffffffffda RBX: 00007fb924d66090 RCX: 00007fb924b1eba9 [ 763.646306][ T9577] RDX: 0000200000000380 RSI: 00000000c01064ab RDI: 0000000000000008 [ 763.646320][ T9577] RBP: 00007fb924ba1e19 R08: 0000000000000000 R09: 0000000000000000 [ 763.646333][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.646345][ T9577] R13: 00007fb924d66128 R14: 00007fb924d66090 R15: 00007ffe42e54fc8 [ 763.646367][ T9577] [ 764.361844][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.633276][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.773776][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.783509][ T6281] bond0 (unregistering): Released all slaves [ 764.796498][ T6281] bond1 (unregistering): Released all slaves [ 765.298202][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.557308][ C1] vkms_vblank_simulate: vblank timer overrun [ 766.340607][ T6281] tipc: Left network mode [ 766.413308][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.110362][ T6281] hsr_slave_0: left promiscuous mode [ 768.190305][ T6281] hsr_slave_1: left promiscuous mode [ 768.210771][ T6281] veth1_macvtap: left promiscuous mode [ 768.210833][ T6281] veth0_macvtap: left promiscuous mode [ 768.210965][ T6281] veth1_vlan: left promiscuous mode [ 768.211057][ T6281] veth0_vlan: left promiscuous mode [ 773.942177][ T6281] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.142268][ T6281] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0