last executing test programs: 1m56.790036194s ago: executing program 4 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000480)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x0, 0xffffffff}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fda={0x66646185, 0x7, 0x0, 0x2f}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m56.290902723s ago: executing program 4 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x0, 0x3000003, 0x8, 0x1b, 0x13e, &(0x7f00000000c0)="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"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000000000000730000400000000081"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.888118578s ago: executing program 4 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) getdents64(r1, 0x0, 0x0) 1m54.579363733s ago: executing program 4 (id=110): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c810}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m54.113977628s ago: executing program 4 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) 1m53.392748237s ago: executing program 4 (id=116): setresuid(0xee01, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000013c0)=0xfcbf) sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20040044}}], 0x1, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[], 0x78) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) 1m38.024956881s ago: executing program 32 (id=116): setresuid(0xee01, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000013c0)=0xfcbf) sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20040044}}], 0x1, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000500)=ANY=[], 0x78) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) 28.030945274s ago: executing program 5 (id=448): r0 = getpid() r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) pread64(r2, 0x0, 0x0, 0x81) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x20000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x48, 0x0, 0x1, 0xd, 0x5, 0x75, 0x8, 0x0, 0xdc, 0x0, 0x100, 0x80000000, 0x6, 0xd, 0x8, 0xaed, [0x3, 0x7]}}) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 24.859556323s ago: executing program 5 (id=458): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800000700", @ANYRES64=0x0, @ANYRES64=0x0], 0x80}}, 0x0) 24.779609447s ago: executing program 1 (id=459): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 22.708445534s ago: executing program 1 (id=460): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 22.591468605s ago: executing program 2 (id=461): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x45}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc0e0, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0xa}}, 0x20) 22.512505968s ago: executing program 5 (id=462): syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec010203010902"], 0x0) syz_open_dev$mouse(0x0, 0x0, 0x80041) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') read(r0, &(0x7f0000000000)=""/74, 0x4a) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000007000/0x3000)=nil, 0x3000}) 22.011823219s ago: executing program 2 (id=464): socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffffffffffffb3, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x800010, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) io_setup(0x5, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 21.946856418s ago: executing program 3 (id=465): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x9, @sliced={0x0, [0x10, 0x8, 0xbf82, 0x81, 0x7, 0x8, 0x2, 0x6, 0xf000, 0x1ff, 0xbb, 0x0, 0x8, 0x0, 0x9, 0x9, 0x1, 0x10, 0x6, 0x81, 0x8, 0x2f7, 0x39, 0x3, 0x876e, 0x7, 0x2, 0x7, 0x6, 0x9ba9, 0x1000, 0x0, 0xe, 0x9, 0x3ff, 0xf, 0x5, 0x2, 0x8, 0x3, 0x0, 0x4, 0xfa3b, 0x1, 0x3ff, 0x3, 0x7f, 0x100], 0xfffffff7}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) socket(0x10, 0x5, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') pread64(r2, &(0x7f0000000c80)=""/102370, 0x18fe2, 0x41e) 21.945400336s ago: executing program 0 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) 20.943004978s ago: executing program 0 (id=467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x207, 0x2581) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, 0x0) 20.711357634s ago: executing program 3 (id=468): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x21034c58, 0x0, 0x5e, 0x0, 0x7d, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) fallocate(r0, 0x0, 0x3, 0x7) 19.5725299s ago: executing program 0 (id=469): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0x10}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f00000007c0)='1)\xc2\xc4\xdc\xbb\xe7\x93\xd3\x89\xf4\"\xed\xf7\t\xf6d\x9e\x853\x1e\xb8S\x9a\x19+\x1a\x1f\v\xd6\xe2u\xdc\xbf\xcd\xde\x02\x00\x00\x00<\x03\x13\xd8*\x13\x00\x00s\xc0\xb2\xe2\xadR\x89A\xc3\x05\x00\x00\x00\xd74\xbc\xdd\xa7\xe3\xd2a\x16\xa3\xae\xa7\xb7i\x18|\xdct;\t\x00\x00\b\x00\xa2\x11B\xe0wM\x13\xff\xcb\xda\x19>\xb2\xee\xc7\xc33\xae\xed4\x1b\t7\xec\xffDY_\xd7\xd4\xb8\x9d\xce\xeak\x10\xf2\xe8\x06\x00fjX!\xb1(\x90\xf05\xa4\x14\xbb\xeb\x05(\x98xj\x8b\xc1W\xba\xb8\x13\x91\xf6\xff\xff\x00\\Uz\x0e\xa9\xaf\xbdi\xd2*4xj\x00\x80\x9e\xe4\xa7\xaf\n\x00\x00\x00\xf4\"ZN\x1aR\x8e\x14\x15$\x04\x91-S\xfd\xe4\xeb[L\x0e\xbd\xe3\xa0\x1f\xfd2\xbe\x98\x0f5L\x820\xc8\xdc\x8b\xcchR\xf3\t\xcc\x93\x9b6\n\x1b\xd4\x19\x94_rh\xb0~\t7M\x048\xe6\x17C\xba\x97\x97[P*\x7f\xbe [W\xeec\xd8\xb0E\x99\x0f\xc5:f\xbb_\xbe\xf4\xc3XV\xf9\x8c\xe8\x83\a2M~\xcc|\xde\xac2j\xd9s0\x90)\xd7\x1e\xff\xf3\xfb1]\xb49\xca\xef\t\xcb9J\xea\xb6c\xf6\xfb\x15w\x9a\xc3\x9b\xddt\xda\xf1\x83{f\xa4;\x0fZx\x1d\xf9\t\x870\xaas\x85].\x86\x1c\x9dK\xb1l\xaf\xa6\xc9\x90w\x8f0\xc0\xf6=b\xaau\xe1\x00\xfaOm?,\xf1)F&\x15\nhXj\x94\x03\xf1\x82&\xae\xe0!\xf9!9!\xf9\xcaG\xb7\x91\x9a\xa1\xd4\xc4\xd6\x88\\\\x\xaf\x05q\xe2\x8c.\xf8\'P?\xcd\xedhS\x19Q\xda\xcc\xe9\x1d}\xd2\x9a\xff_.\x99\x1b=\xf9a\xf8\xd8P\x8cr\xaf\x81\x1cR\xc5\xea7\xdf\x1e\xf2uJ\x97\x02\xbd\x1f\xe2T !j\xe4\x9e\xbd\nv?\xec\x86\xb6\xd5\x98h\xaa^\x10\x87V\xfa%\x1a\xf7]\xbaX\xf7ee\x0e/\x89\xf9\x99\xa8\xba\x1fC\x8b\x8dz\xedC\x9b\xdbC\xebC\xec\xcc\xb32\x91\x19\xbc\x9f\x05\xdd;C(\xe2\x10\xaa\x94\xa6\x14\x9e&>#`AY\x9ey\x11', 0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0x8}, {0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3ff}, 0xffffffffffffffff, 0x4040099d}}, 0x48) 18.756874463s ago: executing program 5 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000462000/0x1000)=nil, 0x1000, 0x200000000000004, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x800) close_range(r1, 0xffffffffffffffff, 0x0) 18.706519639s ago: executing program 3 (id=471): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18.576519415s ago: executing program 0 (id=472): lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 18.537804976s ago: executing program 1 (id=473): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x351a, 0x100, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 18.302736085s ago: executing program 0 (id=474): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000680)=0x9) ioctl$TCXONC(r1, 0x540a, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 17.981572006s ago: executing program 2 (id=475): io_setup(0x2003, &(0x7f0000000980)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8f0, &(0x7f0000002400)) 17.301407208s ago: executing program 1 (id=476): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) 16.950893118s ago: executing program 3 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a1e6f78608890f912f087214dac0638", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 16.846766485s ago: executing program 2 (id=478): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(0x0, 0xf4) dup2(r0, r0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 16.743779661s ago: executing program 1 (id=479): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c084) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x169000, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="f36d4639d7f4d84876408fb1", 0xc}], 0x1}}], 0x1, 0x0) 16.567070513s ago: executing program 2 (id=480): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18005f2000000000000000004b000079"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 16.44177347s ago: executing program 3 (id=481): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000001300)=0x80000005, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50093}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000040)="6f3d7b6e3595904ad44263292847", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 16.244643565s ago: executing program 2 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ecdac547792d1b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 16.087348747s ago: executing program 5 (id=483): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) getpgid(0xffffffffffffffff) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 15.980162927s ago: executing program 1 (id=484): syz_emit_vhci(0x0, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x9, 0x5}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 15.870115647s ago: executing program 3 (id=485): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 15.39639691s ago: executing program 5 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0xfc, 0x0, 0x0, 0x0, "121f4496bd54e16c"}}, 0x48}}, 0x0) close(r1) 15.33616474s ago: executing program 0 (id=487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 762.734856ms ago: executing program 33 (id=484): syz_emit_vhci(0x0, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x9, 0x5}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 692.839121ms ago: executing program 34 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ecdac547792d1b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 615.71975ms ago: executing program 35 (id=485): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 188.86559ms ago: executing program 36 (id=487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 0s ago: executing program 37 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0xfc, 0x0, 0x0, 0x0, "121f4496bd54e16c"}}, 0x48}}, 0x0) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 81.748171][ T1584] cfg80211: failed to load regulatory.db [ 82.111271][ T5785] cgroup: Unknown subsys name 'net' [ 82.352400][ T5785] cgroup: Unknown subsys name 'cpuset' [ 82.408227][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.065851][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.678660][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.685909][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.686721][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.703869][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.708322][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.709164][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.710357][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.711186][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.713890][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.761266][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.815332][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.831396][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.833115][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.835962][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.841067][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.885369][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.894909][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.898262][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.901571][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.903741][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.904439][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.905541][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.906249][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.937914][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.957865][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.766750][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 89.776212][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 89.968706][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 89.974172][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 90.098449][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 90.668659][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.669830][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.670202][ T5803] bridge_slave_0: entered allmulticast mode [ 90.671998][ T5803] bridge_slave_0: entered promiscuous mode [ 90.708290][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.708388][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.708666][ T5802] bridge_slave_0: entered allmulticast mode [ 90.710128][ T5802] bridge_slave_0: entered promiscuous mode [ 90.715295][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.715403][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.715526][ T5803] bridge_slave_1: entered allmulticast mode [ 90.717047][ T5803] bridge_slave_1: entered promiscuous mode [ 90.849863][ T5115] Bluetooth: hci1: command tx timeout [ 90.849893][ T5807] Bluetooth: hci2: command tx timeout [ 90.850019][ T5115] Bluetooth: hci0: command tx timeout [ 90.869434][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.869636][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.870994][ T5802] bridge_slave_1: entered allmulticast mode [ 90.873764][ T5802] bridge_slave_1: entered promiscuous mode [ 90.927452][ T5115] Bluetooth: hci3: command tx timeout [ 91.007506][ T5115] Bluetooth: hci4: command tx timeout [ 91.238205][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.238374][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.238537][ T5812] bridge_slave_0: entered allmulticast mode [ 91.240412][ T5812] bridge_slave_0: entered promiscuous mode [ 91.298239][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.298372][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.298573][ T5810] bridge_slave_0: entered allmulticast mode [ 91.300101][ T5810] bridge_slave_0: entered promiscuous mode [ 91.371695][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.371930][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.372059][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.372217][ T5812] bridge_slave_1: entered allmulticast mode [ 91.374214][ T5812] bridge_slave_1: entered promiscuous mode [ 91.448276][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.448400][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.448566][ T5810] bridge_slave_1: entered allmulticast mode [ 91.450438][ T5810] bridge_slave_1: entered promiscuous mode [ 91.455476][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.459194][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.550142][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.550238][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.550375][ T5813] bridge_slave_0: entered allmulticast mode [ 91.551843][ T5813] bridge_slave_0: entered promiscuous mode [ 91.660510][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.799647][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.799758][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.799882][ T5813] bridge_slave_1: entered allmulticast mode [ 91.801398][ T5813] bridge_slave_1: entered promiscuous mode [ 92.091644][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.181096][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.270699][ T5803] team0: Port device team_slave_0 added [ 92.274870][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.341771][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.343211][ T5802] team0: Port device team_slave_0 added [ 92.345281][ T5803] team0: Port device team_slave_1 added [ 92.420906][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.489780][ T5802] team0: Port device team_slave_1 added [ 92.610620][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.800301][ T5812] team0: Port device team_slave_0 added [ 92.890001][ T5810] team0: Port device team_slave_0 added [ 92.927766][ T5115] Bluetooth: hci2: command tx timeout [ 92.927799][ T5115] Bluetooth: hci0: command tx timeout [ 92.927820][ T5115] Bluetooth: hci1: command tx timeout [ 92.951467][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.951483][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.951506][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.955972][ T5812] team0: Port device team_slave_1 added [ 93.007542][ T61] Bluetooth: hci3: command tx timeout [ 93.025439][ T5810] team0: Port device team_slave_1 added [ 93.087495][ T61] Bluetooth: hci4: command tx timeout [ 93.249793][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.249809][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.249830][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.251940][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.251954][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.251972][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.338288][ T5813] team0: Port device team_slave_0 added [ 93.436926][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.436942][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.436962][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.510240][ T5813] team0: Port device team_slave_1 added [ 93.577078][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.577092][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.577105][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.648873][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.648888][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.648902][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.652185][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.652197][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.652209][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.818738][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.818750][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.818763][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.826357][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.826372][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.826385][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.000192][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.000204][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.000217][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.006483][ T5803] hsr_slave_0: entered promiscuous mode [ 94.008421][ T5803] hsr_slave_1: entered promiscuous mode [ 94.124464][ T5802] hsr_slave_0: entered promiscuous mode [ 94.125267][ T5802] hsr_slave_1: entered promiscuous mode [ 94.125996][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 94.126074][ T5802] Cannot create hsr debugfs directory [ 94.504866][ T5812] hsr_slave_0: entered promiscuous mode [ 94.505842][ T5812] hsr_slave_1: entered promiscuous mode [ 94.506431][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 94.506452][ T5812] Cannot create hsr debugfs directory [ 94.515818][ T5810] hsr_slave_0: entered promiscuous mode [ 94.517034][ T5810] hsr_slave_1: entered promiscuous mode [ 94.518847][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 94.518871][ T5810] Cannot create hsr debugfs directory [ 94.869752][ T5813] hsr_slave_0: entered promiscuous mode [ 94.871098][ T5813] hsr_slave_1: entered promiscuous mode [ 94.872058][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 94.872081][ T5813] Cannot create hsr debugfs directory [ 95.007779][ T61] Bluetooth: hci1: command tx timeout [ 95.007811][ T61] Bluetooth: hci0: command tx timeout [ 95.007831][ T61] Bluetooth: hci2: command tx timeout [ 95.087393][ T5115] Bluetooth: hci3: command tx timeout [ 95.167455][ T5115] Bluetooth: hci4: command tx timeout [ 96.317065][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.355336][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.373093][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.423959][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.527888][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.557891][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.603788][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.632890][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.756897][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.784729][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.803195][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.863161][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.998848][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.047021][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.089634][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.097955][ T5115] Bluetooth: hci2: command tx timeout [ 97.097984][ T5115] Bluetooth: hci0: command tx timeout [ 97.098004][ T5115] Bluetooth: hci1: command tx timeout [ 97.139179][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.167465][ T61] Bluetooth: hci3: command tx timeout [ 97.259736][ T61] Bluetooth: hci4: command tx timeout [ 97.296481][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.305732][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.356573][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.393856][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.438121][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.512860][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.529082][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.563585][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.564306][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.604175][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.604437][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.646086][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.676874][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.677063][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.700571][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.723489][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.723590][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.805282][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.832531][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.845849][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.845962][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.895380][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.895665][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.959993][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.012572][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.021375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.021541][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.055757][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.056683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.152163][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.210005][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.211010][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.254019][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.254156][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.424490][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.563921][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.796421][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.829723][ T5802] veth0_vlan: entered promiscuous mode [ 98.921956][ T5802] veth1_vlan: entered promiscuous mode [ 99.081384][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.101953][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.133414][ T5812] veth0_vlan: entered promiscuous mode [ 99.140349][ T5802] veth0_macvtap: entered promiscuous mode [ 99.162336][ T5802] veth1_macvtap: entered promiscuous mode [ 99.175177][ T5812] veth1_vlan: entered promiscuous mode [ 99.244152][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.253270][ T5803] veth0_vlan: entered promiscuous mode [ 99.276576][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.304641][ T5810] veth0_vlan: entered promiscuous mode [ 99.319431][ T5803] veth1_vlan: entered promiscuous mode [ 99.322945][ T1343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.341420][ T1343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.345833][ T5813] veth0_vlan: entered promiscuous mode [ 99.355328][ T1343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.366788][ T1343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.379297][ T5812] veth0_macvtap: entered promiscuous mode [ 99.382443][ T5810] veth1_vlan: entered promiscuous mode [ 99.443691][ T5812] veth1_macvtap: entered promiscuous mode [ 99.445186][ T5813] veth1_vlan: entered promiscuous mode [ 99.621397][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.658865][ T5803] veth0_macvtap: entered promiscuous mode [ 99.679566][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.716005][ T5803] veth1_macvtap: entered promiscuous mode [ 99.730717][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.730744][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.737685][ T5810] veth0_macvtap: entered promiscuous mode [ 99.747034][ T1016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.761062][ T1016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.769877][ T1016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.776494][ T5810] veth1_macvtap: entered promiscuous mode [ 99.778344][ T1016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.780678][ T5813] veth0_macvtap: entered promiscuous mode [ 99.851454][ T5813] veth1_macvtap: entered promiscuous mode [ 99.861620][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.945347][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.003968][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.029937][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.029956][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.054705][ T1343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.060747][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.065016][ T1343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.070526][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.110667][ T1343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.121716][ T1343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.153807][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.166574][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.178408][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.178426][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.186120][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.235153][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.243017][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.269244][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.320931][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.379824][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.418545][ T4337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.609328][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.609347][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.832787][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.832806][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.211339][ T5922] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 101.241363][ T5922] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 101.271990][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.272010][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.455057][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.487797][ T5924] syz_tun: entered allmulticast mode [ 101.505595][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.505615][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.538795][ T5923] syz_tun: left allmulticast mode [ 101.708652][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.708671][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.824466][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.824485][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.970610][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.970631][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.626165][ T5940] loop7: detected capacity change from 0 to 7 [ 102.720624][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.831653][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.831857][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.844885][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.844922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.858960][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.858996][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.860814][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.860846][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.864608][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.864640][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.889991][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.890029][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.905227][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.905260][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.905375][ T5940] ldm_validate_partition_table(): Disk read failed. [ 102.905566][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.905592][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.906427][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.906455][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.920443][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 102.926589][ T5940] Dev loop7: unable to read RDB block 0 [ 102.932643][ T5940] loop7: unable to read partition table [ 102.932877][ T5940] loop7: partition table beyond EOD, truncated [ 102.932906][ T5940] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 104.260827][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.487590][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.487621][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.487644][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.487663][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.487731][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.487751][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.585134][ T44] usb 5-1: config 0 descriptor?? [ 105.235595][ T44] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 106.102357][ T5895] usb 5-1: USB disconnect, device number 2 [ 106.824713][ T37] audit: type=1326 audit(1763678298.448:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.835823][ T37] audit: type=1326 audit(1763678298.458:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.863363][ T37] audit: type=1326 audit(1763678298.488:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.866975][ T37] audit: type=1326 audit(1763678298.488:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.895745][ T37] audit: type=1326 audit(1763678298.498:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.895791][ T37] audit: type=1326 audit(1763678298.508:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.916619][ T37] audit: type=1326 audit(1763678298.528:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.933446][ T37] audit: type=1326 audit(1763678298.548:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.949678][ T37] audit: type=1326 audit(1763678298.578:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 106.950314][ T37] audit: type=1326 audit(1763678298.578:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6006 comm="syz.3.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7fc00000 [ 107.464950][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.660480][ T6024] warning: `syz.3.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.284509][ T6032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.915348][ T6032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.543235][ T6032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.560701][ T6032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.065087][ T4337] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.129459][ T3694] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.219862][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.308780][ T1343] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.600180][ T1584] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.792501][ T1584] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.792517][ T1584] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.793736][ T1584] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.793752][ T1584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.793761][ T1584] usb 5-1: SerialNumber: syz [ 112.084883][ T1584] usb 5-1: 0:2 : does not exist [ 112.137031][ T1584] usb 5-1: USB disconnect, device number 3 [ 112.279563][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.628649][ T6059] binder: 6058:6059 ioctl c0306201 0 returned -14 [ 113.377315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.387303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.397307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.885188][ T6072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.947251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.127981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.039531][ T6076] binder: 6075:6076 ioctl c0306201 0 returned -14 [ 115.237045][ T6059] syz.2.46 (6059): drop_caches: 2 [ 115.397308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.627261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.627296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.121062][ T37] kauditd_printk_skb: 253 callbacks suppressed [ 117.121079][ T37] audit: type=1326 audit(1763678308.748:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.121130][ T37] audit: type=1326 audit(1763678308.748:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.121171][ T37] audit: type=1326 audit(1763678308.748:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.121716][ T37] audit: type=1326 audit(1763678308.748:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.236823][ T37] audit: type=1326 audit(1763678308.828:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.237174][ T37] audit: type=1326 audit(1763678308.858:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.265577][ T37] audit: type=1326 audit(1763678308.888:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.266631][ T37] audit: type=1326 audit(1763678308.888:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 117.271815][ T37] audit: type=1326 audit(1763678308.888:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 118.367262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.419889][ T6122] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.039270][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 124.587305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.917392][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.920442][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 125.050384][ T9] usb 1-1: device descriptor read/64, error -32 [ 125.307489][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.493606][ T9] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 125.493634][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.493651][ T9] usb 1-1: config 0 has no interfaces? [ 125.493678][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 125.493697][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.592541][ T9] usb 1-1: config 0 descriptor?? [ 125.823251][ T6192] lo speed is unknown, defaulting to 1000 [ 125.823438][ T6192] lo speed is unknown, defaulting to 1000 [ 125.879497][ T6192] lo speed is unknown, defaulting to 1000 [ 125.999110][ T6192] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.091333][ T6192] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 126.489426][ T6192] lo speed is unknown, defaulting to 1000 [ 126.492771][ T6192] lo speed is unknown, defaulting to 1000 [ 126.496041][ T6192] lo speed is unknown, defaulting to 1000 [ 126.549228][ T6192] lo speed is unknown, defaulting to 1000 [ 126.552170][ T6192] lo speed is unknown, defaulting to 1000 [ 127.533344][ T44] usb 1-1: USB disconnect, device number 3 [ 128.956722][ T37] audit: type=1326 audit(1763678320.578:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 128.998021][ T37] audit: type=1326 audit(1763678320.628:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.006111][ T37] audit: type=1326 audit(1763678320.628:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.006558][ T37] audit: type=1326 audit(1763678320.628:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.103010][ T37] audit: type=1326 audit(1763678320.728:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.103063][ T37] audit: type=1326 audit(1763678320.728:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.119955][ T37] audit: type=1326 audit(1763678320.748:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.121283][ T37] audit: type=1326 audit(1763678320.748:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.121325][ T37] audit: type=1326 audit(1763678320.748:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 129.121361][ T37] audit: type=1326 audit(1763678320.748:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6221 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a087df749 code=0x7ffc0000 [ 131.123376][ T6256] input: syz1 as /devices/virtual/input/input6 [ 132.941030][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941120][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.036787][ T5863] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 133.202277][ T5863] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.202305][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.202322][ T5863] usb 2-1: Product: syz [ 133.202334][ T5863] usb 2-1: Manufacturer: syz [ 133.202346][ T5863] usb 2-1: SerialNumber: syz [ 133.213842][ T5863] usb 2-1: config 0 descriptor?? [ 133.437346][ T5863] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.758019][ T5863] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 134.829259][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 134.881659][ T6300] macvlan2: entered promiscuous mode [ 134.881684][ T6300] macvlan2: entered allmulticast mode [ 134.985163][ T5863] usb 2-1: USB disconnect, device number 2 [ 135.802611][ T6312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.235943][ T6347] Zero length message leads to an empty skb [ 138.374165][ T6351] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 138.374185][ T6351] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 138.374195][ T6351] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.138'. [ 138.374918][ T6351] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 138.374933][ T6351] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 138.374943][ T6351] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.138'. [ 138.711077][ T6355] syz.3.139 (6355) used greatest stack depth: 18408 bytes left [ 140.017435][ T5863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.188251][ T5863] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 140.188276][ T5863] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 140.188293][ T5863] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 140.188310][ T5863] usb 2-1: config 220 has no interface number 2 [ 140.188387][ T5863] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 140.188411][ T5863] usb 2-1: config 220 interface 0 has no altsetting 0 [ 140.188427][ T5863] usb 2-1: config 220 interface 76 has no altsetting 0 [ 140.188443][ T5863] usb 2-1: config 220 interface 1 has no altsetting 0 [ 140.194258][ T5863] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.194287][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.194304][ T5863] usb 2-1: Product: syz [ 140.194317][ T5863] usb 2-1: Manufacturer: syz [ 140.194329][ T5863] usb 2-1: SerialNumber: syz [ 140.558298][ T5863] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 140.558326][ T5863] uvcvideo 2-1:220.0: No valid video chain found. [ 140.558417][ T5863] usb 2-1: selecting invalid altsetting 0 [ 140.679618][ T5863] usb 2-1: selecting invalid altsetting 0 [ 140.679657][ T5863] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 140.727143][ T5863] usb 2-1: USB disconnect, device number 3 [ 142.036778][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 142.086365][ T6404] dummy0: entered promiscuous mode [ 142.086606][ T6404] macsec1: entered allmulticast mode [ 142.086623][ T6404] dummy0: entered allmulticast mode [ 142.129945][ T6404] dummy0: left allmulticast mode [ 142.130047][ T6404] dummy0: left promiscuous mode [ 142.159348][ T6405] kvm: vcpu 0: requested 1920 ns lapic timer period limited to 200000 ns [ 143.741967][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 144.447421][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.610830][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 144.613187][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.613210][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.617908][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.617934][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.617951][ T5895] usb 3-1: Product: syz [ 144.617963][ T5895] usb 3-1: Manufacturer: syz [ 144.617974][ T5895] usb 3-1: SerialNumber: syz [ 144.823438][ T6444] netlink: 'syz.3.171': attribute type 12 has an invalid length. [ 144.851727][ T5895] usb 3-1: 0:2 : does not exist [ 144.876375][ T5895] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 145.027456][ T5895] usb 3-1: USB disconnect, device number 2 [ 145.178884][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.302381][ T6452] process 'syz.0.174' launched '/dev/fd/6' with NULL argv: empty string added [ 145.878529][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.949631][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 145.949774][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.053911][ T5883] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 146.053939][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.091384][ T5883] usb 1-1: config 0 descriptor?? [ 146.120310][ T5883] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 146.202870][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.351240][ T5883] gspca_sn9c2028: read1 error -71 [ 146.351918][ T5883] gspca_sn9c2028: read1 error -71 [ 146.352312][ T5883] gspca_sn9c2028: read1 error -71 [ 146.352403][ T5883] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 146.384896][ T5883] usb 1-1: USB disconnect, device number 4 [ 147.675510][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.712013][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.155990][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 148.977414][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.127537][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 149.132826][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 149.132848][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 149.132864][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.135733][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.135760][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.135780][ T9] usb 3-1: Product: syz [ 149.135795][ T9] usb 3-1: Manufacturer: syz [ 149.135808][ T9] usb 3-1: SerialNumber: syz [ 149.245833][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.310048][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.315601][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.343998][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.357978][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.528835][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 149.647800][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.989325][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 150.732892][ T9] usb 3-1: 0:2 : does not exist [ 150.763547][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.904805][ T6543] kvm: pic: level sensitive irq not supported [ 150.905027][ T6543] kvm: pic: non byte read [ 150.905313][ T6543] kvm: pic: single mode not supported [ 150.905321][ T6543] kvm: pic: level sensitive irq not supported [ 150.905379][ T6543] kvm: pic: non byte read [ 150.905582][ T6543] kvm: pic: non byte read [ 150.905778][ T6543] kvm: pic: non byte read [ 150.905969][ T6543] kvm: pic: non byte read [ 150.906202][ T6543] kvm: pic: non byte read [ 150.906427][ T6543] kvm: pic: non byte read [ 150.906658][ T6543] kvm: pic: non byte read [ 150.906877][ T6543] kvm: pic: non byte read [ 150.907062][ T6543] kvm: pic: level sensitive irq not supported [ 150.907110][ T6543] kvm: pic: non byte read [ 151.037406][ T9] usb 3-1: USB disconnect, device number 3 [ 151.060394][ T6525] lo speed is unknown, defaulting to 1000 [ 151.158952][ T6550] Set syz0 is full, maxelem 0 reached [ 151.350387][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.407449][ T5807] Bluetooth: hci6: command tx timeout [ 151.862946][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.905134][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 152.067416][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.277304][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 152.280552][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.280583][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.298053][ T5895] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.298079][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.298096][ T5895] usb 4-1: Product: syz [ 152.298108][ T5895] usb 4-1: Manufacturer: syz [ 152.298120][ T5895] usb 4-1: SerialNumber: syz [ 152.362033][ T5895] usb 4-1: config 0 descriptor?? [ 152.396979][ T5895] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.397015][ T5895] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 152.567388][ T5863] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 152.587003][ T6566] cgroup: fork rejected by pids controller in /syz1 [ 152.756001][ T5863] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 152.756087][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.756106][ T5863] usb 1-1: Product: syz [ 152.756118][ T5863] usb 1-1: Manufacturer: syz [ 152.756130][ T5863] usb 1-1: SerialNumber: syz [ 152.803545][ T5863] usb 1-1: config 0 descriptor?? [ 152.996717][ T5895] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 153.001969][ T5895] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 153.023381][ T5863] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 153.100444][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.454446][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.487546][ T5807] Bluetooth: hci6: command tx timeout [ 153.932099][ T6611] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.055092][ T5895] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 154.063876][ T5895] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 154.064953][ T5895] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 154.065889][ T5895] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 154.077248][ T5895] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 154.079971][ T5895] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 154.199266][ T5895] usb 4-1: USB disconnect, device number 2 [ 154.554948][ T6617] ======================================================= [ 154.554948][ T6617] WARNING: The mand mount option has been deprecated and [ 154.554948][ T6617] and is ignored by this kernel. Remove the mand [ 154.554948][ T6617] option from the mount to silence this warning. [ 154.554948][ T6617] ======================================================= [ 154.647079][ T5863] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 154.702336][ T5863] usb 1-1: USB disconnect, device number 5 [ 154.855875][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 155.121037][ T6628] bridge_slave_0: left allmulticast mode [ 155.121065][ T6628] bridge_slave_0: left promiscuous mode [ 155.121970][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.156959][ T6631] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 155.232536][ T6628] bridge_slave_1: left allmulticast mode [ 155.232565][ T6628] bridge_slave_1: left promiscuous mode [ 155.232815][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.453282][ T6628] bond0: (slave bond_slave_0): Releasing backup interface [ 155.529506][ T6628] bond0: (slave bond_slave_1): Releasing backup interface [ 155.567401][ T5807] Bluetooth: hci6: command tx timeout [ 155.627592][ T6628] team0: Port device team_slave_0 removed [ 155.707022][ T6628] team0: Port device team_slave_1 removed [ 155.714238][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.714264][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.771477][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.771506][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.833569][ T6628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.894376][ T1584] lo speed is unknown, defaulting to 1000 [ 155.943115][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.945615][ T6631] team0: Port device bond0 added [ 156.287741][ T43] bridge_slave_1: left allmulticast mode [ 156.287968][ T43] bridge_slave_1: left promiscuous mode [ 156.293342][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.323259][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 156.467960][ T43] bridge_slave_0: left allmulticast mode [ 156.467990][ T43] bridge_slave_0: left promiscuous mode [ 156.468621][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.647469][ T5807] Bluetooth: hci6: command tx timeout [ 158.349735][ T6667] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 158.349962][ T6667] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 158.350178][ T6667] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 158.350445][ T6667] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 158.354664][ T6667] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 158.355223][ T6667] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 158.355580][ T6667] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 158.373145][ T6667] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 158.373456][ T6667] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 158.373713][ T6667] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 159.355375][ T6683] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.680299][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.734064][ T6687] EXT4-fs (loop7): unable to read superblock [ 159.771928][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.811971][ T43] bond0 (unregistering): Released all slaves [ 160.445002][ T6700] capability: warning: `syz.1.249' uses deprecated v2 capabilities in a way that may be insecure [ 161.949784][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.949918][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.950167][ T6525] bridge_slave_0: entered allmulticast mode [ 161.952054][ T6525] bridge_slave_0: entered promiscuous mode [ 162.022543][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.022679][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.022912][ T6525] bridge_slave_1: entered allmulticast mode [ 162.025196][ T6525] bridge_slave_1: entered promiscuous mode [ 163.295205][ T6736] netlink: 76 bytes leftover after parsing attributes in process `syz.2.258'. [ 163.313417][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.596940][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.665237][ T6743] binfmt_misc: register: failed to install interpreter file ./file1 [ 163.906153][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 164.157603][ T43] hsr_slave_0: left promiscuous mode [ 164.183907][ T6759] syz.3.268 uses obsolete (PF_INET,SOCK_PACKET) [ 164.198179][ T43] hsr_slave_1: left promiscuous mode [ 164.225701][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.225852][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.289998][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.290027][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.423421][ T43] veth1_macvtap: left promiscuous mode [ 164.423691][ T43] veth0_macvtap: left promiscuous mode [ 164.423995][ T43] veth1_vlan: left promiscuous mode [ 164.425938][ T43] veth0_vlan: left promiscuous mode [ 164.437476][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.617469][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 164.624393][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.624449][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.650879][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.650906][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.650923][ T44] usb 3-1: Product: syz [ 164.650936][ T44] usb 3-1: Manufacturer: syz [ 164.650948][ T44] usb 3-1: SerialNumber: syz [ 164.664912][ T44] usb 3-1: config 0 descriptor?? [ 166.217620][ T1584] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.418330][ T1584] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.418386][ T1584] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.418403][ T1584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.421809][ T1584] usb 2-1: config 0 descriptor?? [ 166.461163][ T1584] pwc: Askey VC010 type 2 USB webcam detected. [ 166.836570][ T1584] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.843967][ T1584] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.865086][ T1584] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.866571][ T1584] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.880535][ T1584] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.881181][ T1584] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.882097][ T1584] pwc: recv_control_msg error -32 req 02 val 2000 [ 167.084015][ T1584] pwc: recv_control_msg error -71 req 04 val 1500 [ 167.084570][ T1584] pwc: recv_control_msg error -71 req 02 val 2500 [ 167.085051][ T1584] pwc: recv_control_msg error -71 req 02 val 2400 [ 167.085985][ T1584] pwc: recv_control_msg error -71 req 02 val 2600 [ 167.116437][ T1584] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.116983][ T1584] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.135288][ T1584] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.135788][ T1584] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.147859][ T1584] pwc: Registered as video103. [ 167.152060][ T1584] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 167.169065][ T1584] usb 2-1: USB disconnect, device number 4 [ 167.249669][ T9] usb 3-1: USB disconnect, device number 4 [ 167.455599][ T43] team0 (unregistering): Port device team_slave_1 removed [ 167.798189][ T43] team0 (unregistering): Port device team_slave_0 removed [ 170.432871][ T6525] team0: Port device team_slave_0 added [ 170.564240][ T6759] netlink: 'syz.3.268': attribute type 9 has an invalid length. [ 170.564262][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.268'. [ 170.602928][ T6525] team0: Port device team_slave_1 added [ 171.080731][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.080746][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.080765][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.086949][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.086964][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.086987][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.969506][ T6525] hsr_slave_0: entered promiscuous mode [ 171.970917][ T6525] hsr_slave_1: entered promiscuous mode [ 174.312126][ T6525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 174.451983][ T6525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 174.594763][ T6525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 174.822947][ T6525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 174.828988][ T6861] netlink: 156 bytes leftover after parsing attributes in process `syz.1.295'. [ 175.846404][ T6870] ref_ctr increment failed for inode: 0x170 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803c248000 [ 176.130352][ T6886] loop2: detected capacity change from 0 to 7 [ 176.168654][ T5999] Dev loop2: unable to read RDB block 7 [ 176.168697][ T5999] loop2: unable to read partition table [ 176.168958][ T5999] loop2: partition table beyond EOD, truncated [ 176.216222][ T6886] Dev loop2: unable to read RDB block 7 [ 176.216266][ T6886] loop2: unable to read partition table [ 176.216483][ T6886] loop2: partition table beyond EOD, truncated [ 176.216515][ T6886] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.362097][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.443162][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.465855][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.477556][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.520928][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.528575][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.560820][ T6894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.533039][ T6870] uprobe: syz.2.298:6870 failed to unregister, leaking uprobe [ 178.121956][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.699880][ T6931] netlink: 64 bytes leftover after parsing attributes in process `syz.0.310'. [ 179.673501][ T6939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.150256][ T6525] veth0_vlan: entered promiscuous mode [ 180.205899][ T6525] veth1_vlan: entered promiscuous mode [ 180.974960][ T6525] veth0_macvtap: entered promiscuous mode [ 181.026511][ T6525] veth1_macvtap: entered promiscuous mode [ 181.494527][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.521245][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.603428][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.607413][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.607967][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.608477][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.306067][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.632678][ T6994] binder: BINDER_SET_CONTEXT_MGR already set [ 183.632693][ T6994] binder: 6993:6994 ioctl 4018620d 200000004a80 returned -16 [ 183.937756][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.937777][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.939142][ T7001] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 183.984119][ T7001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.149403][ T7001] bond1: (slave gretap1): making interface the new active one [ 184.174443][ T7001] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 184.262979][ T7007] vlan2: entered allmulticast mode [ 184.262997][ T7007] bond1: entered allmulticast mode [ 184.263005][ T7007] gretap1: entered allmulticast mode [ 184.265285][ T7007] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 184.460897][ T6965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.461000][ T6965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.599092][ T7028] 9pnet_virtio: no channels available for device syz [ 187.462710][ T7045] picdev_read: 6 callbacks suppressed [ 187.462729][ T7045] kvm: pic: non byte read [ 187.462984][ T7045] kvm: pic: single mode not supported [ 187.463038][ T7045] kvm: pic: non byte read [ 187.463293][ T7045] kvm: pic: single mode not supported [ 187.463301][ T7045] kvm: pic: level sensitive irq not supported [ 187.463354][ T7045] kvm: pic: non byte read [ 187.463647][ T7045] kvm: pic: non byte read [ 187.463934][ T7045] kvm: pic: non byte read [ 187.464187][ T7045] kvm: pic: single mode not supported [ 187.464240][ T7045] kvm: pic: non byte read [ 187.464490][ T7045] kvm: pic: single mode not supported [ 187.464498][ T7045] kvm: pic: level sensitive irq not supported [ 187.464550][ T7045] kvm: pic: non byte read [ 187.464849][ T7045] kvm: pic: non byte read [ 187.465135][ T7045] kvm: pic: non byte read [ 188.277284][ T987] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 188.547797][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 188.547828][ T987] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 188.547866][ T987] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 188.547886][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.617415][ T987] usb 3-1: config 0 descriptor?? [ 188.618973][ T7063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.573604][ T987] usbhid 3-1:0.0: can't add hid device: -71 [ 189.574624][ T987] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.660221][ T987] usb 3-1: USB disconnect, device number 5 [ 190.304554][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.976585][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.430128][ T7101] loop2: detected capacity change from 0 to 7 [ 191.467162][ T7101] loop2: [ 191.467417][ T7101] loop2: partition table partially beyond EOD, truncated [ 191.924031][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 191.924051][ T37] audit: type=1326 audit(1763678383.548:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 191.924418][ T37] audit: type=1326 audit(1763678383.548:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 191.943207][ T37] audit: type=1326 audit(1763678383.568:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 191.943849][ T37] audit: type=1326 audit(1763678383.568:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 191.944592][ T37] audit: type=1326 audit(1763678383.568:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 191.945000][ T37] audit: type=1326 audit(1763678383.568:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 192.026840][ T37] audit: type=1326 audit(1763678383.568:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 192.028130][ T37] audit: type=1326 audit(1763678383.648:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 192.040166][ T37] audit: type=1326 audit(1763678383.658:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 192.043719][ T37] audit: type=1326 audit(1763678383.668:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f7fcf749 code=0x7ffc0000 [ 193.535706][ T7139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 193.535731][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.542515][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 193.837305][ T5895] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 193.841952][ T987] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 194.023273][ T987] usb 4-1: config 222 has no interfaces? [ 194.023310][ T987] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.023351][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.349019][ T987] usb 4-1: string descriptor 0 read error: -71 [ 194.375736][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375808][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.376619][ T987] usb 4-1: USB disconnect, device number 3 [ 194.388088][ T7140] vhci_hcd: connection reset by peer [ 194.425914][ T3694] vhci_hcd: stop threads [ 194.426954][ T3694] vhci_hcd: release socket [ 194.454085][ T3694] vhci_hcd: disconnect device [ 194.916628][ T7155] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 195.698264][ T7168] Bluetooth: MGMT ver 1.23 [ 195.698315][ T7168] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 196.456834][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.372'. [ 196.465013][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.372'. [ 196.999558][ T7179] netlink: 52 bytes leftover after parsing attributes in process `syz.1.371'. [ 197.088080][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 197.088099][ T37] audit: type=1326 audit(1763678388.708:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.088139][ T37] audit: type=1326 audit(1763678388.708:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197335][ T37] audit: type=1326 audit(1763678388.758:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197373][ T37] audit: type=1326 audit(1763678388.758:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197395][ T37] audit: type=1326 audit(1763678388.758:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197416][ T37] audit: type=1326 audit(1763678388.758:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197437][ T37] audit: type=1326 audit(1763678388.758:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197458][ T37] audit: type=1326 audit(1763678388.758:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197479][ T37] audit: type=1326 audit(1763678388.758:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 197.197500][ T37] audit: type=1326 audit(1763678388.758:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7181 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 198.997387][ T5895] vhci_hcd: vhci_device speed not set [ 199.137120][ T7216] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 199.137145][ T7216] ref_ctr increment failed for inode: 0x166 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888034504500 [ 201.551702][ T7236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.551724][ T7236] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 201.554445][ T7239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.554617][ T7239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.776232][ T7239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.807046][ T7262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.098181][ T7236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.098207][ T7236] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 202.101250][ T7239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.101442][ T7239] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.101969][ T7236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.102013][ T7236] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 202.212621][ T7239] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.330473][ T7239] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 202.330573][ T7239] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 202.560215][ T7236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.560237][ T7236] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 202.561848][ T7239] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 202.764728][ T7236] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 202.764750][ T7236] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 203.166786][ T7286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.883087][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 203.883345][ T37] audit: type=1326 audit(1763678395.508:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 203.884090][ T37] audit: type=1326 audit(1763678395.508:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 203.884137][ T37] audit: type=1326 audit(1763678395.508:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 203.884175][ T37] audit: type=1326 audit(1763678395.508:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 203.884213][ T37] audit: type=1326 audit(1763678395.508:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 203.884248][ T37] audit: type=1326 audit(1763678395.508:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 203.884285][ T37] audit: type=1326 audit(1763678395.508:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 204.102954][ T37] audit: type=1326 audit(1763678395.728:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 204.103231][ T37] audit: type=1326 audit(1763678395.728:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7297 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9558f749 code=0x7ffc0000 [ 204.389152][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 204.574239][ T7309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.405'. [ 206.567445][ T7340] vxcan1: entered promiscuous mode [ 207.437329][ T987] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.613445][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.613475][ T987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.613495][ T987] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.613533][ T987] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.613553][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.623875][ T987] usb 3-1: config 0 descriptor?? [ 208.229424][ T987] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 208.335573][ T7369] kvm: pic: non byte read [ 208.335975][ T7369] kvm: pic: non byte write [ 208.336322][ T7369] kvm: pic: non byte read [ 208.336463][ T7369] kvm: pic: non byte write [ 208.336725][ T7369] kvm: pic: non byte read [ 208.336861][ T7369] kvm: pic: non byte write [ 208.337122][ T7369] kvm: pic: non byte read [ 208.403731][ T7369] kvm: pic: single mode not supported [ 208.403844][ T7369] kvm: pic: non byte write [ 208.637400][ T987] usb 3-1: USB disconnect, device number 6 [ 210.892909][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 210.968051][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 215.692239][ T7461] binder: 7460:7461 ioctl c0306201 200000000680 returned -14 [ 216.137377][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 216.489371][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.489398][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.489415][ T31] usb 2-1: Product: syz [ 216.489428][ T31] usb 2-1: Manufacturer: syz [ 216.489513][ T31] usb 2-1: SerialNumber: syz [ 216.507933][ T31] usb 2-1: config 0 descriptor?? [ 216.719324][ T31] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.864044][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.944631][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.012049][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.552129][ T5895] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 219.299967][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.299999][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.300035][ T5895] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 219.300052][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.308789][ T5895] usb 6-1: config 0 descriptor?? [ 219.377458][ T31] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 219.418881][ T31] usb 2-1: USB disconnect, device number 5 [ 219.803560][ T5895] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 220.013160][ T7482] EXT4-fs (loop5): unable to read superblock [ 220.026430][ T31] usb 6-1: USB disconnect, device number 2 [ 220.163215][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'. [ 220.180163][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'. [ 220.183479][ T7498] dns_resolver: Unsupported content type (240) [ 220.186353][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.453'. [ 220.193059][ T7493] fido_id[7493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 221.567376][ T5895] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 222.060145][ T5895] usb 4-1: device descriptor read/64, error -71 [ 223.637397][ T5895] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 224.277388][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 224.507330][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 225.294620][ T31] usb 6-1: config 0 has no interfaces? [ 225.305209][ T31] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 225.305232][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.305241][ T31] usb 6-1: Product: syz [ 225.305248][ T31] usb 6-1: Manufacturer: syz [ 225.305254][ T31] usb 6-1: SerialNumber: syz [ 225.311383][ T31] usb 6-1: config 0 descriptor?? [ 227.466225][ T31] usb 6-1: USB disconnect, device number 3 [ 228.927514][ T5863] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 229.177350][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 229.179520][ T5863] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.179548][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.179576][ T5863] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 229.179595][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.236197][ T5863] usb 1-1: config 0 descriptor?? [ 229.581406][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 229.803730][ T5863] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 230.325096][ T44] usb 1-1: USB disconnect, device number 6 [ 245.978398][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.982202][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.983461][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.984626][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.985434][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.027023][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.047875][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.048290][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.055517][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.087505][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.209311][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.220899][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.234258][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.244559][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.255505][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.350139][ T7609] lo speed is unknown, defaulting to 1000 [ 246.511884][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.524655][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.526907][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.543325][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.544159][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.561204][ T7612] lo speed is unknown, defaulting to 1000 [ 246.803300][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.814565][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.826150][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.839508][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.840310][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 246.910664][ T7617] lo speed is unknown, defaulting to 1000 [ 247.075839][ T5807] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 247.087601][ T5807] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 247.096349][ T5807] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 247.107927][ T5807] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 247.119376][ T5807] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 247.191021][ T7619] lo speed is unknown, defaulting to 1000 [ 247.407328][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 247.412908][ T7623] lo speed is unknown, defaulting to 1000 [ 247.471530][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 248.128044][ T5807] Bluetooth: hci1: command tx timeout [ 248.367700][ T5807] Bluetooth: hci5: command tx timeout [ 248.687514][ T5807] Bluetooth: hci7: command tx timeout [ 248.927483][ T5807] Bluetooth: hci8: command tx timeout [ 250.207423][ T5807] Bluetooth: hci1: command tx timeout [ 305.741074][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 305.745903][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 305.754378][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 305.758850][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 305.759594][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 306.378778][ T5807] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 306.389086][ T5807] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 306.390461][ T5807] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 306.392506][ T5807] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 306.393394][ T5807] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 306.451180][ T61] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 306.456585][ T61] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 306.461504][ T61] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 306.470408][ T61] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 306.472018][ T61] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 306.892468][ T61] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 306.909511][ T61] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 306.911040][ T61] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 306.912194][ T61] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 306.912958][ T61] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 306.918422][ T5809] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 306.940112][ T5809] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 306.941964][ T5809] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 306.943287][ T5809] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 306.944806][ T5809] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 335.437263][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.437284][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16/3:b..l P7598/4:b..l [ 335.437318][ C0] rcu: (detected by 0, t=10502 jiffies, g=21817, q=3863 ncpus=2) [ 335.437356][ C0] task:syz.3.485 state:D stack:25000 pid:7598 tgid:7597 ppid:5802 task_flags:0x400140 flags:0x00080002 [ 335.437413][ C0] Call Trace: [ 335.437424][ C0] [ 335.437438][ C0] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.437480][ C0] ? __pfx___schedule+0x10/0x10 [ 335.437505][ C0] schedule_rtlock+0x30/0x70 [ 335.437517][ C0] rtlock_slowlock_locked+0x3819/0x4010 [ 335.437536][ C0] ? __lock_acquire+0xab9/0xd20 [ 335.437552][ C0] ? rtlock_slowlock_locked+0x286/0x4010 [ 335.437563][ C0] ? do_raw_spin_lock+0x121/0x290 [ 335.437577][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 335.437593][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 335.437606][ C0] ? rcu_is_watching+0x15/0xb0 [ 335.437616][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.437631][ C0] rt_spin_lock+0x158/0x3e0 [ 335.437643][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 335.437654][ C0] ? __pfx_drm_update_vblank_count+0x10/0x10 [ 335.437670][ C0] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 335.437683][ C0] hrtimer_cancel_wait_running+0xfa/0x180 [ 335.437697][ C0] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 335.437708][ C0] hrtimer_cancel+0x39/0x60 [ 335.437719][ C0] drm_vblank_disable_and_save+0x1bf/0x380 [ 335.437736][ C0] drm_crtc_vblank_off+0x22e/0x820 [ 335.437748][ C0] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 335.437761][ C0] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 335.437772][ C0] drm_atomic_helper_commit_modeset_disables+0xc99/0x2040 [ 335.437794][ C0] vkms_atomic_commit_tail+0x51/0x210 [ 335.437804][ C0] ? read_tsc+0x9/0x20 [ 335.437814][ C0] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 335.437822][ C0] commit_tail+0x284/0x3a0 [ 335.437836][ C0] drm_atomic_helper_commit+0xa6b/0xb10 [ 335.437849][ C0] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 335.437857][ C0] drm_atomic_commit+0x262/0x2c0 [ 335.437872][ C0] ? __pfx_drm_atomic_commit+0x10/0x10 [ 335.437884][ C0] ? __pfx___drm_printfn_info+0x10/0x10 [ 335.437897][ C0] ? drm_atomic_state_init+0x231/0x310 [ 335.437914][ C0] drm_atomic_helper_set_config+0xe2/0x160 [ 335.437929][ C0] drm_mode_setcrtc+0x9a7/0x1c50 [ 335.437954][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 335.437967][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.437983][ C0] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 335.438008][ C0] ? rt_spin_unlock+0x161/0x200 [ 335.438020][ C0] ? drm_is_current_master+0x1a2/0x210 [ 335.438031][ C0] drm_ioctl_kernel+0x2d2/0x3a0 [ 335.438042][ C0] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 335.438053][ C0] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 335.438068][ C0] drm_ioctl+0x685/0xb20 [ 335.438081][ C0] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 335.438094][ C0] ? __pfx_drm_ioctl+0x10/0x10 [ 335.438111][ C0] ? __fget_files+0x3a6/0x420 [ 335.438123][ C0] ? __fget_files+0x2a/0x420 [ 335.438136][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 335.438146][ C0] ? __pfx_drm_ioctl+0x10/0x10 [ 335.438164][ C0] __se_sys_ioctl+0xff/0x170 [ 335.438177][ C0] do_syscall_64+0xfa/0xfa0 [ 335.438189][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.438201][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.438210][ C0] ? clear_bhb_loop+0x60/0xb0 [ 335.438221][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.438231][ C0] RIP: 0033:0x7fab9558f749 [ 335.438245][ C0] RSP: 002b:00007fab937f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.438254][ C0] RAX: ffffffffffffffda RBX: 00007fab957e5fa0 RCX: 00007fab9558f749 [ 335.438262][ C0] RDX: 0000200000000400 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 335.438268][ C0] RBP: 00007fab95613f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.438274][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.438279][ C0] R13: 00007fab957e6038 R14: 00007fab957e5fa0 R15: 00007ffc3a1a9458 [ 335.438295][ C0] [ 335.438299][ C0] task:ktimers/0 state:D stack:22992 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 335.438325][ C0] Call Trace: [ 335.438328][ C0] [ 335.438334][ C0] __schedule+0x16f3/0x4c20 [ 335.438359][ C0] ? __pfx___schedule+0x10/0x10 [ 335.438382][ C0] schedule_rtlock+0x30/0x70 [ 335.438394][ C0] rtlock_slowlock_locked+0x3819/0x4010 [ 335.438413][ C0] ? __lock_acquire+0xab9/0xd20 [ 335.438429][ C0] ? rtlock_slowlock_locked+0x286/0x4010 [ 335.438439][ C0] ? do_raw_spin_lock+0x121/0x290 [ 335.438452][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 335.438469][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 335.438487][ C0] rt_spin_lock+0x158/0x3e0 [ 335.438498][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 335.438507][ C0] ? rt_spin_lock+0x1f4/0x3e0 [ 335.438518][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 335.438531][ C0] drm_handle_vblank+0xc1/0x630 [ 335.438540][ C0] ? read_tsc+0x9/0x20 [ 335.438550][ C0] ? __pfx_vkms_vblank_simulate+0x10/0x10 [ 335.438560][ C0] vkms_vblank_simulate+0x97/0x2f0 [ 335.438573][ C0] ? __pfx_vkms_vblank_simulate+0x10/0x10 [ 335.438583][ C0] __hrtimer_run_queues+0x552/0xd40 [ 335.438605][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 335.438617][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 335.438633][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 335.438644][ C0] handle_softirqs+0x22f/0x710 [ 335.438661][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 335.438677][ C0] run_ktimerd+0xcf/0x190 [ 335.438688][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 335.438698][ C0] ? schedule+0x91/0x360 [ 335.438714][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 335.438724][ C0] smpboot_thread_fn+0x542/0xa60 [ 335.438736][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 335.438751][ C0] kthread+0x711/0x8a0 [ 335.438766][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 335.438776][ C0] ? __pfx_kthread+0x10/0x10 [ 335.438787][ C0] ? rt_spin_unlock+0x150/0x200 [ 335.438799][ C0] ? rt_spin_unlock+0x161/0x200 [ 335.438808][ C0] ? __pfx_kthread+0x10/0x10 [ 335.438821][ C0] ret_from_fork+0x4bc/0x870 [ 335.438833][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 335.438848][ C0] ? __switch_to_asm+0x39/0x70 [ 335.438856][ C0] ? __switch_to_asm+0x33/0x70 [ 335.438864][ C0] ? __pfx_kthread+0x10/0x10 [ 335.438877][ C0] ret_from_fork_asm+0x1a/0x30 [ 335.438895][ C0] [ 335.438898][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g21817 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 335.438909][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=10462 [ 335.438914][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g21817 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 335.438923][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 335.438928][ C0] rcu: RCU grace-period kthread stack dump: [ 335.438932][ C0] task:rcu_preempt state:I stack:26888 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 335.438959][ C0] Call Trace: [ 335.438962][ C0] [ 335.438968][ C0] __schedule+0x16f3/0x4c20 [ 335.438990][ C0] ? __lock_acquire+0xab9/0xd20 [ 335.439002][ C0] ? __pfx___schedule+0x10/0x10 [ 335.439021][ C0] ? schedule+0x91/0x360 [ 335.439034][ C0] schedule+0x165/0x360 [ 335.439046][ C0] schedule_timeout+0x12b/0x270 [ 335.439058][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 335.439069][ C0] ? __pfx_process_timeout+0x10/0x10 [ 335.439082][ C0] ? prepare_to_swait_event+0x341/0x380 [ 335.439096][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 335.439114][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 335.439126][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.439138][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 335.439148][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 335.439208][ C0] ? finish_swait+0xcd/0x1f0 [ 335.439220][ C0] rcu_gp_kthread+0x99/0x390 [ 335.439233][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 335.439245][ C0] ? __kthread_parkme+0x7b/0x200 [ 335.439257][ C0] ? __kthread_parkme+0x1a1/0x200 [ 335.439271][ C0] kthread+0x711/0x8a0 [ 335.439285][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 335.439296][ C0] ? __pfx_kthread+0x10/0x10 [ 335.439307][ C0] ? rt_spin_unlock+0x150/0x200 [ 335.439319][ C0] ? rt_spin_unlock+0x161/0x200 [ 335.439328][ C0] ? __pfx_kthread+0x10/0x10 [ 335.439345][ C0] ret_from_fork+0x4bc/0x870 [ 335.439363][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 335.439386][ C0] ? __switch_to_asm+0x39/0x70 [ 335.439401][ C0] ? __switch_to_asm+0x33/0x70 [ 335.439415][ C0] ? __pfx_kthread+0x10/0x10 [ 335.439435][ C0] ret_from_fork_asm+0x1a/0x30 [ 335.439467][ C0] [ 335.439473][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 335.439504][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.439546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.439564][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 335.439614][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 a7 27 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 335.439629][ C0] RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2 [ 335.439644][ C0] RAX: be1e2bebc89cdc00 RBX: ffffffff81953c47 RCX: be1e2bebc89cdc00 [ 335.439657][ C0] RDX: 0000000000000001 RSI: ffffffff8cd8e759 RDI: ffffffff8b3ddfe0 [ 335.439670][ C0] RBP: ffffffff8d207ea8 R08: ffff8880b88334db R09: 1ffff1101710669b [ 335.439683][ C0] R10: dffffc0000000000 R11: ffffed101710669c R12: ffffffff8ed64270 [ 335.439695][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1a60640 [ 335.439707][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 335.439721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.439733][ C0] CR2: 00007f39e9bc3d84 CR3: 000000003980a000 CR4: 00000000003526f0 [ 335.439749][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 335.439760][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 335.439773][ C0] Call Trace: [ 335.439779][ C0] [ 335.439785][ C0] default_idle+0x13/0x20 [ 335.439802][ C0] default_idle_call+0x73/0xb0 [ 335.439820][ C0] do_idle+0x1e7/0x510 [ 335.439843][ C0] ? __pfx_do_idle+0x10/0x10 [ 335.439876][ C0] cpu_startup_entry+0x44/0x60 [ 335.439894][ C0] rest_init+0x2de/0x300 [ 335.439911][ C0] start_kernel+0x3ae/0x410 [ 335.439937][ C0] x86_64_start_reservations+0x24/0x30 [ 335.439958][ C0] x86_64_start_kernel+0x143/0x1c0 [ 335.439977][ C0] common_startup_64+0x13e/0x147 [ 335.440018][ C0]