last executing test programs: 16.167488072s ago: executing program 1 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 16.167081806s ago: executing program 2 (id=102): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000ec0)={0x1, 0x100, 0x81}) 11.098338389s ago: executing program 0 (id=107): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x480, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x10000003}}]}}, &(0x7f0000000140)=""/240, 0x32, 0xf0, 0x1}, 0x20) 11.097737167s ago: executing program 3 (id=108): userfaultfd(0x80001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) fanotify_init(0x500, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x2982, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0x879, 0x1, 0x4000001, 0x1a3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x72, 0x0, 0x0, 0x7, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47bb, 0x0, 0x0, 0x0, 0x0) 10.916609815s ago: executing program 2 (id=109): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x3, @lang_id={0x4, 0x3, 0x1f}}, 0x0, 0x0, 0x0}, 0x0) 10.892275651s ago: executing program 1 (id=110): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x4, {0x1, 0xff, 0x1}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f00000002c0)=@can={0x1d, r4}, 0x80, &(0x7f0000000540)}}, {{0x0, 0x0, 0x0}}], 0x2, 0xf5) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 10.309354777s ago: executing program 3 (id=111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x9, 0xf, 0x0, 0x0, 0x64ff}) 9.040720918s ago: executing program 0 (id=112): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf02d}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x110, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000c2c000/0x2000)=nil, 0x2000, 0x200000c, 0x50, r1, 0xf8f37000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000280)={0x30, r3, 0x1, 0xa1ff, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) 7.181745198s ago: executing program 1 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x20008000) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r5) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0xe, 0x81800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x20}, {0x94, 0x0, 0x0, 0x4}, {0x6}]}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r6, 0x0, 0x0, 0x80000) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8014) 6.948575877s ago: executing program 4 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) r7 = creat(0x0, 0x14) r8 = syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1004001, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000100)) 6.534793165s ago: executing program 2 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000002c0)={&(0x7f0000000700)={0x50, 0x0, 0x16, {0x7, 0x29, 0x0, 0x21, 0x72, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) 6.512864826s ago: executing program 0 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xe, 0x80000001, 0x6, 0x2, 0x1041, 0xfffffffffffffff6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x2006a], 0x2, 0x1000d6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.32413387s ago: executing program 3 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0xdf, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.323417664s ago: executing program 1 (id=119): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x4, 0x23, 0xcf, 0x10, 0x11c9, 0x6ff6, 0xa8f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x1, 0xd0, 0x3, [{{0x9, 0x4, 0x94, 0xa, 0x2, 0xff, 0x5d, 0x81, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 5.193015078s ago: executing program 2 (id=120): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) socket$unix(0x1, 0x5, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 4.999799763s ago: executing program 4 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x5d0, 0xffffffff, 0x1458, 0x0, 0x1458, 0xfeffffff, 0xffffffff, 0x1560, 0x1560, 0x1560, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x300, 0x328, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f00000001c0)='g') ioctl(r0, 0xc, &(0x7f00000000c0)="7774eb4c77b94091d31f9a667d2853f8e75b1bd165b446e9b7018477d7adb9de3e79722540276392712f556001fd64a3") r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000380)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x7e3c, 0x3, 0x5, 0x5, 0xffff, 0xfffffffe, 0x9, 0x4, 0xfefffffd}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x16, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000d000000010000000100000008000000ff0a000006000000800000000000000000000000000000000d0000000004000004000000780200007fffffff04000000ff7f00000000000000000000000000009c7ad9b513f165f538b0c0afd47cab29b68090f444e5c31a7fc2b16449428e5ba7fec2bf4e75e2ccd33d023f5a838a046fe4689bbe7839f00ba1494227631f9f49e1401687e0ee27e5592b441f2b0262e58339f9f31b86ead1d1bc4c7c34"]) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r3) 4.908514575s ago: executing program 0 (id=122): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4.87254944s ago: executing program 3 (id=123): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010002000000000004000400000000001000050000000000200001000000000047fea9a80031c6d9c4a9dccd1e9c9b22d975033c447b5adc811c5220ee1ddbea1b46e290721faa3baaf50c06cd27f0316cc3dcce6c714a380b1dcb7ec8290d6eb6079341432769a3f750097e9cce6b60626f51ac88c0f128c48b34445e46347777038dd65d02e2fcf3600cf23aab0725be91872eba52683598af83c79c699fea80e27aa46dc2a3bc3bef1dfe9bcbeae831ef856bb3851a841b1c16ad6c29e02e0c9a6e7509088dbad6edfb91cdc37061cb0dd99b613b7f"], 0x24, 0x3) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10ec, 0x0, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000), 0x0) io_uring_enter(r1, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x20000023893) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x4602) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000440), 0x2, r7, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000400)=[r7], &(0x7f0000000180), &(0x7f0000000040)=[r8, r8], &(0x7f0000000280)}) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000000, 0x8011, r5, 0x82000000) 2.539269288s ago: executing program 0 (id=124): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.320348266s ago: executing program 3 (id=125): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) 2.319671553s ago: executing program 4 (id=126): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) 1.999887421s ago: executing program 3 (id=127): syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x1b0, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x6, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xda, 0x4}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 1.890293085s ago: executing program 4 (id=128): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) close_range(r0, 0xffffffffffffffff, 0x0) 1.776645895s ago: executing program 2 (id=129): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000006640), 0x0, 0x0, 0x0, 0x20000040}, 0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') rt_sigaction(0x1, &(0x7f00000000c0)={0x0, 0x8000000, 0x0, {[0x9]}}, 0x0, 0x8, &(0x7f0000000200)) read$FUSE(r2, &(0x7f0000006980)={0x2020}, 0x2020) 1.776115599s ago: executing program 1 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x4, 0x4, 0x0, 0x8, 0x7, 0xf, 0x6, 0x3, 0x8, 0x6, 0x9, 0x0, 0x7, 0x4, 0x3, 0xc, 0xe, 0x6, '\x00', 0xad, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 558.159013ms ago: executing program 0 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) read$FUSE(r4, &(0x7f0000004080)={0x2020}, 0x2020) 440.590924ms ago: executing program 4 (id=132): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) 304.387346ms ago: executing program 1 (id=133): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = accept4$x25(r0, &(0x7f0000000700)={0x9, @remote}, &(0x7f0000000740)=0x12, 0x800) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000780)) bind$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0xd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x30, r5, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0xfffffffffffffe01, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e23, 0x2, @empty, 0x2}, 0x1c) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/165) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101441, 0x146) fallocate(r9, 0x20, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='cachefiles_io_error\x00', r9}, 0x18) 303.908351ms ago: executing program 2 (id=134): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x12, r0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 0s ago: executing program 4 (id=135): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x20, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 91.708345][ T5825] cgroup: Unknown subsys name 'net' [ 91.962590][ T5825] cgroup: Unknown subsys name 'cpuset' [ 92.006129][ T5825] cgroup: Unknown subsys name 'rlimit' [ 92.189705][ T992] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 94.164085][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.332230][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.364749][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.368851][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.370956][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.371749][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.374759][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.382840][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.384336][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.385853][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.387474][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.387868][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.390455][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.391195][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.392309][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.396391][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.396689][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.401040][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.401505][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.409468][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.409702][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.411994][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.413141][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.416444][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.466444][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.467275][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.599218][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 98.678958][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 98.834469][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.964088][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 98.974616][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 99.467986][ T5857] Bluetooth: hci2: command tx timeout [ 99.468063][ T5843] Bluetooth: hci1: command tx timeout [ 99.468465][ T5843] Bluetooth: hci3: command tx timeout [ 99.475603][ T5857] Bluetooth: hci4: command tx timeout [ 99.560840][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.562334][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.562809][ T5838] bridge_slave_0: entered allmulticast mode [ 99.564975][ T5838] bridge_slave_0: entered promiscuous mode [ 99.625335][ T5857] Bluetooth: hci0: command tx timeout [ 99.718753][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.718965][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.719151][ T5838] bridge_slave_1: entered allmulticast mode [ 99.721176][ T5838] bridge_slave_1: entered promiscuous mode [ 99.723838][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.723971][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.724135][ T5837] bridge_slave_0: entered allmulticast mode [ 99.772632][ T5837] bridge_slave_0: entered promiscuous mode [ 100.000327][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.000454][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.000669][ T5837] bridge_slave_1: entered allmulticast mode [ 100.002709][ T5837] bridge_slave_1: entered promiscuous mode [ 100.399888][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.400078][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.400242][ T5839] bridge_slave_0: entered allmulticast mode [ 100.402307][ T5839] bridge_slave_0: entered promiscuous mode [ 100.568252][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.653221][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.653394][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.653612][ T5839] bridge_slave_1: entered allmulticast mode [ 100.656885][ T5839] bridge_slave_1: entered promiscuous mode [ 100.659892][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.660055][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.660729][ T5849] bridge_slave_0: entered allmulticast mode [ 100.664400][ T5849] bridge_slave_0: entered promiscuous mode [ 100.670639][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.670805][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.671439][ T5841] bridge_slave_0: entered allmulticast mode [ 100.674821][ T5841] bridge_slave_0: entered promiscuous mode [ 100.690553][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.803492][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.890409][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.890569][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.890757][ T5849] bridge_slave_1: entered allmulticast mode [ 100.893003][ T5849] bridge_slave_1: entered promiscuous mode [ 100.894570][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.894684][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.894829][ T5841] bridge_slave_1: entered allmulticast mode [ 100.914386][ T5841] bridge_slave_1: entered promiscuous mode [ 101.026143][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.441068][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.545426][ T5843] Bluetooth: hci3: command tx timeout [ 101.545469][ T5843] Bluetooth: hci2: command tx timeout [ 101.545494][ T5843] Bluetooth: hci1: command tx timeout [ 101.545653][ T5857] Bluetooth: hci4: command tx timeout [ 101.592254][ T5838] team0: Port device team_slave_0 added [ 101.705544][ T5857] Bluetooth: hci0: command tx timeout [ 101.731190][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.750495][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.762066][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.769738][ T5838] team0: Port device team_slave_1 added [ 101.968676][ T5837] team0: Port device team_slave_0 added [ 102.053639][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.070506][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.159350][ T5837] team0: Port device team_slave_1 added [ 102.538572][ T5839] team0: Port device team_slave_0 added [ 102.718483][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.718498][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.718518][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.836546][ T5839] team0: Port device team_slave_1 added [ 102.839520][ T5849] team0: Port device team_slave_0 added [ 102.842322][ T5841] team0: Port device team_slave_0 added [ 102.843639][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.843653][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.843682][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.000938][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.000956][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.000976][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.097951][ T5849] team0: Port device team_slave_1 added [ 103.100263][ T5841] team0: Port device team_slave_1 added [ 103.124082][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.124101][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.124136][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.459277][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.459298][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.459325][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.625429][ T5855] Bluetooth: hci4: command tx timeout [ 103.625472][ T5855] Bluetooth: hci1: command tx timeout [ 103.625499][ T5855] Bluetooth: hci3: command tx timeout [ 103.625765][ T5857] Bluetooth: hci2: command tx timeout [ 103.663768][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.663783][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.663802][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.667294][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.667312][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.667340][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.670296][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.670312][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.670339][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.786126][ T5857] Bluetooth: hci0: command tx timeout [ 103.810043][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.810067][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.810100][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.815830][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.815864][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.815898][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.051438][ T5838] hsr_slave_0: entered promiscuous mode [ 104.053452][ T5838] hsr_slave_1: entered promiscuous mode [ 104.169770][ T5837] hsr_slave_0: entered promiscuous mode [ 104.171450][ T5837] hsr_slave_1: entered promiscuous mode [ 104.172731][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 104.172869][ T5837] Cannot create hsr debugfs directory [ 104.573913][ T5839] hsr_slave_0: entered promiscuous mode [ 104.576268][ T5839] hsr_slave_1: entered promiscuous mode [ 104.577545][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 104.577579][ T5839] Cannot create hsr debugfs directory [ 104.809434][ T5849] hsr_slave_0: entered promiscuous mode [ 104.810609][ T5849] hsr_slave_1: entered promiscuous mode [ 104.811554][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 104.811576][ T5849] Cannot create hsr debugfs directory [ 104.830915][ T5841] hsr_slave_0: entered promiscuous mode [ 104.832295][ T5841] hsr_slave_1: entered promiscuous mode [ 104.833250][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 104.833276][ T5841] Cannot create hsr debugfs directory [ 105.705872][ T5843] Bluetooth: hci3: command tx timeout [ 105.705913][ T5843] Bluetooth: hci1: command tx timeout [ 105.705939][ T5843] Bluetooth: hci4: command tx timeout [ 105.706006][ T5857] Bluetooth: hci2: command tx timeout [ 105.865440][ T5857] Bluetooth: hci0: command tx timeout [ 106.829263][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.860329][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.890716][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.953215][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.102641][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.147154][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.184984][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.233772][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.405783][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.443149][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.504678][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.551913][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.728840][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.776765][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.822434][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.886955][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.004151][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.079990][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.138734][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.172821][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.229356][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.313351][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.368414][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.369097][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.424067][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.440847][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.441501][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.570575][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.642340][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.642579][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.667895][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.705895][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.706053][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.812753][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.890480][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.890726][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.909989][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.007415][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.007541][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.116563][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.122631][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.180786][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.182186][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.272172][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.273442][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.365991][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.428148][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.428420][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.484396][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.486664][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.541171][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.897204][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.977226][ T5838] veth0_vlan: entered promiscuous mode [ 110.072038][ T5838] veth1_vlan: entered promiscuous mode [ 110.317570][ T5839] veth0_vlan: entered promiscuous mode [ 110.340727][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.449604][ T5838] veth0_macvtap: entered promiscuous mode [ 110.457363][ T5839] veth1_vlan: entered promiscuous mode [ 110.493191][ T5838] veth1_macvtap: entered promiscuous mode [ 110.513941][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.529725][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.611015][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.663990][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.740300][ T5839] veth0_macvtap: entered promiscuous mode [ 110.742426][ T166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.762182][ T166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.780717][ T166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.802208][ T166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.813767][ T5839] veth1_macvtap: entered promiscuous mode [ 111.040138][ T5849] veth0_vlan: entered promiscuous mode [ 111.042867][ T5841] veth0_vlan: entered promiscuous mode [ 111.114632][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.171294][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.175856][ T5849] veth1_vlan: entered promiscuous mode [ 111.209256][ T5841] veth1_vlan: entered promiscuous mode [ 111.284430][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.296450][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.296477][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.327534][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.337580][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.367781][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.490898][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.490920][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.577240][ T5837] veth0_vlan: entered promiscuous mode [ 111.717782][ T5849] veth0_macvtap: entered promiscuous mode [ 111.724987][ T5837] veth1_vlan: entered promiscuous mode [ 111.738669][ T5841] veth0_macvtap: entered promiscuous mode [ 111.808095][ T5849] veth1_macvtap: entered promiscuous mode [ 111.828494][ T5841] veth1_macvtap: entered promiscuous mode [ 111.849533][ T4187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.849555][ T4187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.008968][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.077589][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.087073][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.110161][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.110183][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.123339][ T5959] netlink: 'syz.2.3': attribute type 36 has an invalid length. [ 112.180786][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.205984][ T5837] veth0_macvtap: entered promiscuous mode [ 112.207770][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.211048][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.220764][ T166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.287700][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.298570][ T5837] veth1_macvtap: entered promiscuous mode [ 112.307116][ T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.364704][ T166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.374636][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.401288][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.405152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.453562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.553430][ T5968] overlayfs: missing 'lowerdir' [ 114.768939][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.198180][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.294749][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.294773][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.327495][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.345923][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.363998][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.444804][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.648139][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.648179][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.813022][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.813041][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.068123][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.068145][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.329307][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.329329][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.476881][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.476904][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.076356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.076489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.076632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.076714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.076848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.076929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.077061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.077141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.585357][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.620976][ T5983] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 119.083769][ T5983] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.106740][ T5995] pim6reg: entered allmulticast mode [ 119.141936][ T5995] bridge0: entered allmulticast mode [ 119.308482][ T5983] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.588358][ T5983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.588451][ T5983] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.948873][ T6005] syz.4.5 (6005): /proc/5998/oom_adj is deprecated, please use /proc/5998/oom_score_adj instead. [ 120.757219][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.997126][ T5983] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.166825][ T5983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.166914][ T5983] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.478531][ T5983] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.649945][ T5983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.650101][ T5983] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.705351][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.838844][ T5983] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.965553][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.296312][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.829010][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.829032][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.891659][ T5983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.891763][ T5983] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.085355][ T5983] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.435718][ T6020] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.485671][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 124.751836][ T6030] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.779977][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.802034][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 125.421791][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.235358][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.235404][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.235432][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.266817][ T5855] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.267426][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.206755][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.259611][ T6046] Zero length message leads to an empty skb [ 130.347122][ T5855] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.480434][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.851216][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.860321][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.058293][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.135512][ T6076] binder: 6073:6076 ioctl c0306201 200000000080 returned -14 [ 133.521140][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.934351][ T6083] tipc: Started in network mode [ 133.934385][ T6083] tipc: Node identity 5a2f679c13ee, cluster identity 4711 [ 133.990223][ T6083] tipc: Enabled bearer , priority 0 [ 133.990642][ T6087] syzkaller0: entered promiscuous mode [ 133.990670][ T6087] syzkaller0: entered allmulticast mode [ 134.207176][ T992] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 134.320643][ T6095] tipc: Resetting bearer [ 134.565375][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.599686][ T6082] tipc: Resetting bearer [ 134.664414][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.301006][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.575009][ T992] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.575036][ T992] usb 5-1: config 0 has no interface number 0 [ 135.576413][ T992] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.576447][ T992] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.576502][ T992] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.576527][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.580219][ T5930] tipc: Node number set to 1237411740 [ 135.767456][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.820289][ T992] usb 5-1: config 0 descriptor?? [ 135.842186][ T6089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.192202][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.137444][ T992] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 137.299129][ T6082] tipc: Disabling bearer [ 137.408882][ T992] usb 5-1: USB disconnect, device number 2 [ 137.688676][ T6109] Bluetooth: MGMT ver 1.23 [ 139.152987][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.153060][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.805332][ T6118] tipc: Started in network mode [ 139.805366][ T6118] tipc: Node identity 6ad71b6d884, cluster identity 4711 [ 139.805595][ T6118] tipc: Enabled bearer , priority 0 [ 139.845362][ T6116] syzkaller0: entered promiscuous mode [ 139.845392][ T6116] syzkaller0: entered allmulticast mode [ 141.072550][ T5915] tipc: Node number set to 3801553773 [ 141.363586][ T6124] tipc: Resetting bearer [ 142.655735][ T6113] tipc: Resetting bearer [ 143.890828][ T6113] tipc: Disabling bearer [ 145.054077][ T6146] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 145.054243][ T6146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.46'. [ 145.362261][ T6145] netlink: 88 bytes leftover after parsing attributes in process `syz.0.47'. [ 146.314834][ T6146] batman_adv: batadv0: Adding interface: virt_wifi0 [ 146.314853][ T6146] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.314887][ T6146] batman_adv: batadv0: Interface activated: virt_wifi0 [ 148.116980][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.178018][ T6161] input: syz1 as /devices/virtual/input/input5 [ 150.455254][ T6014] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.148463][ T6175] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 151.148484][ T6175] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.48'. [ 151.287535][ T6180] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 151.528542][ T5915] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 151.679890][ T6014] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.721826][ T5915] usb 5-1: config 0 has an invalid interface number: 70 but max is 0 [ 151.721856][ T5915] usb 5-1: config 0 has no interface number 0 [ 151.721892][ T5915] usb 5-1: config 0 interface 70 has no altsetting 0 [ 151.738293][ T5915] usb 5-1: New USB device found, idVendor=13d3, idProduct=3375, bcdDevice=f5.03 [ 151.738324][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.738345][ T5915] usb 5-1: Product: syz [ 151.738360][ T5915] usb 5-1: Manufacturer: syz [ 151.738374][ T5915] usb 5-1: SerialNumber: syz [ 151.828990][ T5915] usb 5-1: config 0 descriptor?? [ 151.841068][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.841102][ T6014] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.841143][ T6014] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 151.841166][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.919022][ T6180] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.970487][ T6014] usb 2-1: config 0 descriptor?? [ 152.087562][ T5915] usb 5-1: USB disconnect, device number 3 [ 152.522062][ T6188] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 152.553974][ T6014] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 152.783858][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.60'. [ 152.783952][ T6194] openvswitch: netlink: Missing key (keys=40, expected=100) [ 152.891962][ T6014] usb 2-1: USB disconnect, device number 3 [ 154.284606][ T6197] fido_id[6197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 156.848187][ T6218] syz.3.65 (6218): drop_caches: 2 [ 157.775720][ T44] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.095473][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 158.118227][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.118255][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.153937][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.153969][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.153989][ T44] usb 5-1: Product: syz [ 158.154003][ T44] usb 5-1: Manufacturer: syz [ 158.154018][ T44] usb 5-1: SerialNumber: syz [ 158.325288][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 158.535382][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 158.574970][ T5915] usb 4-1: config 0 has no interfaces? [ 158.732885][ T5915] usb 4-1: config 0 has no interfaces? [ 158.825358][ T5915] usb 4-1: config 0 has no interfaces? [ 158.852608][ T5915] usb 4-1: config 0 has no interfaces? [ 159.116658][ T44] usb 5-1: 0:2 : does not exist [ 159.428082][ T5915] usb 4-1: string descriptor 0 read error: -71 [ 159.428254][ T5915] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=db.c0 [ 159.428278][ T5915] usb 4-1: New USB device strings: Mfr=30, Product=35, SerialNumber=3 [ 159.538542][ T5915] r8152-cfgselector 4-1: Unknown version 0x0000 [ 159.538569][ T5915] r8152-cfgselector 4-1: config 0 descriptor?? [ 159.548852][ T5915] r8152-cfgselector 4-1: can't set config #0, error -71 [ 159.608346][ T44] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 159.679493][ T5915] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 159.891672][ T44] usb 5-1: USB disconnect, device number 4 [ 160.139392][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.167660][ T6232] sch_fq: defrate 2283 ignored. [ 160.499552][ T6235] syz.3.72 (6235) used greatest stack depth: 17816 bytes left [ 161.141856][ T992] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 161.319602][ T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.319628][ T992] usb 3-1: config 0 has no interface number 0 [ 161.319669][ T992] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 161.319689][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.364368][ T992] usb 3-1: config 0 descriptor?? [ 161.411015][ T992] usb 3-1: selecting invalid altsetting 1 [ 161.413632][ T992] dvb_ttusb_budget: ttusb_init_controller: error [ 161.413929][ T992] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 161.544449][ T992] DVB: Unable to find symbol cx22700_attach() [ 161.759133][ T992] DVB: Unable to find symbol tda10046_attach() [ 161.759149][ T992] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 161.782739][ T992] usb 3-1: USB disconnect, device number 2 [ 161.895222][ T5930] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 162.080440][ T5930] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 162.080469][ T5930] usb 4-1: config 0 has no interface number 0 [ 162.083802][ T5930] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 162.083830][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.083850][ T5930] usb 4-1: Product: syz [ 162.083865][ T5930] usb 4-1: Manufacturer: syz [ 162.083879][ T5930] usb 4-1: SerialNumber: syz [ 162.155638][ T5930] usb 4-1: config 0 descriptor?? [ 162.409278][ T5930] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 162.413918][ T5930] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 162.446035][ T5930] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 162.446109][ T5930] usb 4-1: media controller created [ 162.451351][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.776339][ T5930] DVB: Unable to find symbol dib7000p_attach() [ 162.776356][ T5930] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 162.776370][ T5930] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 162.779764][ T5930] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 162.779825][ T5930] usb 4-1: media controller created [ 162.784032][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.851897][ T5930] dib0700: the master dib7090 has to be initialized first [ 162.851914][ T5930] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 163.095220][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found [ 163.095244][ T5930] Registered IR keymap rc-empty [ 163.100155][ T5930] dvb-usb: could not initialize remote control. [ 163.100171][ T5930] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 163.159070][ T5930] usb 4-1: USB disconnect, device number 3 [ 164.338317][ T5930] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 164.359832][ T6274] omfs: Unknown parameter ']&õ[*\$' [ 166.061527][ T6295] mmap: syz.1.90 (6295) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.875269][ T5930] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.038990][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 170.057560][ T5930] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 170.057592][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 170.057613][ T5930] usb 4-1: Product: syz [ 170.057628][ T5930] usb 4-1: Manufacturer: syz [ 170.057643][ T5930] usb 4-1: SerialNumber: syz [ 170.109859][ T6326] usb usb1: usbfs: process 6326 (syz.1.101) did not claim interface 0 before use [ 170.143194][ T5930] usb 4-1: config 0 descriptor?? [ 170.325202][ T44] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 172.446671][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.446702][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.446736][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 172.446755][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.517980][ T44] usb 3-1: config 0 descriptor?? [ 172.522061][ T5930] usb 4-1: USB disconnect, device number 4 [ 173.999712][ T6344] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 174.134419][ T5915] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.332194][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 174.332334][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 174.359955][ T5915] usb 5-1: config index 0 descriptor too short (expected 65248, got 72) [ 174.395674][ T5915] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.395706][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.395728][ T5915] usb 5-1: Product: syz [ 174.395742][ T5915] usb 5-1: Manufacturer: syz [ 174.395756][ T5915] usb 5-1: SerialNumber: syz [ 174.414994][ T44] usb 3-1: USB disconnect, device number 3 [ 175.130775][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.187937][ T5915] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.308197][ T6359] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 176.225616][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.227593][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.230530][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.395298][ T10] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 176.503876][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.515220][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.564244][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 176.705993][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.739071][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.756747][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.801873][ T38] audit: type=1326 audit(1756094654.381:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.803492][ T38] audit: type=1326 audit(1756094654.381:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.803607][ T38] audit: type=1326 audit(1756094654.391:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.805025][ T38] audit: type=1326 audit(1756094654.391:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.805892][ T38] audit: type=1326 audit(1756094654.391:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.806178][ T38] audit: type=1326 audit(1756094654.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.806357][ T38] audit: type=1326 audit(1756094654.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.806405][ T38] audit: type=1326 audit(1756094654.391:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6364 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9346ebe9 code=0x7ffc0000 [ 176.807833][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.989317][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 177.314445][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.462147][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.507785][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.507815][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.545660][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.545694][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.545716][ T44] usb 3-1: Product: syz [ 177.545732][ T44] usb 3-1: Manufacturer: syz [ 177.545747][ T44] usb 3-1: SerialNumber: syz [ 177.557779][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.635596][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.118123][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.268042][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.590074][ T5915] usb 5-1: USB disconnect, device number 5 [ 178.804415][ T44] usb 3-1: can't set config #1, error -71 [ 178.825788][ T44] usb 3-1: USB disconnect, device number 4 [ 179.152832][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.081306][ T6376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.525219][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 180.685318][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 180.755555][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.864785][ T10] usb 2-1: config 3 has an invalid interface number: 148 but max is 0 [ 180.864860][ T10] usb 2-1: config 3 has no interface number 0 [ 180.867060][ T10] usb 2-1: config 3 interface 148 has no altsetting 0 [ 181.164561][ T10] usb 2-1: New USB device found, idVendor=11c9, idProduct=6ff6, bcdDevice=a8.f3 [ 181.164593][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.164614][ T10] usb 2-1: Product: syz [ 181.164628][ T10] usb 2-1: Manufacturer: syz [ 181.164643][ T10] usb 2-1: SerialNumber: syz [ 182.141202][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.119823][ T10] usb 2-1: USB disconnect, device number 4 [ 183.889206][ T6418] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.938936][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.637849][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.995119][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 184.997719][ T10] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 184.997857][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 185.000939][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 185.000967][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.000988][ T10] usb 4-1: Product: syz [ 185.001002][ T10] usb 4-1: Manufacturer: syz [ 185.001017][ T10] usb 4-1: SerialNumber: syz [ 185.011186][ T6414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.213882][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.238924][ T6436] tmpfs: Unsupported parameter 'huge' [ 185.395644][ T6434] [ 185.395657][ T6434] ====================================================== [ 185.395666][ T6434] WARNING: possible circular locking dependency detected [ 185.395687][ T6434] syzkaller #0 Not tainted [ 185.395698][ T6434] ------------------------------------------------------ [ 185.395707][ T6434] syz.0.131/6434 is trying to acquire lock: [ 185.395719][ T6434] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 185.395794][ T6434] [ 185.395794][ T6434] but task is already holding lock: [ 185.395801][ T6434] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 185.395852][ T6434] [ 185.395852][ T6434] which lock already depends on the new lock. [ 185.395852][ T6434] [ 185.395860][ T6434] [ 185.395860][ T6434] the existing dependency chain (in reverse order) is: [ 185.395867][ T6434] [ 185.395867][ T6434] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 185.395894][ T6434] lock_acquire+0x120/0x360 [ 185.395920][ T6434] rt_write_lock+0x6a/0x110 [ 185.395940][ T6434] smc_hash_sk+0x8f/0x2a0 [ 185.395958][ T6434] smc_sk_init+0x5a1/0x7f0 [ 185.395977][ T6434] __smc_create+0x10d/0x280 [ 185.396002][ T6434] __sock_create+0x4b3/0x9f0 [ 185.396023][ T6434] __sys_socket+0xd7/0x1b0 [ 185.396041][ T6434] __x64_sys_socket+0x7a/0x90 [ 185.396061][ T6434] do_syscall_64+0xfa/0x3b0 [ 185.396087][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.396107][ T6434] [ 185.396107][ T6434] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 185.396136][ T6434] validate_chain+0xb9b/0x2140 [ 185.396165][ T6434] __lock_acquire+0xab9/0xd20 [ 185.396189][ T6434] reacquire_held_locks+0x127/0x1d0 [ 185.396218][ T6434] lock_release+0x1b4/0x3e0 [ 185.396242][ T6434] __local_bh_enable_ip+0x10c/0x270 [ 185.396266][ T6434] sock_i_ino+0xa9/0xc0 [ 185.396292][ T6434] smc_diag_dump_proto+0xa4c/0x1fb0 [ 185.396314][ T6434] smc_diag_dump+0x27/0xa0 [ 185.396333][ T6434] netlink_dump+0x6e4/0xe90 [ 185.396353][ T6434] __netlink_dump_start+0x5cb/0x7e0 [ 185.396374][ T6434] smc_diag_handler_dump+0x178/0x210 [ 185.396394][ T6434] sock_diag_rcv_msg+0x4c9/0x600 [ 185.396415][ T6434] netlink_rcv_skb+0x205/0x470 [ 185.396435][ T6434] netlink_unicast+0x843/0xa10 [ 185.396454][ T6434] netlink_sendmsg+0x805/0xb30 [ 185.396476][ T6434] __sock_sendmsg+0x219/0x270 [ 185.396537][ T6434] ____sys_sendmsg+0x508/0x820 [ 185.396567][ T6434] ___sys_sendmsg+0x21f/0x2a0 [ 185.396594][ T6434] __x64_sys_sendmsg+0x1a1/0x260 [ 185.396623][ T6434] do_syscall_64+0xfa/0x3b0 [ 185.396649][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.396668][ T6434] [ 185.396668][ T6434] other info that might help us debug this: [ 185.396668][ T6434] [ 185.396675][ T6434] Possible unsafe locking scenario: [ 185.396675][ T6434] [ 185.396682][ T6434] CPU0 CPU1 [ 185.396688][ T6434] ---- ---- [ 185.396695][ T6434] rlock(smc_v4_hashinfo.lock); [ 185.396710][ T6434] lock((softirq_ctrl.lock)); [ 185.396727][ T6434] lock(smc_v4_hashinfo.lock); [ 185.396742][ T6434] lock((softirq_ctrl.lock)); [ 185.396756][ T6434] [ 185.396756][ T6434] *** DEADLOCK *** [ 185.396756][ T6434] [ 185.396762][ T6434] 3 locks held by syz.0.131/6434: [ 185.396774][ T6434] #0: ffff888028e70908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 185.396830][ T6434] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 185.396884][ T6434] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 185.396936][ T6434] [ 185.396936][ T6434] stack backtrace: [ 185.396968][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.396993][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.397014][ T6434] Call Trace: [ 185.397022][ T6434] [ 185.397031][ T6434] dump_stack_lvl+0x189/0x250 [ 185.397066][ T6434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.397097][ T6434] ? __pfx__printk+0x10/0x10 [ 185.397121][ T6434] ? print_lock_name+0xde/0x100 [ 185.397145][ T6434] print_circular_bug+0x2ee/0x310 [ 185.397168][ T6434] check_noncircular+0x134/0x160 [ 185.397206][ T6434] validate_chain+0xb9b/0x2140 [ 185.397240][ T6434] ? validate_chain+0x897/0x2140 [ 185.397283][ T6434] __lock_acquire+0xab9/0xd20 [ 185.397316][ T6434] reacquire_held_locks+0x127/0x1d0 [ 185.397349][ T6434] ? __local_bh_disable_ip+0x264/0x400 [ 185.397377][ T6434] lock_release+0x1b4/0x3e0 [ 185.397406][ T6434] ? __local_bh_enable_ip+0x100/0x270 [ 185.397435][ T6434] __local_bh_enable_ip+0x10c/0x270 [ 185.397462][ T6434] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 185.397500][ T6434] ? rt_read_unlock+0x65/0xa0 [ 185.397522][ T6434] ? sock_i_ino+0x24/0xc0 [ 185.397553][ T6434] sock_i_ino+0xa9/0xc0 [ 185.397585][ T6434] smc_diag_dump_proto+0xa4c/0x1fb0 [ 185.397622][ T6434] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 185.397648][ T6434] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 185.397687][ T6434] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 185.397723][ T6434] ? __phys_addr+0xd3/0x180 [ 185.397757][ T6434] ? __kasan_kmalloc_large+0x85/0xa0 [ 185.397787][ T6434] ? rcu_is_watching+0x15/0xb0 [ 185.397821][ T6434] ? rcu_is_watching+0x15/0xb0 [ 185.397853][ T6434] ? trace_kmalloc+0x1f/0xd0 [ 185.397878][ T6434] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 185.397911][ T6434] ? __build_skb_around+0x257/0x3e0 [ 185.397940][ T6434] smc_diag_dump+0x27/0xa0 [ 185.397962][ T6434] netlink_dump+0x6e4/0xe90 [ 185.397990][ T6434] ? __pfx_netlink_dump+0x10/0x10 [ 185.398012][ T6434] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 185.398040][ T6434] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.398079][ T6434] __netlink_dump_start+0x5cb/0x7e0 [ 185.398107][ T6434] smc_diag_handler_dump+0x178/0x210 [ 185.398132][ T6434] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 185.398156][ T6434] ? __pfx_smc_diag_dump+0x10/0x10 [ 185.398179][ T6434] ? sock_diag_lock_handler+0x19/0x290 [ 185.398202][ T6434] ? sock_diag_lock_handler+0x19/0x290 [ 185.398227][ T6434] sock_diag_rcv_msg+0x4c9/0x600 [ 185.398252][ T6434] netlink_rcv_skb+0x205/0x470 [ 185.398278][ T6434] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 185.398302][ T6434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.398333][ T6434] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.398362][ T6434] netlink_unicast+0x843/0xa10 [ 185.398387][ T6434] ? __pfx_netlink_unicast+0x10/0x10 [ 185.398411][ T6434] ? netlink_sendmsg+0x642/0xb30 [ 185.398436][ T6434] ? skb_put+0x11b/0x210 [ 185.398465][ T6434] netlink_sendmsg+0x805/0xb30 [ 185.398507][ T6434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.398537][ T6434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.398560][ T6434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.398589][ T6434] __sock_sendmsg+0x219/0x270 [ 185.398613][ T6434] ____sys_sendmsg+0x508/0x820 [ 185.398645][ T6434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.398680][ T6434] ? import_iovec+0x74/0xa0 [ 185.398706][ T6434] ___sys_sendmsg+0x21f/0x2a0 [ 185.398738][ T6434] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.398786][ T6434] ? __fget_files+0x2a/0x420 [ 185.398818][ T6434] ? __fget_files+0x3a6/0x420 [ 185.398855][ T6434] __x64_sys_sendmsg+0x1a1/0x260 [ 185.398888][ T6434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.398929][ T6434] ? do_syscall_64+0xbe/0x3b0 [ 185.398959][ T6434] do_syscall_64+0xfa/0x3b0 [ 185.398987][ T6434] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.399014][ T6434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.399036][ T6434] ? clear_bhb_loop+0x60/0xb0 [ 185.399060][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.399082][ T6434] RIP: 0033:0x7fc2673cebe9 [ 185.399108][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.399126][ T6434] RSP: 002b:00007fc265615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.399151][ T6434] RAX: ffffffffffffffda RBX: 00007fc2675f6090 RCX: 00007fc2673cebe9 [ 185.399168][ T6434] RDX: 0000000000008004 RSI: 0000200000000040 RDI: 0000000000000006 [ 185.399183][ T6434] RBP: 00007fc267451e19 R08: 0000000000000000 R09: 0000000000000000 [ 185.399197][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.399210][ T6434] R13: 00007fc2675f6128 R14: 00007fc2675f6090 R15: 00007ffe71cd5568 [ 185.399235][ T6434] [ 185.436109][ T10] usb 4-1: USB disconnect, device number 5 [ 185.505341][ T6439] nbd: must specify a size in bytes for the device [ 185.745239][ T6017] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.028618][ T6017] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 186.028676][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.029784][ T6017] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 186.029816][ T6017] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 186.029885][ T6017] usb 2-1: Manufacturer: syz [ 186.034411][ T6017] usb 2-1: config 0 descriptor?? [ 186.155324][ T6017] rc_core: IR keymap rc-hauppauge not found [ 186.155346][ T6017] Registered IR keymap rc-empty [ 186.156497][ T6017] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 186.168301][ T6017] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 186.247238][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 186.366288][ T6017] usb 2-1: USB disconnect, device number 5