last executing test programs: 5.217596356s ago: executing program 2 (id=114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x15) 4.913897176s ago: executing program 2 (id=115): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xd80, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0xffffffc0, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x1, {0x45, 0x80}, 0xcd, 0x3}}) 4.647273392s ago: executing program 3 (id=116): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4.622189515s ago: executing program 2 (id=117): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2000e) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x4, 0x2, &(0x7f0000000340)={0x0, "90b541a5e64f61010000000310c2cc0000000000000000e7cb839300"}}) 4.463118411s ago: executing program 3 (id=119): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x890, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000800)={'\x00', 0x71a, 0x3, 0x3}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') readv(r4, &(0x7f0000000200), 0x10000000000000d2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) accept4$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r7], 0x0, 0x0, 0x0, 0x0, 0x300}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000600)={r7}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x264, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}]) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f0000000180)={&(0x7f0000000240)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/175, 0xaf}], 0x1, &(0x7f0000000500)=""/148, 0x94}, 0x1) 4.458373101s ago: executing program 2 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xfffffffffffff730, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.375915729s ago: executing program 1 (id=121): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000de2a0000276461ab3b00007b8af8ff00000000", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) membarrier(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x808c}, 0x10000040) syz_emit_ethernet(0x6a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000003c0)={"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"}) 3.074523757s ago: executing program 2 (id=123): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x4000, 0x6, 0x4d, 0xffffffff, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ['\x00', "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0x8, 0x0, 0xf, 0x80000001, 0xfe1c, 0x6, "72a0a977db089b60fd94c5bd97abc150", 0x70, 0x3, 0xf5, 0x7, 0x8, 0x0, 0x1}) 2.653682669s ago: executing program 1 (id=124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x41}, 0x10) 2.599323414s ago: executing program 3 (id=125): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2.43475588s ago: executing program 0 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x122, 0x0, 0x6}]}) 2.413342012s ago: executing program 3 (id=127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000640)=""/215, 0x3a, 0xd7, 0x1, 0x9, 0x10000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000080)) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x1000003, 0x11012, r4, 0x68255000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.363274917s ago: executing program 1 (id=128): setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) userfaultfd(0x80001) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 2.276387876s ago: executing program 2 (id=129): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x9, 0x4}, {0x9, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x0, 0x8, 0x4, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0xa, @any, 0x20}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) io_destroy(r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000004, 0x5d031, 0xffffffffffffffff, 0x0) 2.141566669s ago: executing program 1 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}}, 0x0) 2.075151236s ago: executing program 0 (id=131): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xtea)\x00'}, 0x51) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20000) 1.999569233s ago: executing program 1 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0xb, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf31d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000003900), 0x1a9000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x4008014) dup2(r5, r5) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008000d6005000000e4031680a40001800c0007"], 0x40c}}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x8003fde, 0xc00, 0x10, 0x147}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r8 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x7, 0x8, 0x6, 0x0, 0xfffffff8]}) 1.21801622s ago: executing program 3 (id=133): setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x7, 0x9, 0x0, 0xd, 0x2, 0x0, 0x6, 0x8}, 0x20) socket$pppoe(0x18, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYBLOB="eeeaffff616d250b50c83b2a6a3400", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327c0d80ba8284629876a30092ed1a239694a89b84b0e057116bce4937d0f2b278462dba4d09bef9ee19a611b9da53fc371d514278562c24ebdcef5464924a301983232d7b3a5095fae5db44de0b2cb8c", 0x9f}], 0x1) r3 = dup(r2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0cc5604, &(0x7f00000005c0)={0x1, @pix={0x0, 0x3, 0x30313953, 0x4, 0x7ff, 0x53ed, 0x3, 0x0, 0x0, 0x7, 0x0, 0x8}}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 1.055262996s ago: executing program 0 (id=134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0300966050ec", 0x6}]) 878.116874ms ago: executing program 0 (id=135): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) 374.162913ms ago: executing program 0 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0x3, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 143.238426ms ago: executing program 0 (id=137): fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, 0x0, 0xc000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) sendmsg$unix(r0, 0x0, 0x4000880) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={[0x0, &(0x7f0000000480)=']:+)\x00', 0x0]}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2a020480) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) 131.948897ms ago: executing program 1 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x4001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 0s ago: executing program 3 (id=139): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000280)=""/131, 0x83}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 81.610103][ T5774] cgroup: Unknown subsys name 'net' [ 81.795061][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.498997][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.691532][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.694613][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.710288][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.710727][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.725817][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.728169][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.743789][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.751811][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.752978][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.761110][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.775895][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.784260][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.785122][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.802273][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.810783][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.818918][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.827722][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.836044][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.836736][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.843599][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.852955][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.858389][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.867496][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.879869][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.446122][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 86.572171][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.584206][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.608177][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.616192][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.623557][ T5794] bridge_slave_0: entered allmulticast mode [ 86.631458][ T5794] bridge_slave_0: entered promiscuous mode [ 86.673770][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.685924][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.693164][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.700560][ T5794] bridge_slave_1: entered allmulticast mode [ 86.707868][ T5794] bridge_slave_1: entered promiscuous mode [ 86.793066][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.859382][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.881767][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.889052][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.897519][ T5785] bridge_slave_0: entered allmulticast mode [ 86.905126][ T5785] bridge_slave_0: entered promiscuous mode [ 86.953955][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.961500][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.968911][ T5785] bridge_slave_1: entered allmulticast mode [ 86.977465][ T5785] bridge_slave_1: entered promiscuous mode [ 87.010211][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.017799][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.025118][ T5788] bridge_slave_0: entered allmulticast mode [ 87.032189][ T5788] bridge_slave_0: entered promiscuous mode [ 87.068919][ T5794] team0: Port device team_slave_0 added [ 87.079124][ T5794] team0: Port device team_slave_1 added [ 87.085471][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.092702][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.100543][ T5788] bridge_slave_1: entered allmulticast mode [ 87.107745][ T5788] bridge_slave_1: entered promiscuous mode [ 87.185835][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.202340][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.210114][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.219119][ T5790] bridge_slave_0: entered allmulticast mode [ 87.227286][ T5790] bridge_slave_0: entered promiscuous mode [ 87.236642][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.243833][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.252149][ T5790] bridge_slave_1: entered allmulticast mode [ 87.260316][ T5790] bridge_slave_1: entered promiscuous mode [ 87.270066][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.283608][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.309598][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.316890][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.344029][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.358886][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.427700][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.436191][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.469552][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.560289][ T5785] team0: Port device team_slave_0 added [ 87.573041][ T5785] team0: Port device team_slave_1 added [ 87.622419][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.682385][ T5788] team0: Port device team_slave_0 added [ 87.719968][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.735830][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.742868][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.769887][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.783393][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.790804][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.817145][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.831062][ T5788] team0: Port device team_slave_1 added [ 87.898785][ T5800] Bluetooth: hci3: command tx timeout [ 87.898803][ T5798] Bluetooth: hci1: command tx timeout [ 87.899937][ T5794] hsr_slave_0: entered promiscuous mode [ 87.916547][ T5794] hsr_slave_1: entered promiscuous mode [ 87.955219][ T5790] team0: Port device team_slave_0 added [ 87.974936][ T5800] Bluetooth: hci0: command tx timeout [ 87.974958][ T5798] Bluetooth: hci2: command tx timeout [ 87.980777][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.994007][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.020294][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.033007][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.040135][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.066678][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.082095][ T5785] hsr_slave_0: entered promiscuous mode [ 88.089141][ T5785] hsr_slave_1: entered promiscuous mode [ 88.096323][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.104157][ T5785] Cannot create hsr debugfs directory [ 88.114466][ T5790] team0: Port device team_slave_1 added [ 88.247277][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.254889][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.281307][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.320273][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.327623][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.354361][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.394575][ T5788] hsr_slave_0: entered promiscuous mode [ 88.401671][ T5788] hsr_slave_1: entered promiscuous mode [ 88.408331][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.416496][ T5788] Cannot create hsr debugfs directory [ 88.502705][ T5790] hsr_slave_0: entered promiscuous mode [ 88.509431][ T5790] hsr_slave_1: entered promiscuous mode [ 88.517964][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.525671][ T5790] Cannot create hsr debugfs directory [ 88.801318][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.849217][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.862176][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.892125][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.951277][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.961994][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.976452][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.989487][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.081461][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.105495][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.118941][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.130296][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.203180][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.230999][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.242384][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.272059][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.401064][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.477287][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.503061][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.513146][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.520642][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.536571][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.548696][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.555932][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.612578][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.649367][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.656601][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.680738][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.691720][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.739816][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.758323][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.765576][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.777165][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.784423][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.827125][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.841421][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.848688][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.921581][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.928862][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.984447][ T5800] Bluetooth: hci1: command tx timeout [ 89.984717][ T5798] Bluetooth: hci3: command tx timeout [ 89.998700][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.005942][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.054609][ T5798] Bluetooth: hci2: command tx timeout [ 90.056810][ T5800] Bluetooth: hci0: command tx timeout [ 90.364692][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.488362][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.557351][ T5785] veth0_vlan: entered promiscuous mode [ 90.602771][ T5785] veth1_vlan: entered promiscuous mode [ 90.666088][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.687242][ T5794] veth0_vlan: entered promiscuous mode [ 90.713668][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.737582][ T5785] veth0_macvtap: entered promiscuous mode [ 90.755590][ T5794] veth1_vlan: entered promiscuous mode [ 90.777661][ T5785] veth1_macvtap: entered promiscuous mode [ 90.833494][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.850203][ T5790] veth0_vlan: entered promiscuous mode [ 90.865940][ T5790] veth1_vlan: entered promiscuous mode [ 90.896913][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.930390][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.940561][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.950076][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.958930][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.010086][ T5788] veth0_vlan: entered promiscuous mode [ 91.018601][ T5794] veth0_macvtap: entered promiscuous mode [ 91.033108][ T5794] veth1_macvtap: entered promiscuous mode [ 91.058645][ T5788] veth1_vlan: entered promiscuous mode [ 91.099667][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.113025][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.126162][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.142955][ T5790] veth0_macvtap: entered promiscuous mode [ 91.163824][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.174770][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.189474][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.222565][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.231598][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.240806][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250224][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.263217][ T5790] veth1_macvtap: entered promiscuous mode [ 91.305181][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.316222][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.331593][ T5788] veth0_macvtap: entered promiscuous mode [ 91.348168][ T5788] veth1_macvtap: entered promiscuous mode [ 91.391590][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.402665][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413812][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.427533][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.439294][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.454773][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.462833][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.472691][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.489143][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.501202][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.520027][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.531438][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.543408][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.552862][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.562936][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.571974][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.620524][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.631298][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.641659][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.653861][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.664974][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.675784][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.688530][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.729451][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.752600][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.762728][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.773446][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.783704][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.794463][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.806611][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.896646][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.913526][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925870][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.938600][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.953239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.962839][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.037220][ T5879] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.048136][ T5879] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.057244][ T5800] Bluetooth: hci3: command tx timeout [ 92.057889][ T5798] Bluetooth: hci1: command tx timeout [ 92.071307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.083040][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.087650][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.100394][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.117239][ T5878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.135409][ T5798] Bluetooth: hci2: command tx timeout [ 92.135769][ T5800] Bluetooth: hci0: command tx timeout [ 92.177535][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.187224][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.250824][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.299958][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.314068][ T8] cfg80211: failed to load regulatory.db [ 92.392320][ T5882] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 92.413470][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.429241][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.473521][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.534217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.574759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.594898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.607970][ T5889] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.786130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.894655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.903046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.950271][ T5896] Zero length message leads to an empty skb [ 93.046144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.251003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.558627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.604763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.298648][ T5798] Bluetooth: hci3: command tx timeout [ 94.304144][ T5798] Bluetooth: hci2: command tx timeout [ 94.310436][ T5792] Bluetooth: hci0: command tx timeout [ 94.316075][ T5800] Bluetooth: hci1: command tx timeout [ 95.624493][ T27] audit: type=1326 audit(1760863181.519:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 95.719717][ T5913] syz.3.4[5913]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.930213][ T27] audit: type=1326 audit(1760863181.519:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.573634][ T27] audit: type=1326 audit(1760863181.549:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.671527][ T27] audit: type=1326 audit(1760863181.549:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.741393][ T27] audit: type=1326 audit(1760863181.549:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.768788][ T27] audit: type=1326 audit(1760863181.549:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.808849][ T27] audit: type=1326 audit(1760863181.549:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.861226][ T27] audit: type=1326 audit(1760863181.549:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.888720][ T27] audit: type=1326 audit(1760863181.549:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.912531][ T27] audit: type=1326 audit(1760863181.549:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 96.956467][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.160578][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.196521][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.206507][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.220727][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.230489][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.259694][ T23] usb 3-1: config 0 descriptor?? [ 97.696915][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 97.742300][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 98.080245][ T8] kernel read not supported for file /dsp (pid: 8 comm: kworker/0:0) [ 98.342104][ T5942] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 100.423690][ T5957] loop3: detected capacity change from 0 to 512 [ 100.452499][ T5957] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.467728][ T23] usb 3-1: USB disconnect, device number 2 [ 100.526891][ T5957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.588917][ T5957] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.631585][ T5957] EXT4-fs (loop3): 1 truncate cleaned up [ 100.640379][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.713797][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 100.713812][ T27] audit: type=1326 audit(1760863186.599:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.274997][ T27] audit: type=1326 audit(1760863186.609:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.356801][ T27] audit: type=1326 audit(1760863186.609:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.392102][ T27] audit: type=1326 audit(1760863186.609:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.552271][ T27] audit: type=1326 audit(1760863186.609:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.578781][ T27] audit: type=1326 audit(1760863186.609:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.677758][ T27] audit: type=1326 audit(1760863186.609:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.705814][ T27] audit: type=1326 audit(1760863186.609:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.732601][ T27] audit: type=1326 audit(1760863186.649:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.774434][ T23] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 101.807726][ T27] audit: type=1326 audit(1760863186.649:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756c38efc9 code=0x7ffc0000 [ 101.953025][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.997451][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.054217][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.087469][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.138376][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.211765][ T23] usb 1-1: config 0 descriptor?? [ 102.522770][ T5983] loop1: detected capacity change from 0 to 4096 [ 102.553658][ T5983] ======================================================= [ 102.553658][ T5983] WARNING: The mand mount option has been deprecated and [ 102.553658][ T5983] and is ignored by this kernel. Remove the mand [ 102.553658][ T5983] option from the mount to silence this warning. [ 102.553658][ T5983] ======================================================= [ 102.660227][ T5832] usb 1-1: USB disconnect, device number 2 [ 102.722572][ T5983] ntfs3: loop1: failed to replay log file. Can't mount rw! [ 103.058625][ T5981] loop1: detected capacity change from 0 to 128 [ 103.120084][ T5981] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 103.236491][ T5981] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.271433][ T5981] ext2 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.218309][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.220736][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.255257][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 104.643230][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.680438][ T6004] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 104.734713][ T6004] batman_adv: batadv0: Adding interface: team0 [ 104.748492][ T6004] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.822530][ T6004] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 104.986752][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 105.466773][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.476874][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.487192][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.505369][ T6009] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 105.514007][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.518139][ T6009] netlink: 2 bytes leftover after parsing attributes in process `syz.2.29'. [ 105.544632][ T6009] team0: entered promiscuous mode [ 105.550200][ T6009] team_slave_0: entered promiscuous mode [ 105.562543][ T6009] team_slave_1: entered promiscuous mode [ 105.586352][ T6009] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.597193][ T6009] batman_adv: batadv0: Interface activated: team0 [ 105.604661][ T6009] batman_adv: batadv0: Interface deactivated: team0 [ 105.611477][ T6009] batman_adv: batadv0: Removing interface: team0 [ 105.634810][ T6009] bridge0: port 3(team0) entered blocking state [ 105.642729][ T6009] bridge0: port 3(team0) entered disabled state [ 105.650474][ T6009] team0: entered allmulticast mode [ 105.656011][ T6009] team_slave_0: entered allmulticast mode [ 105.661944][ T6009] team_slave_1: entered allmulticast mode [ 105.685755][ T6009] bridge0: port 3(team0) entered blocking state [ 105.692463][ T6009] bridge0: port 3(team0) entered forwarding state [ 105.703068][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.843207][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.104550][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 106.127305][ T8] usbtmc 1-1:16.0: can't read capabilities [ 106.340167][ T5903] usb 1-1: USB disconnect, device number 3 [ 109.198723][ T5903] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.624375][ T6027] Set syz1 is full, maxelem 65536 reached [ 109.756350][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.790512][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.406903][ T5903] usb 3-1: string descriptor 0 read error: -71 [ 111.442967][ T6040] overlayfs: workdir and upperdir must be separate subtrees [ 111.527658][ T5903] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.537318][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.564779][ T5903] usb 3-1: can't set config #1, error -71 [ 111.621226][ T5903] usb 3-1: USB disconnect, device number 3 [ 115.744513][ T6080] netlink: 64 bytes leftover after parsing attributes in process `syz.2.51'. [ 116.184234][ T28] IPVS: starting estimator thread 0... [ 116.317039][ T6089] IPVS: using max 18 ests per chain, 43200 per kthread [ 116.814414][ T5832] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.820236][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.017001][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.124048][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.259377][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.418446][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.457785][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.485591][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.513476][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.533751][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.558425][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.576534][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.589118][ T5832] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.594270][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.614527][ T5832] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.622585][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.624754][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.651441][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.661228][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.670465][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.674346][ T5832] usb 4-1: config 1 has no interface number 0 [ 117.688583][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.694501][ T5832] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.713594][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.725967][ T28] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 117.745324][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.757584][ T28] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 117.786908][ T5832] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 118.086503][ T5832] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 118.366561][ T5832] snd_usb_pod 4-1:1.1: invalid control EP [ 118.470395][ T5832] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 118.495354][ T5832] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 118.508890][ T6104] fido_id[6104]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.571602][ T5832] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 118.591796][ T5832] usb 4-1: USB disconnect, device number 2 [ 118.962357][ T6111] loop2: detected capacity change from 0 to 32768 [ 119.018512][ T6111] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.053201][ T6111] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 119.068561][ T6111] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30 [ 119.103049][ T6111] XFS (loop2): Ending clean mount [ 121.493884][ T6139] process 'syz.2.58' launched './file1' with NULL argv: empty string added [ 121.515673][ T6124] loop0: detected capacity change from 0 to 4096 [ 121.789352][ T6137] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1803 dinode [ 121.801475][ T6137] XFS (loop2): Unmount and run xfs_repair [ 121.810076][ T6137] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 121.818396][ T6137] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 121.829902][ T6137] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.839411][ T6137] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 121.849844][ T6137] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 121.872073][ T6137] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.903991][ T6124] ntfs3: loop0: Failed to read $AttrDef (-4). [ 121.995398][ T6137] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 122.075505][ T6137] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 122.124647][ T6137] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 122.485417][ T6145] warning: `syz.3.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.706505][ T5794] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.146192][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 123.678338][ T6163] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 123.685410][ T6163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.587274][ T6163] vhci_hcd vhci_hcd.0: Device attached [ 124.826490][ T6165] vhci_hcd: connection closed [ 124.828739][ T1328] vhci_hcd: stop threads [ 124.834666][ T5914] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 124.859359][ T1328] vhci_hcd: release socket [ 124.887829][ T1328] vhci_hcd: disconnect device [ 126.544311][ C1] sched: RT throttling activated [ 127.939177][ T6189] 9pnet_virtio: no channels available for device syz [ 128.924484][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.129420][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.158823][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.177528][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.204375][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.227456][ T6206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.275263][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 129.705330][ T23] usb 2-1: USB disconnect, device number 2 [ 129.974789][ T5914] vhci_hcd: vhci_device speed not set [ 130.534617][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 130.541882][ T5800] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 130.975268][ T6237] 9pnet_virtio: no channels available for device syz [ 133.259719][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.269311][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.439847][ T6257] block nbd1: NBD_DISCONNECT [ 133.456803][ T6257] block nbd1: Disconnected due to user request. [ 133.463453][ T6257] block nbd1: shutting down sockets [ 133.535807][ T6258] 9pnet_virtio: no channels available for device syz [ 138.355440][ T6353] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 139.832406][ T6368] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 139.917787][ T6368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.968824][ T6368] team0: Port device bond0 added [ 140.459141][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 140.459160][ T27] audit: type=1326 audit(1760863226.359:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.0.113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536718efc9 code=0x0 [ 144.285157][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 144.486099][ T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 144.504784][ T6431] comedi comedi3: board detection failed [ 144.561965][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 144.601960][ T8] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 144.767262][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.778101][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.788267][ T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.802691][ T8] usb 3-1: Product: syz [ 144.807696][ T8] usb 3-1: Manufacturer: syz [ 144.813536][ T8] usb 3-1: SerialNumber: syz [ 144.836490][ T8] usb 3-1: config 0 descriptor?? [ 144.853319][ T8] ldusb 3-1:0.0: Interrupt in endpoint not found [ 145.578186][ C0] ------------[ cut here ]------------ [ 145.584173][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 145.595349][ C0] WARNING: CPU: 0 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 145.605422][ C0] Modules linked in: [ 145.609476][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 145.617064][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.627284][ C0] Workqueue: bat_events batadv_nc_worker [ 145.633027][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 145.639459][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 92 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 1b 9b 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 145.659252][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 145.665541][ C0] RAX: 6769b371b0b76c00 RBX: 000000000000000c RCX: ffff88801b243c00 [ 145.673630][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 145.681806][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 145.690009][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 145.698233][ C0] R13: dffffc0000000000 R14: ffff88801bf1b358 R15: ffff888061ef0668 [ 145.706397][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 145.715576][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.722308][ C0] CR2: 000020000001f030 CR3: 00000000632e4000 CR4: 00000000003506f0 [ 145.730571][ C0] Call Trace: [ 145.733940][ C0] [ 145.736997][ C0] rate_control_send_low+0x194/0x790 [ 145.742416][ C0] rate_control_get_rate+0x20b/0x5c0 [ 145.748057][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 145.754008][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 145.760152][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 145.765689][ C0] ? _local_bh_enable+0xa0/0xa0 [ 145.770640][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 145.776458][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 145.781665][ C0] ? read_lock_is_recursive+0x20/0x20 [ 145.787208][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 145.792834][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 145.798583][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 145.804245][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 145.810004][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 145.817049][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 145.822720][ C0] __iterate_interfaces+0x243/0x500 [ 145.828143][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 145.834555][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 145.841796][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 145.848136][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 145.855227][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 145.860486][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 145.865755][ C0] ? hw_scan_work+0xf40/0xf40 [ 145.870461][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 145.875629][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 145.881732][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 145.886898][ C0] handle_softirqs+0x280/0x820 [ 145.891684][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 145.896499][ C0] ? do_softirq+0x180/0x180 [ 145.901061][ C0] __irq_exit_rcu+0xc7/0x190 [ 145.905704][ C0] ? irq_exit_rcu+0x20/0x20 [ 145.910258][ C0] irq_exit_rcu+0x9/0x20 [ 145.914555][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 145.920219][ C0] [ 145.923159][ C0] [ 145.926135][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.932129][ C0] RIP: 0010:lock_release+0x57c/0x8b0 [ 145.937461][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 145.957121][ C0] RSP: 0018:ffffc90000107a40 EFLAGS: 00000206 [ 145.963198][ C0] RAX: 0000000000000001 RBX: a65eda0355dbdd01 RCX: 6769b371b0b76c00 [ 145.971217][ C0] RDX: 0000000000000002 RSI: ffffffff8aaace60 RDI: ffffffff8afc64c0 [ 145.979239][ C0] RBP: ffffc90000107b50 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 145.987259][ C0] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffff88801b244730 [ 145.995271][ C0] R13: dffffc0000000000 R14: ffff88801b2446d0 R15: 1ffff92000020f54 [ 146.003273][ C0] ? batadv_nc_worker+0xd2/0x610 [ 146.008267][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 146.013305][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 146.019332][ C0] ? batadv_nc_worker+0xd2/0x610 [ 146.024328][ C0] ? batadv_nc_worker+0xd2/0x610 [ 146.029305][ C0] batadv_nc_worker+0x291/0x610 [ 146.034175][ C0] ? process_scheduled_works+0x957/0x15b0 [ 146.039943][ C0] process_scheduled_works+0xa45/0x15b0 [ 146.045633][ C0] ? assign_work+0x400/0x400 [ 146.050243][ C0] ? assign_work+0x39e/0x400 [ 146.054887][ C0] worker_thread+0xa55/0xfc0 [ 146.059508][ C0] kthread+0x2fa/0x390 [ 146.063673][ C0] ? pr_cont_work+0x560/0x560 [ 146.068410][ C0] ? kthread_blkcg+0xd0/0xd0 [ 146.073035][ C0] ret_from_fork+0x48/0x80 [ 146.077565][ C0] ? kthread_blkcg+0xd0/0xd0 [ 146.082167][ C0] ret_from_fork_asm+0x11/0x20 [ 146.087096][ C0] [ 146.090132][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.097417][ C0] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 146.104803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.114872][ C0] Workqueue: bat_events batadv_nc_worker [ 146.120545][ C0] Call Trace: [ 146.123832][ C0] [ 146.126711][ C0] dump_stack_lvl+0x16c/0x230 [ 146.131421][ C0] ? show_regs_print_info+0x20/0x20 [ 146.136626][ C0] ? load_image+0x3b0/0x3b0 [ 146.141147][ C0] panic+0x2c0/0x710 [ 146.145053][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 146.149576][ C0] ? ret_from_fork_asm+0x11/0x20 [ 146.154528][ C0] __warn+0x2e0/0x470 [ 146.158526][ C0] ? __rate_control_send_low+0x635/0x880 [ 146.164169][ C0] ? __rate_control_send_low+0x635/0x880 [ 146.169812][ C0] report_bug+0x2be/0x4f0 [ 146.174157][ C0] ? __rate_control_send_low+0x635/0x880 [ 146.179804][ C0] ? __rate_control_send_low+0x635/0x880 [ 146.185541][ C0] ? __rate_control_send_low+0x637/0x880 [ 146.191195][ C0] handle_bug+0xcf/0x120 [ 146.195453][ C0] exc_invalid_op+0x1a/0x50 [ 146.199966][ C0] asm_exc_invalid_op+0x1a/0x20 [ 146.204819][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 146.211076][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 92 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 1b 9b 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 146.230782][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 146.236968][ C0] RAX: 6769b371b0b76c00 RBX: 000000000000000c RCX: ffff88801b243c00 [ 146.244969][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 146.252984][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 146.260966][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 146.268945][ C0] R13: dffffc0000000000 R14: ffff88801bf1b358 R15: ffff888061ef0668 [ 146.276953][ C0] rate_control_send_low+0x194/0x790 [ 146.282283][ C0] rate_control_get_rate+0x20b/0x5c0 [ 146.287721][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 146.293577][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 146.299589][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 146.305016][ C0] ? _local_bh_enable+0xa0/0xa0 [ 146.309884][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 146.315551][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 146.320682][ C0] ? read_lock_is_recursive+0x20/0x20 [ 146.326068][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 146.331623][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 146.337180][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 146.342738][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 146.348209][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 146.354987][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 146.360548][ C0] __iterate_interfaces+0x243/0x500 [ 146.365758][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 146.372011][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 146.379222][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 146.385473][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 146.392506][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 146.397722][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 146.402962][ C0] ? hw_scan_work+0xf40/0xf40 [ 146.407700][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 146.412817][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 146.418900][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 146.424032][ C0] handle_softirqs+0x280/0x820 [ 146.428819][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 146.433593][ C0] ? do_softirq+0x180/0x180 [ 146.438120][ C0] __irq_exit_rcu+0xc7/0x190 [ 146.442725][ C0] ? irq_exit_rcu+0x20/0x20 [ 146.447243][ C0] irq_exit_rcu+0x9/0x20 [ 146.451494][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 146.457141][ C0] [ 146.460079][ C0] [ 146.463014][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 146.469007][ C0] RIP: 0010:lock_release+0x57c/0x8b0 [ 146.474320][ C0] Code: 00 00 00 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 75 75 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 66 43 c7 44 2f 09 00 00 43 c6 44 2f 0b 00 [ 146.493954][ C0] RSP: 0018:ffffc90000107a40 EFLAGS: 00000206 [ 146.500039][ C0] RAX: 0000000000000001 RBX: a65eda0355dbdd01 RCX: 6769b371b0b76c00 [ 146.508018][ C0] RDX: 0000000000000002 RSI: ffffffff8aaace60 RDI: ffffffff8afc64c0 [ 146.516026][ C0] RBP: ffffc90000107b50 R08: ffffffff8e4a856f R09: 1ffffffff1c950ad [ 146.524024][ C0] R10: dffffc0000000000 R11: fffffbfff1c950ae R12: ffff88801b244730 [ 146.532014][ C0] R13: dffffc0000000000 R14: ffff88801b2446d0 R15: 1ffff92000020f54 [ 146.540017][ C0] ? batadv_nc_worker+0xd2/0x610 [ 146.544979][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 146.550019][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 146.556013][ C0] ? batadv_nc_worker+0xd2/0x610 [ 146.560963][ C0] ? batadv_nc_worker+0xd2/0x610 [ 146.565911][ C0] batadv_nc_worker+0x291/0x610 [ 146.570780][ C0] ? process_scheduled_works+0x957/0x15b0 [ 146.576511][ C0] process_scheduled_works+0xa45/0x15b0 [ 146.582093][ C0] ? assign_work+0x400/0x400 [ 146.586697][ C0] ? assign_work+0x39e/0x400 [ 146.591302][ C0] worker_thread+0xa55/0xfc0 [ 146.595924][ C0] kthread+0x2fa/0x390 [ 146.600000][ C0] ? pr_cont_work+0x560/0x560 [ 146.604692][ C0] ? kthread_blkcg+0xd0/0xd0 [ 146.609291][ C0] ret_from_fork+0x48/0x80 [ 146.613721][ C0] ? kthread_blkcg+0xd0/0xd0 [ 146.618318][ C0] ret_from_fork_asm+0x11/0x20 [ 146.623101][ C0] [ 146.626656][ C0] Kernel Offset: disabled [ 146.631068][ C0] Rebooting in 86400 seconds..