last executing test programs: 3m50.901151826s ago: executing program 1 (id=187): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/110, 0x6e}], 0x2, 0x200, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rpcgss_unwrap_failed\x00', r0, 0x0, 0x9}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) 3m47.594198611s ago: executing program 1 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x800003fffffffffd}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m46.625301823s ago: executing program 1 (id=201): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000f00000073013700000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m46.401301716s ago: executing program 1 (id=204): socket$kcm(0x2, 0xa, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66450f388010b92c020000b85a00c0feba000000000f3066b876008ed8c7442400623a0000c744240200000000c7442406000000000f011c240f20d835200000000f22d8c4e27d3328c4c2fd235bf7b9930a0000b8feffffffba000000000f30b948030000b886af8648ba3128fb2c0f30c421cd147c8c5e", 0x78}], 0x1, 0x30, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0xb, 0x9, 0x0, 0xffffffc0, 0xfd, 0x40, 0x1, 0xc0, 0x1, 0x3, 0x4a, 0x0, 0x2, 0x8, 0x0, 0x4, 0x89, 0x1, '\x00', 0x7, 0x240000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m45.380793578s ago: executing program 1 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 3m44.287030365s ago: executing program 1 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101040, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0x4004510f, 0x0) 3m28.826162411s ago: executing program 32 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101040, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0x4004510f, 0x0) 2m42.452760605s ago: executing program 0 (id=441): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xd98}, 0x0, 0x0) 2m40.278577642s ago: executing program 0 (id=445): socket(0x200000100000011, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000a0000000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 2m37.38159574s ago: executing program 0 (id=451): io_uring_setup(0x4d63, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x0, 0x2d6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m36.372894796s ago: executing program 0 (id=457): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2m35.69821066s ago: executing program 0 (id=461): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m34.605158773s ago: executing program 0 (id=463): creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) 2m19.080296625s ago: executing program 33 (id=463): creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) 15.835344696s ago: executing program 4 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000101010100000000000000000a000000300001802c000180140003000000000000000000000000000000000104000000ff0100000000000000000000000000010c0019800800010002"], 0x50}}, 0x4008084) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 15.571999189s ago: executing program 4 (id=917): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4f, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xd1, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0xcd}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x0, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0xe, 0x9}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x87, 0x7, 0x7, 0xff, 0x5}, 0x17, &(0x7f00000004c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x39, 0xd, 0x8001, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xd, 0x5, 0xd0a}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000a40)={0x0, 0x22, 0x15, {[@global=@item_4={0x3, 0x1, 0x0, "ae13f0e9"}, @local=@item_012={0x2, 0x2, 0x7, "eaa4"}, @local=@item_4={0x3, 0x2, 0xb, "a0c6d2d7"}, @local=@item_4={0x3, 0x2, 0x4, "25f68881"}, @global=@item_012={0x1, 0x1, 0x5, '5'}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x4, 0x1, {0x22, 0xdc1}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000b00)={0x0, 0xf, 0x32, "93ce15b801f8f19dd0cdb69620039da0bd6858e20644018cad774bbe2e8e4a3f16f9701df38af8aef62b87bac3272a64d609"}, 0x0, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x20, 0x11, 0x51, {0x51, 0xa, "164fdea279ecf819f56f290cd7f241a2a2a9fa8036abd9205c412c621526141ad23f0f0788624f326b39612577d68aba2eba7aeab20066c4025841e905051dfcb6409130bfad0fc95629b99467a33e"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f0000000640)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x5, "c2dbca25"}, @main=@item_4={0x3, 0x0, 0xb, "5c194876"}, @global=@item_012={0x0, 0x1, 0x8}, @main=@item_012={0x2, 0x0, 0xc, "7af3"}, @global=@item_4={0x3, 0x1, 0x3, "6e3604c0"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xc0}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x20, 0x6, 0x6a, "b427f144899c3728c60d0f180d8d5c62880e8889567a11565318b5420ffbc07910fc7054e2d32745861a2cc50073909c441379eb5364c994d88848359702a1b2a930f678924ffe0e3eed09c0aca17c59fccc4e24b0b7132b27b23cced02c57fd0fd115c509f8bf3c6a6b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xc0}, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1}}) mount(&(0x7f0000000000)=@sr0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x280c8, &(0x7f0000000300)='\x00e\xc3\x928\x94\x94\xe8(\xebu0\x9d\x96\xf0,P\x05\xeen\x04\xb8[COa\xdf9\x8a&a)z\xb1J\xa2\x85\xe3s\x93ul[\xd1\x93 \x9dq\xcbbL\x1fO\xdaBo\x8f_sc') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x7a}, {}, {}, {0x10}, {0x20}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100001002bbd7000000000000000000032cfc25930c16b3559cfdec8321e63a9462a27cb08b04e919338e1829c20b54a708e7dc31b99a15efb8bd3b265d8bf", @ANYRES32=0x0, @ANYBLOB="01000000a0400100080016800400028005001100000000001400030076657468305f746f5f62617461647600"], 0x44}}, 0x8054) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000400), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 14.739998496s ago: executing program 4 (id=921): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xfffffffffffffffe) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) tkill(r1, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.434091565s ago: executing program 6 (id=932): syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x202082) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 11.351176093s ago: executing program 2 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) 9.877217251s ago: executing program 4 (id=935): r0 = socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="06000200914faeb2126be3608491367e", 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fstat(r0, &(0x7f0000000340)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x0, 0x25dfdbfe, {0xe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffc00, 0x0, 0x20, 0x734}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 9.857623033s ago: executing program 2 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0xe7}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getown(r6, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) poll(0x0, 0x0, 0xfffffff8) 7.62757281s ago: executing program 4 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 6.773497767s ago: executing program 6 (id=943): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) accept4$inet(r2, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, r0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000001180)={'#! ', './file0', [{0x20, 'BB#'}, {0x20, 'Artb'}, {0x20, 'xt'}, {0x20, '^+]$)('}, {0x20, '-\xd6'}], 0xa, '\a'}, 0x22) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000000)={&(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x2, 0x400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x67ef, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) 5.68871269s ago: executing program 3 (id=944): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0x100) listen(r3, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5.439506076s ago: executing program 5 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x20) 5.419968352s ago: executing program 2 (id=946): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 5.28929215s ago: executing program 6 (id=947): openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x80400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = userfaultfd(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020101010000ffffffffffffff7f0006040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x45) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000580)='nfs\x00', 0x0, 0x0) 5.288889823s ago: executing program 3 (id=948): socket(0xa, 0x3, 0x3a) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/254, 0xfe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.070725117s ago: executing program 3 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170e0000000000000000010000600500070000000100080009000000000014001f000000000000000000000000000000000008000a00000000000600020001000000140020"], 0x5c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 3.782434276s ago: executing program 5 (id=950): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140100010000094ce609cd5ca693b39d8645f9dc3ec306c87727bf6f9928ecbe2045af6bd7a3ac1896b106fa1d3d0dedb4d037e747b700bf9adcebc4b92139f150869430baf052a42455cf20d571bb005d95b382a1442e7eaa0df27ba562ca1ea08993edd68583af0be8e97da0ec0440f1fcc4"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x884) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3.76051799s ago: executing program 3 (id=951): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.205173382s ago: executing program 6 (id=952): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) bind$alg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x1, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.204673243s ago: executing program 2 (id=953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc01864d0, &(0x7f0000000000)={0x4000000, 0x400000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080), 0x4) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 3.190700093s ago: executing program 3 (id=954): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000380)=0x1b, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000), 0xc) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000540), 0xc) 3.14105574s ago: executing program 5 (id=955): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/32, &(0x7f0000000100)=0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.885414003s ago: executing program 4 (id=956): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0xb3, 0x4d, 0x20, 0xb95, 0x2791, 0xd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x23, 0x86}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000000)='.\x00', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d030000000000000003000000000000000000000105000000080000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000004380), 0x0, &(0x7f0000004540)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYBLOB]) 2.80261376s ago: executing program 3 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000180)=0x60, 0x80800) clock_gettime(0x0, &(0x7f00000008c0)) ppoll(&(0x7f0000000880)=[{r4, 0x18}, {r3, 0x1081}, {r2, 0x24}], 0x3, 0x0, 0x0, 0x0) 2.729674816s ago: executing program 2 (id=958): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004680), 0x40000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) 2.381628452s ago: executing program 5 (id=959): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@'], 0x40}, 0x1, 0x4c00000000000000}, 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x14008000}, 0x1a52a53203556666) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x3004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10001]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x100600}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.433364402s ago: executing program 6 (id=960): pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9aa7, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) 1.432247698s ago: executing program 2 (id=961): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.052737032s ago: executing program 5 (id=962): prlimit64(0x0, 0xe, &(0x7f00000011c0)={0xb, 0x1002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 1.051754045s ago: executing program 6 (id=972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0xffffffffffffff6e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x2, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d", 0x2, 0x0, 0x0, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) 0s ago: executing program 5 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace(0x10, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 56.845388][ T5806] cgroup: Unknown subsys name 'net' [ 57.012395][ T5806] cgroup: Unknown subsys name 'cpuset' [ 57.020560][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.260473][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.416166][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.426136][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.434896][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.446769][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.456060][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.464027][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.466894][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.472204][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.479547][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.487022][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.493085][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.500989][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.506878][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.513644][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.527839][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.536183][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.536327][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.561766][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.570686][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.583579][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.591252][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.612722][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.619263][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.628259][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.630020][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.643894][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.659569][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.670911][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.678231][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.691627][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.071626][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 61.115811][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 61.133935][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.210699][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 61.241902][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 61.292807][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.303304][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.310875][ T5830] bridge_slave_0: entered allmulticast mode [ 61.317506][ T5830] bridge_slave_0: entered promiscuous mode [ 61.353522][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.361064][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.368236][ T5830] bridge_slave_1: entered allmulticast mode [ 61.375205][ T5830] bridge_slave_1: entered promiscuous mode [ 61.425025][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.432368][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.439805][ T5827] bridge_slave_0: entered allmulticast mode [ 61.446416][ T5827] bridge_slave_0: entered promiscuous mode [ 61.490411][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.497537][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.504783][ T5827] bridge_slave_1: entered allmulticast mode [ 61.512054][ T5827] bridge_slave_1: entered promiscuous mode [ 61.526444][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.533845][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.541112][ T5818] bridge_slave_0: entered allmulticast mode [ 61.547804][ T5818] bridge_slave_0: entered promiscuous mode [ 61.573876][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.603171][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.610731][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.617854][ T5816] bridge_slave_0: entered allmulticast mode [ 61.624843][ T5816] bridge_slave_0: entered promiscuous mode [ 61.632018][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.639185][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.646318][ T5818] bridge_slave_1: entered allmulticast mode [ 61.653239][ T5818] bridge_slave_1: entered promiscuous mode [ 61.669471][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.676569][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.684024][ T5821] bridge_slave_0: entered allmulticast mode [ 61.691245][ T5821] bridge_slave_0: entered promiscuous mode [ 61.699963][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.719354][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.728643][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.739172][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.746309][ T5816] bridge_slave_1: entered allmulticast mode [ 61.753729][ T5816] bridge_slave_1: entered promiscuous mode [ 61.766472][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.774410][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.782202][ T5821] bridge_slave_1: entered allmulticast mode [ 61.788749][ T5821] bridge_slave_1: entered promiscuous mode [ 61.807609][ T5830] team0: Port device team_slave_0 added [ 61.815769][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.840614][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.852026][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.868815][ T5830] team0: Port device team_slave_1 added [ 61.886037][ T5827] team0: Port device team_slave_0 added [ 61.899162][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.940163][ T5827] team0: Port device team_slave_1 added [ 61.947442][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.959454][ T5818] team0: Port device team_slave_0 added [ 61.974745][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.993376][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.000663][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.026826][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.063191][ T5818] team0: Port device team_slave_1 added [ 62.078250][ T5816] team0: Port device team_slave_0 added [ 62.085712][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.102123][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.109848][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.136445][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.152460][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.159815][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.186141][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.220094][ T5816] team0: Port device team_slave_1 added [ 62.235421][ T5821] team0: Port device team_slave_0 added [ 62.245364][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.252893][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.279207][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.293564][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.304199][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.330506][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.343105][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.350199][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.376230][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.403814][ T5821] team0: Port device team_slave_1 added [ 62.440801][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.447769][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.473963][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.494731][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.502030][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.528226][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.540436][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.547407][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.573518][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.595778][ T5830] hsr_slave_0: entered promiscuous mode [ 62.602088][ T5830] hsr_slave_1: entered promiscuous mode [ 62.616236][ T5831] Bluetooth: hci0: command tx timeout [ 62.623246][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.630447][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.656496][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.689067][ T5824] Bluetooth: hci1: command tx timeout [ 62.694897][ T5831] Bluetooth: hci3: command tx timeout [ 62.703956][ T5818] hsr_slave_0: entered promiscuous mode [ 62.711275][ T5818] hsr_slave_1: entered promiscuous mode [ 62.717303][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.725339][ T5818] Cannot create hsr debugfs directory [ 62.769346][ T5831] Bluetooth: hci2: command tx timeout [ 62.769353][ T5824] Bluetooth: hci4: command tx timeout [ 62.794651][ T5821] hsr_slave_0: entered promiscuous mode [ 62.800932][ T5821] hsr_slave_1: entered promiscuous mode [ 62.806960][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.815204][ T5821] Cannot create hsr debugfs directory [ 62.831721][ T5827] hsr_slave_0: entered promiscuous mode [ 62.837901][ T5827] hsr_slave_1: entered promiscuous mode [ 62.844398][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.852161][ T5827] Cannot create hsr debugfs directory [ 62.863616][ T5816] hsr_slave_0: entered promiscuous mode [ 62.869940][ T5816] hsr_slave_1: entered promiscuous mode [ 62.875919][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.883650][ T5816] Cannot create hsr debugfs directory [ 63.218501][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.229739][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.257131][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.271349][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.312325][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.322745][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.342285][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.361150][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.402368][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.414261][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.432298][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.448238][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.511293][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.526174][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.537359][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.580030][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.623962][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.637643][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.647475][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.658565][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.727065][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.766580][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.806549][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.818345][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.842431][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.849744][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.885486][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.896607][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.904181][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.913906][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.921008][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.932197][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.939350][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.013412][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.028543][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.050594][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.071162][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.078273][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.098566][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.112752][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.143323][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.150499][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.184800][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.207496][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.239430][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.246571][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.276669][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.290851][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.334130][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.341887][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.392585][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.399787][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.424916][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.432530][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.446584][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.513167][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.531688][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.666955][ T5821] veth0_vlan: entered promiscuous mode [ 64.690857][ T5831] Bluetooth: hci0: command tx timeout [ 64.733692][ T5821] veth1_vlan: entered promiscuous mode [ 64.754092][ T5818] veth0_vlan: entered promiscuous mode [ 64.770962][ T5831] Bluetooth: hci3: command tx timeout [ 64.771247][ T5824] Bluetooth: hci1: command tx timeout [ 64.785877][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.828585][ T5818] veth1_vlan: entered promiscuous mode [ 64.852459][ T5824] Bluetooth: hci2: command tx timeout [ 64.852468][ T5831] Bluetooth: hci4: command tx timeout [ 64.873753][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.892450][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.952552][ T5821] veth0_macvtap: entered promiscuous mode [ 64.994313][ T5818] veth0_macvtap: entered promiscuous mode [ 65.005344][ T5821] veth1_macvtap: entered promiscuous mode [ 65.023353][ T5818] veth1_macvtap: entered promiscuous mode [ 65.046733][ T5830] veth0_vlan: entered promiscuous mode [ 65.082449][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.106975][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.118865][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.131325][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.157116][ T5827] veth0_vlan: entered promiscuous mode [ 65.166582][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.180767][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.191921][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.203255][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.215238][ T5830] veth1_vlan: entered promiscuous mode [ 65.225605][ T5827] veth1_vlan: entered promiscuous mode [ 65.239881][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.248755][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.259009][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.267778][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.281243][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.290166][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.298844][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.307599][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.415957][ T5827] veth0_macvtap: entered promiscuous mode [ 65.439652][ T5830] veth0_macvtap: entered promiscuous mode [ 65.455324][ T5816] veth0_vlan: entered promiscuous mode [ 65.471869][ T5827] veth1_macvtap: entered promiscuous mode [ 65.506390][ T5830] veth1_macvtap: entered promiscuous mode [ 65.523360][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.536969][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.550293][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.553415][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.560560][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.578425][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.589567][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.606764][ T5816] veth1_vlan: entered promiscuous mode [ 65.616027][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.627529][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.637749][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.648266][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.658206][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.668777][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.680386][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.694070][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.704946][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.715341][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.726311][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.737255][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.754586][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.765786][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.776005][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.786581][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.796693][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.807178][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.818109][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.836969][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.849491][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.862037][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872893][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.882394][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.891655][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.908515][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.917694][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.926633][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.935378][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952889][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.961063][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.021145][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.029441][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.080486][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.110415][ T5816] veth0_macvtap: entered promiscuous mode [ 66.140569][ T5816] veth1_macvtap: entered promiscuous mode [ 66.191853][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.229565][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.276599][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.309991][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.326960][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.341864][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.352213][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.363199][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.380661][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.392479][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.403579][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.414950][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.428362][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.488489][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.497638][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.498591][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.517165][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.520297][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.526603][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.542627][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.553685][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.563883][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.575130][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.587088][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.598229][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.611148][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.798726][ T5824] Bluetooth: hci0: command tx timeout [ 66.842955][ T5909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 66.849887][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.850103][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.850205][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.850288][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.860671][ T5824] Bluetooth: hci1: command tx timeout [ 66.868373][ T5831] Bluetooth: hci3: command tx timeout [ 66.929418][ T5831] Bluetooth: hci2: command tx timeout [ 66.939476][ T5831] Bluetooth: hci4: command tx timeout [ 67.463875][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.509452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.556229][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.581716][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.705790][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.740259][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.783755][ T5921] Zero length message leads to an empty skb [ 67.805093][ T5921] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 67.857651][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 67.884735][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 67.911184][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 67.936689][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 67.987355][ T5923] ceph: No mds server is up or the cluster is laggy [ 68.123755][ T5935] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 68.872784][ T5831] Bluetooth: hci0: command tx timeout [ 68.944703][ T5824] Bluetooth: hci3: command tx timeout [ 68.965591][ T5831] Bluetooth: hci1: command tx timeout [ 68.999231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.008998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.020788][ T5831] Bluetooth: hci4: command tx timeout [ 69.025010][ T5824] Bluetooth: hci2: command tx timeout [ 69.138396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.159129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.240754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.328960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.343039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.383613][ T5937] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.690139][ T5951] mmap: syz.0.15 (5951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.729442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.790246][ T29] audit: type=1326 audit(1737407624.213:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5950 comm="syz.0.15" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f461ed85d29 code=0x0 [ 69.946873][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14'. [ 69.973072][ T5954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14'. [ 69.994731][ T5954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 70.123254][ T5949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.139475][ T5949] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.190085][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 70.228261][ T5949] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.247227][ T5949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.299674][ T5949] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.339179][ T5949] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.389806][ T5949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.429119][ T5949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.441878][ T5949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.463830][ T5949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.479189][ T5949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.494170][ T5949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.527637][ T5949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 70.555171][ T5949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.617711][ T5949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 72.369882][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.376461][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.403700][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.409839][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.478965][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.529731][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 72.535770][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.620229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.945305][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.022788][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 74.031608][ T5992] bridge_slave_1: left allmulticast mode [ 74.037274][ T5992] bridge_slave_1: left promiscuous mode [ 74.058419][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.200986][ T5992] bridge_slave_0: left allmulticast mode [ 74.206978][ T5992] bridge_slave_0: left promiscuous mode [ 74.220909][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.351297][ T6009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 74.442131][ T6012] syz.4.31 uses old SIOCAX25GETINFO [ 74.482258][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.490301][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.533118][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.609977][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 74.616805][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.160749][ T6004] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 75.475971][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.483577][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.549213][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.555307][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.611354][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.698860][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.705037][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 76.953372][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.448300][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.984238][ T6006] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.655737][ T6006] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.686697][ T6006] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.739199][ T6006] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.298071][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 80.742906][ T5831] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 81.125098][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 81.187130][ T6091] bridge_slave_0: left allmulticast mode [ 81.237618][ T6091] bridge_slave_0: left promiscuous mode [ 81.271161][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.963973][ T6091] bridge_slave_1: left allmulticast mode [ 81.964140][ T9] cfg80211: failed to load regulatory.db [ 81.983539][ T6091] bridge_slave_1: left promiscuous mode [ 82.022106][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.179845][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.433242][ T6091] bond0: (slave bond_slave_0): Releasing backup interface [ 82.445269][ T6091] bond0: (slave bond_slave_1): Releasing backup interface [ 82.536001][ T6103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.605392][ T6091] team0: Port device team_slave_0 removed [ 82.907441][ T6091] team0: Port device team_slave_1 removed [ 83.056502][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.064045][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.077916][ T5873] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 83.101061][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdd2c00: rx timeout, send abort [ 83.101210][ T5873] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 83.110480][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fdd2800: rx timeout, send abort [ 83.130048][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.133550][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fdd2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.152315][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.153053][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fdd2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.173921][ T5873] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.293914][ T5873] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 83.314724][ T5873] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 83.345961][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.353487][ T6088] vlan0: entered promiscuous mode [ 83.417538][ T6088] team0: Port device vlan0 added [ 83.632843][ T5873] ath6kl: Failed to submit usb control message: -71 [ 84.437184][ T5873] ath6kl: unable to send the bmi data to the device: -71 [ 84.444356][ T5873] ath6kl: Unable to send get target info: -71 [ 84.475541][ T5873] ath6kl: Failed to init ath6kl core: -71 [ 84.483406][ T5873] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 84.531560][ T5873] usb 4-1: USB disconnect, device number 2 [ 84.770765][ T5831] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.779366][ T5831] Bluetooth: hci3: Injecting HCI hardware error event [ 84.788447][ T5831] Bluetooth: hci3: hardware error 0x00 [ 84.885561][ T6125] vlan2: entered promiscuous mode [ 84.891783][ T6125] bond0: entered promiscuous mode [ 84.896963][ T6125] bond_slave_0: entered promiscuous mode [ 84.903216][ T6125] bond_slave_1: entered promiscuous mode [ 84.915912][ T6125] bond0: left promiscuous mode [ 84.922007][ T6125] bond_slave_0: left promiscuous mode [ 84.939738][ T6125] bond_slave_1: left promiscuous mode [ 85.364678][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 85.682069][ T6145] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.74'. [ 86.374007][ T29] audit: type=1804 audit(1737407640.803:3): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.80" name="/newroot/21/bus/bus" dev="overlay" ino=143 res=1 errno=0 [ 86.396769][ T6151] evm: overlay not supported [ 86.420341][ T6151] Invalid ELF header magic: != ELF [ 86.849289][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 86.925813][ T6155] loop6: detected capacity change from 0 to 524287999 [ 87.083751][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.093147][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.108144][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.117338][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.131296][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.140539][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.152672][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.161843][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.184706][ T6146] syz.2.76 (6146): drop_caches: 2 [ 87.202750][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.212018][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.221334][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.230554][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.238633][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.247912][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.263987][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.273243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.282011][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.291228][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.300738][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.310008][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.321271][ T6155] ldm_validate_partition_table(): Disk read failed. [ 87.331972][ T6155] Dev loop6: unable to read RDB block 0 [ 87.342613][ T6155] loop6: unable to read partition table [ 87.348436][ T6155] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 87.433065][ T5831] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 87.528680][ T6159] syz.1.79 (6159) used greatest stack depth: 18936 bytes left [ 87.751567][ T6174] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 87.807494][ T6178] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 88.059533][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 90.664777][ T6215] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 91.419040][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.559925][ T6233] kAFS: unable to lookup cell '/yz1' [ 91.589373][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 91.610690][ T5870] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 91.651153][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.681265][ T5870] usb 3-1: config 0 descriptor?? [ 91.761519][ T6236] netlink: 'syz.0.104': attribute type 5 has an invalid length. [ 91.809135][ T972] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.911754][ T5870] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 91.993765][ T972] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.030109][ T972] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.049043][ T972] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.069312][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.093227][ T6232] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.139483][ T972] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.170902][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.359011][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 92.373503][ T9] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 92.418995][ T9] usb 1-1: config 0 has no interface number 0 [ 92.425202][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 92.458164][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.490698][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 92.511210][ T9] usb 1-1: config 0 descriptor?? [ 92.538311][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 93.277447][ T5870] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 93.372077][ T5870] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 93.419430][ T5870] asix 3-1:0.0: probe with driver asix failed with error -71 [ 93.449870][ T5870] usb 3-1: USB disconnect, device number 2 [ 93.592872][ T5873] usb 4-1: USB disconnect, device number 3 [ 93.644743][ T9] gspca_sunplus: reg_w_riv err -71 [ 93.652206][ T9] sunplus 1-1:0.99: probe with driver sunplus failed with error -71 [ 93.697150][ T9] usb 1-1: USB disconnect, device number 2 [ 95.473513][ T5831] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 96.173869][ T29] audit: type=1800 audit(1737407650.593:4): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.117" name="/" dev="9p" ino=2 res=0 errno=0 [ 96.821081][ T972] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.468340][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 97.509379][ T972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 97.546638][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.585036][ T972] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.603471][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.728402][ T29] audit: type=1326 audit(1737407652.013:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 97.768831][ T29] audit: type=1326 audit(1737407652.013:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 97.926745][ T972] usb 5-1: Product: syz [ 97.931037][ T972] usb 5-1: Manufacturer: syz [ 97.935650][ T972] usb 5-1: SerialNumber: syz [ 97.962498][ T29] audit: type=1326 audit(1737407652.013:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 97.985073][ T972] usb 5-1: config 0 descriptor?? [ 98.007028][ T972] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.288948][ T972] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 98.352362][ T29] audit: type=1326 audit(1737407652.013:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 98.382025][ T29] audit: type=1326 audit(1737407652.033:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 98.425907][ T29] audit: type=1326 audit(1737407652.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 98.506549][ T29] audit: type=1326 audit(1737407652.033:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 98.572177][ T29] audit: type=1326 audit(1737407652.033:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 98.594244][ T6320] process 'syz.3.129' launched './file1' with NULL argv: empty string added [ 98.597538][ T29] audit: type=1326 audit(1737407652.033:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6298 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa99d985d29 code=0x7ffc0000 [ 98.779477][ T972] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 98.819128][ T972] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 99.895656][ T972] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe [ 100.109277][ T972] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 100.134072][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 100.174754][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 100.183896][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 100.205626][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 100.232891][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 100.264972][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 100.281152][ T972] usb 5-1: USB disconnect, device number 2 [ 100.667632][ T6359] ======================================================= [ 100.667632][ T6359] WARNING: The mand mount option has been deprecated and [ 100.667632][ T6359] and is ignored by this kernel. Remove the mand [ 100.667632][ T6359] option from the mount to silence this warning. [ 100.667632][ T6359] ======================================================= [ 101.079116][ T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.258961][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 101.265774][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.283427][ T51] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 101.297507][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.318710][ T51] usb 5-1: config 0 descriptor?? [ 101.353228][ T51] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 101.398799][ T51] usb 5-1: Detected SIO [ 101.416917][ T51] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 101.471758][ T6380] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 101.476653][ T51] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 102.398169][ T51] usb 5-1: USB disconnect, device number 3 [ 102.469167][ T51] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 102.487054][ T51] ftdi_sio 5-1:0.0: device disconnected [ 107.245815][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 108.328823][ T6451] loop7: detected capacity change from 0 to 16384 [ 108.430436][ T6451] blk_print_req_error: 10 callbacks suppressed [ 108.430455][ T6451] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.462654][ T6453] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 108.488984][ T6453] buffer_io_error: 10 callbacks suppressed [ 108.489003][ T6453] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 108.512559][ T6457] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.549665][ T6451] Buffer I/O error on dev loop7, logical block 1, async page read [ 108.583366][ T6461] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 108.641415][ T6461] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 108.668409][ T6461] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 108.678049][ T6461] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 108.692585][ T6461] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 108.704270][ T6461] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 108.733578][ T6461] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 108.745002][ T6461] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 108.756138][ T6461] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 109.832339][ T6472] vlan2: entered allmulticast mode [ 113.039211][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.288982][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 113.343531][ T5900] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 113.370422][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.928401][ T5900] usb 2-1: Product: syz [ 114.178394][ T5900] usb 2-1: Manufacturer: syz [ 114.183640][ T5900] usb 2-1: SerialNumber: syz [ 114.204289][ T5900] usb 2-1: config 0 descriptor?? [ 114.223768][ T5900] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 114.845333][ T972] usb 2-1: USB disconnect, device number 2 [ 116.022412][ T6540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.158151][ T6564] netlink: 'syz.3.203': attribute type 21 has an invalid length. [ 117.176442][ T6564] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 117.222580][ T6564] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.203'. [ 117.268054][ T6567] syz.1.204 uses obsolete (PF_INET,SOCK_PACKET) [ 117.562190][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 117.570623][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 117.610223][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 117.698958][ T6575] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.779961][ T6575] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 118.093897][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.156603][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.225948][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.255916][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.276306][ T6575] virt_wifi0 speed is unknown, defaulting to 1000 [ 121.780200][ T6620] tipc: Started in network mode [ 121.788952][ T6620] tipc: Node identity -N, cluster identity 4711 [ 122.018773][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 122.179016][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.329015][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 122.335893][ T5873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 122.350294][ T5873] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 122.359877][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.368249][ T5873] usb 1-1: Product: syz [ 122.373323][ T5873] usb 1-1: Manufacturer: syz [ 122.378090][ T5873] usb 1-1: SerialNumber: syz [ 122.390935][ T5873] usb 1-1: config 0 descriptor?? [ 122.449758][ T6627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.460270][ T5873] hub 1-1:0.0: bad descriptor, ignoring hub [ 122.466222][ T5873] hub 1-1:0.0: probe with driver hub failed with error -5 [ 122.730899][ T5873] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 122.967205][ T9] usb 1-1: USB disconnect, device number 3 [ 122.967214][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 125.757459][ T6679] netlink: 108 bytes leftover after parsing attributes in process `syz.0.241'. [ 125.769428][ T6679] netlink: 108 bytes leftover after parsing attributes in process `syz.0.241'. [ 125.779472][ T6679] netlink: 108 bytes leftover after parsing attributes in process `syz.0.241'. [ 126.582111][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 126.594436][ T6690] netlink: 'syz.3.247': attribute type 4 has an invalid length. [ 131.897060][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 131.897101][ T29] audit: type=1326 audit(1737407686.313:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 131.966805][ T29] audit: type=1326 audit(1737407686.313:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 132.027664][ T29] audit: type=1326 audit(1737407686.313:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8407f84690 code=0x7ffc0000 [ 132.074253][ T29] audit: type=1326 audit(1737407686.313:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8407f84690 code=0x7ffc0000 [ 132.096351][ T29] audit: type=1326 audit(1737407686.313:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 132.214327][ T29] audit: type=1326 audit(1737407686.313:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 132.245181][ T29] audit: type=1326 audit(1737407686.313:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8407f84690 code=0x7ffc0000 [ 132.267858][ T29] audit: type=1326 audit(1737407686.323:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 132.302477][ T5870] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 132.417566][ T29] audit: type=1326 audit(1737407686.323:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 132.438911][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.447043][ T29] audit: type=1326 audit(1737407686.323:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 132.511593][ T5870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.673849][ T5870] usb 3-1: not running at top speed; connect to a high speed hub [ 133.075365][ T6770] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 133.083316][ T6770] UDF-fs: Scanning with blocksize 512 failed [ 133.091090][ T6770] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 133.098633][ T6770] UDF-fs: Scanning with blocksize 1024 failed [ 133.108192][ T6770] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 133.115897][ T6770] UDF-fs: Scanning with blocksize 2048 failed [ 133.123799][ T6770] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 133.131386][ T6770] UDF-fs: Scanning with blocksize 4096 failed [ 133.330232][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.336608][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.344064][ T5870] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.417703][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 133.464083][ T5870] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 133.474854][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.629038][ T5870] usb 3-1: Product: syz [ 133.633372][ T5870] usb 3-1: Manufacturer: ò ›¼ [ 133.638210][ T5870] usb 3-1: SerialNumber: syz [ 133.884308][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 133.919009][ T5873] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.934432][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'. [ 133.969090][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 134.072716][ T5870] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 134.089719][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 134.098775][ T5870] usb 3-1: USB disconnect, device number 3 [ 134.114742][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.148802][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.158740][ T51] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.177139][ T5873] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 134.193200][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.207427][ T5873] usb 4-1: config 0 descriptor?? [ 134.328984][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 134.340977][ T51] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 134.350381][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.358507][ T51] usb 1-1: Product: syz [ 134.363726][ T51] usb 1-1: Manufacturer: syz [ 134.371380][ T51] usb 1-1: SerialNumber: syz [ 134.381031][ T51] usb 1-1: config 0 descriptor?? [ 134.667577][ T5873] hid-alps 0003:044E:120C.0001: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 135.039487][ T5900] usb 4-1: USB disconnect, device number 4 [ 135.215569][ T6789] netlink: 596 bytes leftover after parsing attributes in process `syz.2.277'. [ 135.247154][ T51] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1a:f0:c9:25:bd:09 [ 135.306228][ T51] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 135.360603][ T51] usb 1-1: USB disconnect, device number 4 [ 135.969214][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.987460][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.996309][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.019779][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.030328][ T5824] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.039092][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.136144][ T6793] virt_wifi0 speed is unknown, defaulting to 1000 [ 136.379228][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'. [ 136.737294][ T6793] chnl_net:caif_netlink_parms(): no params data found [ 136.751477][ T6821] random: crng reseeded on system resumption [ 137.374639][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 137.374655][ T29] audit: type=1326 audit(1737407691.803:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.376954][ T6879] bridge: RTM_NEWNEIGH with invalid ether address [ 137.391210][ T29] audit: type=1326 audit(1737407691.803:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.519380][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.559268][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.566477][ T29] audit: type=1326 audit(1737407691.813:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.608334][ T6793] bridge_slave_0: entered allmulticast mode [ 137.613831][ T29] audit: type=1326 audit(1737407691.813:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.628465][ T6793] bridge_slave_0: entered promiscuous mode [ 137.635651][ T29] audit: type=1326 audit(1737407691.813:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.663663][ T29] audit: type=1326 audit(1737407691.813:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.685084][ T29] audit: type=1326 audit(1737407691.813:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.717513][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.755354][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.772048][ T29] audit: type=1326 audit(1737407691.813:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.775773][ T6793] bridge_slave_1: entered allmulticast mode [ 137.798944][ T29] audit: type=1326 audit(1737407691.813:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.852337][ T6793] bridge_slave_1: entered promiscuous mode [ 137.860180][ T29] audit: type=1326 audit(1737407691.813:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6880 comm="syz.3.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x7ffc0000 [ 137.975981][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.031110][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.129448][ T5831] Bluetooth: hci2: command tx timeout [ 138.193335][ T6793] team0: Port device team_slave_0 added [ 138.209304][ T6793] team0: Port device team_slave_1 added [ 138.373628][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.409588][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.507584][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.592024][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.599349][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.073385][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.022829][ T6793] hsr_slave_0: entered promiscuous mode [ 140.057920][ T6793] hsr_slave_1: entered promiscuous mode [ 140.075967][ T6793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.120944][ T6793] Cannot create hsr debugfs directory [ 140.211084][ T5831] Bluetooth: hci2: command tx timeout [ 141.670917][ T6793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.706401][ T6793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.741655][ T6793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.761365][ T6793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.810276][ T6939] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 142.539482][ T5831] Bluetooth: hci2: command tx timeout [ 143.033033][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.075468][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.115173][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.122362][ T6849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.189611][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.196801][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.298340][ T5831] Bluetooth: hci2: command tx timeout [ 145.451709][ T5902] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.055701][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.208986][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 146.657089][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 146.677926][ T5902] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 146.700317][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.708772][ T5902] usb 4-1: Product: syz [ 146.809620][ T5902] usb 4-1: Manufacturer: syz [ 146.814486][ T5902] usb 4-1: SerialNumber: syz [ 146.845835][ T5902] usb 4-1: config 0 descriptor?? [ 146.857607][ T6965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.867104][ T5902] hub 4-1:0.0: bad descriptor, ignoring hub [ 146.878320][ T5902] hub 4-1:0.0: probe with driver hub failed with error -5 [ 146.922653][ T5902] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 147.285967][ T6793] veth0_vlan: entered promiscuous mode [ 147.322206][ T6793] veth1_vlan: entered promiscuous mode [ 147.332206][ T5873] usb 4-1: USB disconnect, device number 5 [ 147.332304][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 147.517158][ T6793] veth0_macvtap: entered promiscuous mode [ 147.579520][ T6793] veth1_macvtap: entered promiscuous mode [ 147.607443][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.626489][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.636799][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.647676][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.758013][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.799239][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.810949][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.833026][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.908920][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.918770][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.973340][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.999041][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.025805][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.060916][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.173155][ T6793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.242409][ T6793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.262622][ T6793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.299045][ T6793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.670508][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.678382][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.780366][ T6849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.788238][ T6849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.867594][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.160285][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.219223][ T5900] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 150.230970][ T5900] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.335077][ T5900] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 150.396202][ T5900] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.501565][ T5900] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.622288][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.655630][ T5900] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.677935][ T5900] usb 4-1: invalid MIDI out EP 0 [ 150.951756][ T5900] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 151.011251][ T5900] usb 4-1: USB disconnect, device number 6 [ 151.223241][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.749298][ T7019] Invalid source name [ 151.790423][ T7019] UBIFS error (pid: 7019): cannot open "/dev/sg0", error -22 [ 152.618714][ T5873] IPVS: starting estimator thread 0... [ 152.890811][ T7057] IPVS: using max 20 ests per chain, 48000 per kthread [ 154.721031][ T7077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.339'. [ 154.836492][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.568938][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 155.583718][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.642300][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.663061][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.344'. [ 155.668985][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 155.677759][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.344'. [ 155.701122][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.344'. [ 155.718951][ T5902] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 155.723451][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.344'. [ 155.979429][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.003771][ T5902] usb 3-1: config 0 descriptor?? [ 157.847012][ T5902] usb 3-1: can't set config #0, error -71 [ 157.857396][ T5902] usb 3-1: USB disconnect, device number 4 [ 158.049714][ T7101] netlink: 72 bytes leftover after parsing attributes in process `syz.5.348'. [ 160.894761][ T7131] Bluetooth: MGMT ver 1.23 [ 164.071093][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 164.071112][ T29] audit: type=1326 audit(1737407718.493:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7171 comm="syz.3.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8407f85d29 code=0x0 [ 166.047296][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.083742][ T7202] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.096360][ T7202] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 166.620533][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 166.636850][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.657625][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.719711][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 166.739197][ T5902] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 166.755623][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.771688][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 166.937880][ T5902] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.689109][ T5902] usb 6-1: Manufacturer: syz [ 167.753319][ T5902] usb 6-1: config 0 descriptor?? [ 168.166959][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.177136][ T5902] rc_core: IR keymap rc-hauppauge not found [ 168.183576][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.192092][ T5902] Registered IR keymap rc-empty [ 168.207200][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.225272][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.239777][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.258552][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.278231][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 168.321866][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 168.325214][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 168.361499][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.399074][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.439933][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.469181][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.499373][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.539047][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.579198][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.614700][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.633500][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.648368][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.650167][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.676107][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.697231][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.699696][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.754956][ T5902] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.795730][ T5902] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 168.823325][ T5902] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 168.860251][ T5902] usb 6-1: USB disconnect, device number 2 [ 168.994357][ T7230] kvm: emulating exchange as write [ 169.003789][ T7230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.131512][ T7236] wireguard0: entered promiscuous mode [ 169.137046][ T7236] wireguard0: entered allmulticast mode [ 169.305323][ T7242] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 169.696283][ T7253] batman_adv: batadv0: Adding interface: ip6gretap1 [ 169.718866][ T7253] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.769007][ T7253] batman_adv: batadv0: Interface activated: ip6gretap1 [ 172.783559][ T7280] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.486079][ T5831] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 173.848968][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.062684][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 174.156306][ T5873] usb 5-1: config 0 has no interfaces? [ 174.249255][ T5873] usb 5-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 174.285077][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.313980][ T5873] usb 5-1: Product: syz [ 174.318188][ T5873] usb 5-1: Manufacturer: syz [ 174.366338][ T5873] usb 5-1: SerialNumber: syz [ 174.386733][ T5873] usb 5-1: config 0 descriptor?? [ 174.479064][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.576910][ T7311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.415'. [ 174.648963][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 174.664920][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.675006][ T5871] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 174.703863][ T5871] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 174.716993][ T5871] usb 4-1: config 4 has no interface number 0 [ 174.742705][ T5871] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 174.761279][ T5902] usb 5-1: USB disconnect, device number 4 [ 174.783287][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.792922][ T5871] usb 4-1: Product: syz [ 174.797175][ T5871] usb 4-1: Manufacturer: syz [ 174.802466][ T5871] usb 4-1: SerialNumber: syz [ 175.446995][ T5871] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 175.462887][ T5871] uvcvideo 4-1:4.147: Entity type for entity Output 1 was not initialized! [ 175.502439][ T5871] usb 4-1: Failed to create links for entity 1 [ 175.535484][ T5871] usb 4-1: Failed to register entities (-22). [ 175.569038][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.600379][ T5871] usb 4-1: USB disconnect, device number 7 [ 176.552088][ T7340] Process accounting resumed [ 179.897224][ T7374] tipc: Failed to remove unknown binding: 66,1,1/0:3932550601/3932550603 [ 179.912815][ T7374] tipc: Failed to remove unknown binding: 66,1,1/0:3932550601/3932550603 [ 180.301847][ T7377] random: crng reseeded on system resumption [ 181.540366][ T7398] netlink: 160 bytes leftover after parsing attributes in process `syz.2.440'. [ 182.199616][ T7377] Restarting kernel threads ... done. [ 182.603763][ T7405] affs: No valid root block on device nbd4 [ 185.201051][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'. [ 185.338209][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 185.380586][ T7415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.382566][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.446'. [ 185.399018][ T7417] bridge_slave_1: left allmulticast mode [ 185.408392][ T7417] bridge_slave_1: left promiscuous mode [ 185.414788][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.431488][ T7417] bridge_slave_0: left allmulticast mode [ 185.446435][ T7417] bridge_slave_0: left promiscuous mode [ 185.466268][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.431045][ T7425] dvmrp0: entered allmulticast mode [ 186.489863][ T7426] pimreg: entered allmulticast mode [ 186.499645][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.539561][ T7431] batadv_slave_1: entered promiscuous mode [ 189.801546][ T7474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.064546][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.082528][ T7478] batadv_slave_0: entered promiscuous mode [ 190.305900][ T7482] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 191.966506][ T7493] netlink: 'syz.5.472': attribute type 1 has an invalid length. [ 191.989635][ T7493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.013254][ T7493] bond1: (slave gretap1): making interface the new active one [ 192.023194][ T7493] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 192.046634][ T7493] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 192.129342][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.497959][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 192.636115][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.757073][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.848747][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 192.892761][ T5902] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 192.919219][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.944075][ T5902] usb 5-1: config 0 descriptor?? [ 193.759894][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.993938][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.045150][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.082581][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.108690][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input8 [ 194.213283][ T5902] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input9 [ 194.361973][ T5902] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 194.724446][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.731055][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.349132][ T5902] usb 5-1: USB disconnect, device number 5 [ 197.451286][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.484'. [ 197.631325][ T7541] warning: `syz.5.486' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.130316][ T35] wlan1: Trigger new scan to find an IBSS to join [ 200.738960][ T51] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.959031][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 200.975521][ T51] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 200.989979][ T51] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.699637][ T51] usb 6-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 201.708770][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.740695][ T51] usb 6-1: config 0 descriptor?? [ 202.240706][ T51] wacom 0003:056A:002A.0003: unknown main item tag 0x0 [ 202.268540][ T51] wacom 0003:056A:002A.0003: unknown main item tag 0x0 [ 202.369470][ T51] wacom 0003:056A:002A.0003: unknown main item tag 0x0 [ 202.390066][ T51] wacom 0003:056A:002A.0003: unknown main item tag 0x0 [ 203.176135][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.189344][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.212703][ T51] wacom 0003:056A:002A.0003: unknown main item tag 0x0 [ 203.239894][ T51] wacom 0003:056A:002A.0003: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 203.289390][ T51] wacom 0003:056A:002A.0003: hidraw0: USB HID v0.05 Device [HID 056a:002a] on usb-dummy_hcd.5-1/input0 [ 203.335545][ T51] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:002A.0003/input/input10 [ 203.399184][ T51] usb 6-1: USB disconnect, device number 3 [ 203.751122][ T9] IPVS: starting estimator thread 0... [ 203.939231][ T7600] IPVS: using max 19 ests per chain, 45600 per kthread [ 204.133632][ T6857] wlan1: Trigger new scan to find an IBSS to join [ 204.642208][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 206.195159][ T6852] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 207.003326][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.040438][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.122127][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.135274][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.209767][ T5824] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.223646][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.766930][ T7634] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.815946][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 209.134352][ T7660] overlayfs: statfs failed on './file0' [ 209.159951][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.195723][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.234299][ T7634] bridge_slave_0: entered allmulticast mode [ 209.264124][ T5824] Bluetooth: hci5: command tx timeout [ 209.287492][ T7634] bridge_slave_0: entered promiscuous mode [ 209.354333][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.388959][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.396238][ T7634] bridge_slave_1: entered allmulticast mode [ 209.701432][ T7634] bridge_slave_1: entered promiscuous mode [ 210.343410][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.372448][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.490494][ T7634] team0: Port device team_slave_0 added [ 210.513305][ T7634] team0: Port device team_slave_1 added [ 210.576301][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.591154][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.630070][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.656364][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.681433][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.735011][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.339423][ T5824] Bluetooth: hci5: command tx timeout [ 212.362300][ T7634] hsr_slave_0: entered promiscuous mode [ 212.401474][ T7634] hsr_slave_1: entered promiscuous mode [ 212.407687][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.449561][ T7634] Cannot create hsr debugfs directory [ 213.410671][ T5824] Bluetooth: hci5: command tx timeout [ 214.272923][ T7634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.354460][ T7634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.428390][ T7634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.473700][ T7634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.489201][ T5824] Bluetooth: hci5: command tx timeout [ 215.564393][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.039998][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.191235][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.198401][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.249887][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.257121][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.570367][ T7634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.684899][ T7634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.708560][ T7769] netlink: 'syz.3.544': attribute type 10 has an invalid length. [ 216.762666][ T7769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.805222][ T7768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.917028][ T5871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 217.005529][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.992608][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 218.007484][ T5871] usb 6-1: config 0 has no interfaces? [ 218.023209][ T5871] usb 6-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 218.049036][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.057113][ T5871] usb 6-1: Product: syz [ 218.058382][ T7634] veth0_vlan: entered promiscuous mode [ 218.062663][ T5871] usb 6-1: Manufacturer: syz [ 218.076746][ T5871] usb 6-1: SerialNumber: syz [ 218.082942][ T7634] veth1_vlan: entered promiscuous mode [ 218.091152][ T5871] usb 6-1: config 0 descriptor?? [ 218.150533][ T7634] veth0_macvtap: entered promiscuous mode [ 218.164727][ T7634] veth1_macvtap: entered promiscuous mode [ 218.183301][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.194387][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.205244][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.216738][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.227976][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.239774][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.251697][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.263136][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.286515][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.298301][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.316817][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.327349][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.345346][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.362980][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.387304][ T7634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.396445][ T7634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.414277][ T7634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.426449][ T7634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.523698][ T6870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.547328][ T6870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.581088][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.597749][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.892916][ T7797] cgroup: noprefix used incorrectly [ 218.928468][ T5873] usb 6-1: USB disconnect, device number 4 [ 219.529430][ T7802] batman_adv: batadv0: Adding interface: dummy0 [ 219.537338][ T7802] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.565125][ T7802] batman_adv: batadv0: Interface activated: dummy0 [ 219.598270][ T7802] batadv0: mtu less than device minimum [ 219.607426][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.620712][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.633183][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.646626][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.659090][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.670960][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.683586][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.695130][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.706587][ T7802] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 221.069718][ T7820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 223.206353][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 224.473562][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 228.239116][ T80] Bluetooth: hci7: Frame reassembly failed (-84) [ 228.442880][ T6870] Bluetooth: Error in BCSP hdr checksum [ 228.702467][ T6857] Bluetooth: Error in BCSP hdr checksum [ 228.959715][ T6857] Bluetooth: Error in BCSP hdr checksum [ 229.242715][ T6857] Bluetooth: Error in BCSP hdr checksum [ 229.492502][ T1134] Bluetooth: Error in BCSP hdr checksum [ 229.752533][ T6873] Bluetooth: Error in BCSP hdr checksum [ 229.766592][ T29] audit: type=1800 audit(1737407784.193:79): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.582" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 229.964027][ T7890] syz.4.576 (7890): drop_caches: 2 [ 230.022380][ T6873] Bluetooth: Error in BCSP hdr checksum [ 230.070267][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 230.100996][ T7924] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 230.208999][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 230.217347][ T5824] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 230.279256][ T1134] Bluetooth: Error in BCSP hdr checksum [ 230.289061][ T5824] Bluetooth: hci7: command 0xfc11 tx timeout [ 230.292024][ T5831] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 230.539193][ T1134] Bluetooth: Error in BCSP hdr checksum [ 230.906753][ T7922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.550569][ T7922] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 231.609151][ T6870] Bluetooth: Error in BCSP hdr checksum [ 231.629543][ T7922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.661249][ T7922] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 231.854236][ T1134] Bluetooth: Error in BCSP hdr checksum [ 231.863234][ T7922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.879666][ T7922] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 232.099965][ T7922] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 232.224698][ T7922] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 232.570075][ T6845] Bluetooth: Error in BCSP hdr checksum [ 232.791711][ T6845] Bluetooth: Error in BCSP hdr checksum [ 233.501624][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.598'. [ 234.014107][ T7983] netlink: 64 bytes leftover after parsing attributes in process `syz.4.606'. [ 236.069245][ T8013] netlink: 666 bytes leftover after parsing attributes in process `syz.4.615'. [ 237.422208][ T8029] net_ratelimit: 11 callbacks suppressed [ 237.422226][ T8029] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 239.733841][ T8052] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 239.742015][ T8052] UDF-fs: Scanning with blocksize 512 failed [ 239.752367][ T8052] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 239.759977][ T8052] UDF-fs: Scanning with blocksize 1024 failed [ 239.767695][ T8052] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 239.775294][ T8052] UDF-fs: Scanning with blocksize 2048 failed [ 239.783033][ T8052] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 239.790653][ T8052] UDF-fs: Scanning with blocksize 4096 failed [ 241.442070][ T8065] netlink: 'syz.5.630': attribute type 12 has an invalid length. [ 243.106130][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 243.121364][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 244.779595][ T8091] kvm: pic: non byte write [ 244.785771][ T8091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 247.054299][ T8119] netlink: 'syz.5.645': attribute type 4 has an invalid length. [ 247.116133][ T8121] netlink: 'syz.5.645': attribute type 4 has an invalid length. [ 248.691186][ T8151] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 248.753917][ T8151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.016526][ T8155] bond1: (slave gretap1): making interface the new active one [ 249.043371][ T8155] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 249.971382][ T8151] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 250.000813][ T8161] syz.4.658[8161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.000917][ T8161] syz.4.658[8161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.043047][ T8161] syz.4.658[8161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.117356][ T8163] syz.4.658[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.235200][ T8163] syz.4.658[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.277954][ T8163] syz.4.658[8163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.896094][ T8230] netlink: 'syz.3.678': attribute type 27 has an invalid length. [ 255.971695][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978176][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.434315][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.525245][ T8251] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 258.710542][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.274602][ T8231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.347537][ T8231] syz.3.678 (8231) used greatest stack depth: 18128 bytes left [ 260.430593][ T2162] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 261.013642][ T8286] Bluetooth: hci6: Frame reassembly failed (-84) [ 261.048114][ T6845] Bluetooth: hci6: Frame reassembly failed (-84) [ 261.221092][ T8295] syz.5.697[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.221187][ T8295] syz.5.697[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.252119][ T8295] syz.5.697[8295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.280603][ T2162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.343315][ T2162] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.369985][ T2162] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.383755][ T2162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.430489][ T2162] usb 3-1: SerialNumber: syz [ 261.663083][ T2162] usb 3-1: 0:2 : does not exist [ 261.736165][ T2162] usb 3-1: USB disconnect, device number 5 [ 261.918975][ T29] audit: type=1107 audit(1737407816.323:80): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='rs' [ 262.132701][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.009377][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 263.380031][ T8336] netlink: 'syz.6.710': attribute type 1 has an invalid length. [ 263.456793][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.711'. [ 263.477409][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.711'. [ 263.584678][ T8339] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.833912][ T8347] netlink: 'syz.5.714': attribute type 1 has an invalid length. [ 263.842264][ T8347] netlink: 224 bytes leftover after parsing attributes in process `syz.5.714'. [ 264.293765][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.219416][ T8372] binder: 8370:8372 ioctl c0306201 20000bc0 returned -14 [ 268.321773][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 271.259037][ T29] audit: type=1326 audit(1737407825.693:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.289392][ T29] audit: type=1326 audit(1737407825.723:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.374696][ T29] audit: type=1326 audit(1737407825.723:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.406295][ T29] audit: type=1326 audit(1737407825.743:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.437768][ T29] audit: type=1326 audit(1737407825.743:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.463517][ T29] audit: type=1326 audit(1737407825.753:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.486191][ T29] audit: type=1326 audit(1737407825.753:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.540319][ T29] audit: type=1326 audit(1737407825.753:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.559039][ T51] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.574960][ T29] audit: type=1326 audit(1737407825.753:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.659216][ T29] audit: type=1326 audit(1737407825.753:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8434 comm="syz.4.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 271.754025][ T51] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 271.788003][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.917037][ T51] usb 5-1: Product: syz [ 272.561740][ T51] usb 5-1: Manufacturer: syz [ 272.566561][ T51] usb 5-1: SerialNumber: syz [ 273.142889][ T51] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.273748][ T5873] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.211338][ T8459] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 274.369023][ T5873] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 274.388343][ T5873] ath9k_htc: Failed to initialize the device [ 274.446522][ T5873] usb 5-1: ath9k_htc: USB layer deinitialized [ 275.128634][ T5902] usb 5-1: USB disconnect, device number 6 [ 277.571785][ T8498] Invalid ELF header magic: != ELF [ 278.673752][ T8517] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 280.996613][ T8543] netlink: 'syz.3.771': attribute type 4 has an invalid length. [ 281.416319][ T8553] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.424983][ T8553] overlayfs: failed to set xattr on upper [ 281.468113][ T8553] overlayfs: ...falling back to redirect_dir=nofollow. [ 282.189183][ T8553] overlayfs: ...falling back to index=off. [ 282.195273][ T8553] overlayfs: ...falling back to uuid=null. [ 285.208433][ T8591] Driver unsupported XDP return value 0 on prog (id 199) dev N/A, expect packet loss! [ 285.575185][ T8603] syz.3.790[8603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.575635][ T8603] syz.3.790[8603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.587780][ T8603] syz.3.790[8603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.457451][ T8605] kAFS: unable to lookup cell '/yz1' [ 288.288951][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 288.288972][ T29] audit: type=1800 audit(1737407842.683:170): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.798" name="bus" dev="overlay" ino=976 res=0 errno=0 [ 288.479825][ T8625] ebtables: ebtables: counters copy to user failed while replacing table [ 289.844087][ T8636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.727360][ T29] audit: type=1804 audit(1737407850.153:171): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.817" name="/newroot/156/bus/file1" dev="overlay" ino=873 res=1 errno=0 [ 295.848246][ T29] audit: type=1326 audit(1737407850.273:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 295.937635][ T29] audit: type=1326 audit(1737407850.273:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 295.993298][ T29] audit: type=1326 audit(1737407850.273:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 295.996435][ T8683] virt_wifi0 speed is unknown, defaulting to 1000 [ 296.017164][ T29] audit: type=1326 audit(1737407850.273:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 296.143892][ T29] audit: type=1326 audit(1737407850.273:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 296.272914][ T29] audit: type=1326 audit(1737407850.273:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 296.294603][ T6857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.305961][ T29] audit: type=1326 audit(1737407850.273:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 296.327481][ T29] audit: type=1326 audit(1737407850.313:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 296.353232][ T29] audit: type=1326 audit(1737407850.313:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 300.752891][ T8742] delete_channel: no stack [ 301.183779][ T8740] delete_channel: no stack [ 301.291213][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 302.733135][ T8752] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.838' sets config #0 [ 302.760535][ T8752] usb usb1: usbfs: process 8752 (syz.2.838) did not claim interface 0 before use [ 304.564866][ T8776] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 306.099717][ T8785] Process accounting resumed [ 306.107644][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 306.107659][ T29] audit: type=1804 audit(1737407860.533:190): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.847" name="/newroot/47/bus/bus" dev="overlay" ino=286 res=1 errno=0 [ 310.642921][ T29] audit: type=1800 audit(1737407865.073:191): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.856" name="/" dev="fuse" ino=0 res=0 errno=0 [ 310.804232][ T8830] netlink: 'syz.6.858': attribute type 3 has an invalid length. [ 310.827315][ T8830] netlink: 224 bytes leftover after parsing attributes in process `syz.6.858'. [ 312.473931][ T8863] syz.6.866[8863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.474023][ T8863] syz.6.866[8863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.485490][ T8863] syz.6.866[8863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.384021][ T29] audit: type=1326 audit(1737407867.813:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 313.472107][ T29] audit: type=1326 audit(1737407867.813:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 313.730715][ T29] audit: type=1326 audit(1737407867.813:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 313.883032][ T29] audit: type=1326 audit(1737407867.813:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.072013][ T29] audit: type=1326 audit(1737407867.813:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.215449][ T29] audit: type=1326 audit(1737407867.853:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.300303][ T29] audit: type=1326 audit(1737407867.853:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.325292][ T29] audit: type=1326 audit(1737407867.853:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.421337][ T29] audit: type=1326 audit(1737407867.853:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.467284][ T29] audit: type=1326 audit(1737407867.853:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8869 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda41b85d29 code=0x7ffc0000 [ 314.484076][ T8890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 314.826044][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 314.843452][ T8896] xt_connbytes: Forcing CT accounting to be enabled [ 317.415636][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.425113][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.150448][ T8955] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 324.755392][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.904'. [ 325.261031][ T8996] netlink: 56 bytes leftover after parsing attributes in process `syz.2.905'. [ 325.276116][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 325.860924][ T8999] netlink: 550 bytes leftover after parsing attributes in process `syz.3.907'. [ 327.614757][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 327.799492][ T5872] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 327.818482][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.827131][ T5872] usb 3-1: Product: syz [ 327.838851][ T5872] usb 3-1: Manufacturer: syz [ 327.843757][ T9026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.916'. [ 327.858877][ T5872] usb 3-1: SerialNumber: syz [ 327.868923][ T5872] usb 3-1: config 0 descriptor?? [ 327.901299][ T5824] Bluetooth: hci6: sending frame failed (-49) [ 327.911722][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 327.998902][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 328.153176][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.165716][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.179205][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 328.188415][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 328.197500][ T9] usb 6-1: SerialNumber: syz [ 328.299044][ T6870] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 328.428386][ T9] usb 6-1: 0:2 : does not exist [ 328.447980][ T5872] usb-storage 3-1:0.0: USB Mass Storage device detected [ 328.456159][ T9] usb 6-1: unit 5: unexpected type 0x0d [ 328.498145][ T9] usb 6-1: USB disconnect, device number 5 [ 328.577415][ T5872] usb 3-1: USB disconnect, device number 6 [ 328.754488][ T6237] udevd[6237]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.421323][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 332.304455][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 332.604949][ T9074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 332.653185][ T9074] batman_adv: batadv0: Adding interface: ip6gretap1 [ 332.660040][ T9074] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.830814][ T9074] batman_adv: batadv0: Interface activated: ip6gretap1 [ 333.048647][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 333.601883][ T9074] batadv0: mtu less than device minimum [ 333.609868][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.623340][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.636001][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.648706][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.661494][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.674163][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.686937][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.699688][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.712297][ T9074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.777495][ T9079] batman_adv: batadv0: Interface deactivated: dummy0 [ 333.784735][ T9079] batman_adv: batadv0: Removing interface: dummy0 [ 333.853435][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.919283][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.004581][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.674751][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.727420][ T9079] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 334.739989][ T9079] batman_adv: batadv0: Removing interface: ip6gretap1 [ 337.778591][ T9115] NILFS (loop5): device size too small [ 338.117805][ T9117] Attempt to restore checkpoint with obsolete wellknown handles [ 340.712365][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 340.712383][ T29] audit: type=1800 audit(1737407895.133:219): pid=9151 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.953" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 342.258903][ T2162] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 342.418977][ T2162] usb 5-1: Using ep0 maxpacket: 32 [ 342.431023][ T2162] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 342.594675][ T2162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.522711][ T2162] usb 5-1: Product: syz [ 343.526942][ T2162] usb 5-1: Manufacturer: syz [ 343.531618][ T2162] usb 5-1: SerialNumber: syz [ 343.649060][ T30] INFO: task kworker/u8:18:6865 blocked for more than 143 seconds. [ 343.910840][ T2162] usb 5-1: can't set config #1, error -71 [ 344.157846][ T30] Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 344.220157][ T2162] usb 5-1: USB disconnect, device number 7 [ 344.314728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.403267][ T30] task:kworker/u8:18 state:D stack:22384 pid:6865 tgid:6865 ppid:2 flags:0x00004000 [ 344.522219][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 344.550635][ T30] Call Trace: [ 344.561514][ T30] [ 344.565158][ T30] __schedule+0x17fb/0x4be0 [ 344.574733][ T30] ? __pfx___schedule+0x10/0x10 [ 344.583774][ T30] ? __pfx_lock_release+0x10/0x10 [ 344.596459][ T30] ? schedule+0x90/0x320 [ 344.602445][ T30] ? wq_worker_sleeping+0x66/0x240 [ 344.607741][ T30] ? schedule+0x90/0x320 [ 344.626418][ T30] schedule+0x14b/0x320 [ 344.718956][ T30] bit_wait+0x12/0xd0 [ 344.723100][ T30] __wait_on_bit+0xb0/0x2f0 [ 344.732410][ T30] ? __pfx_bit_wait+0x10/0x10 [ 344.737148][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 344.742738][ T30] ? __pfx_bit_wait+0x10/0x10 [ 344.747441][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 344.754584][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 344.760141][ T30] ? __pfx_validate_chain+0x10/0x10 [ 344.766499][ T30] netfs_retry_writes+0x16e/0x19b0 [ 344.771749][ T30] ? __pfx_validate_chain+0x10/0x10 [ 344.777142][ T30] ? mark_lock+0x9a/0x360 [ 344.781596][ T30] ? __lock_acquire+0x1397/0x2100 [ 344.786730][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 344.955339][ T29] audit: type=1326 audit(1737407899.363:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9180 comm="syz.5.963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f848e585d29 code=0x0 [ 345.443035][ T30] ? look_up_lock_class+0x77/0x170 [ 345.448215][ T30] ? register_lock_class+0x102/0x980 [ 345.483461][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 345.510696][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 345.517772][ T30] ? process_scheduled_works+0x976/0x1840 [ 345.529050][ T30] process_scheduled_works+0xa66/0x1840 [ 345.534765][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.541289][ T30] ? assign_work+0x364/0x3d0 [ 345.546013][ T30] worker_thread+0x870/0xd30 [ 345.551298][ T30] ? __kthread_parkme+0x169/0x1d0 [ 345.556442][ T30] ? __pfx_worker_thread+0x10/0x10 [ 345.562097][ T30] kthread+0x2f0/0x390 [ 345.566275][ T30] ? __pfx_worker_thread+0x10/0x10 [ 345.572821][ T30] ? __pfx_kthread+0x10/0x10 [ 345.577532][ T30] ret_from_fork+0x4b/0x80 [ 345.582670][ T30] ? __pfx_kthread+0x10/0x10 [ 345.587366][ T30] ret_from_fork_asm+0x1a/0x30 [ 345.592761][ T30] [ 345.595974][ T30] [ 345.595974][ T30] Showing all locks held in the system: [ 345.609393][ T30] 1 lock held by khungtaskd/30: [ 345.614359][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 345.632429][ T30] 2 locks held by kworker/u8:3/52: [ 345.637726][ T30] #0: ffff8880b863e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 345.647884][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x387/0x7a0 [ 345.659835][ T30] 2 locks held by getty/5576: [ 345.664620][ T30] #0: ffff88803130b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 345.681543][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 345.696924][ T30] 2 locks held by kworker/u8:11/6845: [ 345.702800][ T30] #0: ffff88801c7bd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 345.714581][ T30] #1: ffffc9000bcffd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 345.735848][ T30] 2 locks held by kworker/u8:18/6865: [ 345.741804][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 345.754005][ T30] #1: ffffc90005abfd00 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 345.766012][ T30] 2 locks held by kworker/u8:22/6873: [ 345.771427][ T30] #0: ffff88801c7bd148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 345.783153][ T30] #1: ffffc9000cba7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 345.795324][ T30] 2 locks held by syz.0.463/7465: [ 345.800673][ T30] #0: ffff8880271d4420 (sb_writers#16){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x220 [ 345.810652][ T30] #1: ffff888076249498 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 345.821997][ T30] [ 345.824902][ T30] ============================================= [ 345.824902][ T30] [ 345.833727][ T30] NMI backtrace for cpu 1 [ 345.838078][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 345.848233][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 345.858558][ T30] Call Trace: [ 345.861827][ T30] [ 345.864760][ T30] dump_stack_lvl+0x241/0x360 [ 345.869459][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.874650][ T30] ? __pfx__printk+0x10/0x10 [ 345.879249][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 345.884195][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 345.889653][ T30] ? _printk+0xd5/0x120 [ 345.893818][ T30] ? __pfx__printk+0x10/0x10 [ 345.898401][ T30] ? __wake_up_klogd+0xcc/0x110 [ 345.903248][ T30] ? __pfx__printk+0x10/0x10 [ 345.907830][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 345.912847][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 345.918822][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 345.924803][ T30] watchdog+0xff6/0x1040 [ 345.929133][ T30] ? watchdog+0x1ea/0x1040 [ 345.933550][ T30] ? __pfx_watchdog+0x10/0x10 [ 345.938247][ T30] kthread+0x2f0/0x390 [ 345.942318][ T30] ? __pfx_watchdog+0x10/0x10 [ 345.946988][ T30] ? __pfx_kthread+0x10/0x10 [ 345.951571][ T30] ret_from_fork+0x4b/0x80 [ 345.955976][ T30] ? __pfx_kthread+0x10/0x10 [ 345.960564][ T30] ret_from_fork_asm+0x1a/0x30 [ 345.965334][ T30] [ 345.969084][ T30] Sending NMI from CPU 1 to CPUs 0: [ 345.974334][ C0] NMI backtrace for cpu 0 [ 345.974354][ C0] CPU: 0 UID: 0 PID: 6857 Comm: kworker/u8:15 Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 345.974370][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 345.974380][ C0] Workqueue: bat_events batadv_nc_worker [ 345.974405][ C0] RIP: 0010:__lock_acquire+0xae7/0x2100 [ 345.974424][ C0] Code: 84 07 19 90 e8 3a 9e 88 00 48 ba 00 00 00 00 00 fc ff df e9 3a fe ff ff 8b 44 24 28 38 44 24 6c 4c 8b 6c 24 40 4c 8b 7c 24 10 <4c> 8b 64 24 48 76 37 e8 1d 56 3d 03 48 ba 00 00 00 00 00 fc ff df [ 345.974436][ C0] RSP: 0018:ffffc9000bcbf8f0 EFLAGS: 00000097 [ 345.974448][ C0] RAX: 0000000030064605 RBX: ffffffff93c53910 RCX: ffffffff817ab442 [ 345.974459][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff94280968 [ 345.974470][ C0] RBP: 0000000000000000 R08: ffffffff9428096f R09: 1ffffffff285012d [ 345.974480][ C0] R10: dffffc0000000000 R11: fffffbfff285012e R12: 0000000000000002 [ 345.974490][ C0] R13: ffff888030063c00 R14: 0000000000000002 R15: ffff888030064750 [ 345.974501][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 345.974513][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.974524][ C0] CR2: 00007fda41d47ab8 CR3: 0000000033642000 CR4: 00000000003526f0 [ 345.974537][ C0] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 345.974546][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 345.974555][ C0] Call Trace: [ 345.974561][ C0] [ 345.974567][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 345.974588][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 345.974604][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 345.974630][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 345.974649][ C0] ? nmi_handle+0x14f/0x5a0 [ 345.974665][ C0] ? nmi_handle+0x2a/0x5a0 [ 345.974680][ C0] ? __lock_acquire+0xae7/0x2100 [ 345.974694][ C0] ? default_do_nmi+0x63/0x160 [ 345.974714][ C0] ? exc_nmi+0x123/0x1f0 [ 345.974732][ C0] ? end_repeat_nmi+0xf/0x53 [ 345.974751][ C0] ? __lock_acquire+0x8a2/0x2100 [ 345.974767][ C0] ? __lock_acquire+0xae7/0x2100 [ 345.974782][ C0] ? __lock_acquire+0xae7/0x2100 [ 345.974797][ C0] ? __lock_acquire+0xae7/0x2100 [ 345.974811][ C0] [ 345.974817][ C0] [ 345.974828][ C0] lock_acquire+0x1ed/0x550 [ 345.974843][ C0] ? batadv_nc_worker+0xcb/0x610 [ 345.974863][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 345.974878][ C0] ? batadv_nc_worker+0xcb/0x610 [ 345.974897][ C0] ? __pfx_lock_release+0x10/0x10 [ 345.974913][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.974930][ C0] batadv_nc_worker+0xec/0x610 [ 345.974948][ C0] ? batadv_nc_worker+0xcb/0x610 [ 345.974966][ C0] ? batadv_nc_worker+0xcb/0x610 [ 345.974984][ C0] ? process_scheduled_works+0x976/0x1840 [ 345.975005][ C0] process_scheduled_works+0xa66/0x1840 [ 345.975034][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.975056][ C0] ? assign_work+0x364/0x3d0 [ 345.975077][ C0] worker_thread+0x870/0xd30 [ 345.975094][ C0] ? __kthread_parkme+0x169/0x1d0 [ 345.975109][ C0] ? __pfx_worker_thread+0x10/0x10 [ 345.975122][ C0] kthread+0x2f0/0x390 [ 345.975137][ C0] ? __pfx_worker_thread+0x10/0x10 [ 345.975149][ C0] ? __pfx_kthread+0x10/0x10 [ 345.975164][ C0] ret_from_fork+0x4b/0x80 [ 345.975182][ C0] ? __pfx_kthread+0x10/0x10 [ 345.975197][ C0] ret_from_fork_asm+0x1a/0x30 [ 345.975221][ C0] [ 345.977644][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 346.316758][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-00164-g100ceb4817a2 #0 [ 346.326907][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 346.336959][ T30] Call Trace: [ 346.340244][ T30] [ 346.343171][ T30] dump_stack_lvl+0x241/0x360 [ 346.347846][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.353043][ T30] ? __pfx__printk+0x10/0x10 [ 346.357624][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 346.363627][ T30] ? vscnprintf+0x5d/0x90 [ 346.368043][ T30] panic+0x349/0x880 [ 346.371933][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 346.378106][ T30] ? __pfx_panic+0x10/0x10 [ 346.382516][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 346.388491][ T30] ? __irq_work_queue_local+0x137/0x410 [ 346.394030][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 346.399395][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 346.405547][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 346.411699][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 346.417849][ T30] watchdog+0x1035/0x1040 [ 346.422172][ T30] ? watchdog+0x1ea/0x1040 [ 346.426581][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.431249][ T30] kthread+0x2f0/0x390 [ 346.435309][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.439990][ T30] ? __pfx_kthread+0x10/0x10 [ 346.444576][ T30] ret_from_fork+0x4b/0x80 [ 346.448985][ T30] ? __pfx_kthread+0x10/0x10 [ 346.453568][ T30] ret_from_fork_asm+0x1a/0x30 [ 346.458346][ T30] [ 346.461603][ T30] Kernel Offset: disabled [ 346.465915][ T30] Rebooting in 86400 seconds..