last executing test programs: 17m41.498540805s ago: executing program 1 (id=60): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045730, &(0x7f0000001080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) 17m39.26759833s ago: executing program 1 (id=62): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000014c0), 0x101202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 17m32.457421945s ago: executing program 1 (id=68): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)}}], 0x1, 0x24000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d480e8b089b3f350068090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e8040000005802b77f07227227b7fa67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e9871540000000000004ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e4843e2808d4743b95bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c6f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20e8911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab9d6203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edcad74b221cfec48000000000000000d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea50000000000000068987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c10900df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d8008d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78bb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bf340b17cfcfd9c52c9711937f79abb1a124f121fc65483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8650000878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95a498b562d71565f924779ca1f731b3346ff177050373d79ff7bc1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f79a598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015a08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b686081b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24ae918423922e4e0167584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f13a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307f561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) gettid() timer_create(0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) connect$pptp(r2, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6(0xa, 0x3, 0x2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r3, 0x2007ffb) syz_socket_connect_nvme_tcp() 17m25.529350079s ago: executing program 1 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0x8000000000000000, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000980)={{r3}, r5, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x5, 0xc18, {0x8, 0x6, 0xc, 0xfffffffffffffa4b, 0x7fff}, [0x3214]}}, @devid=r6}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000880)={{}, r5, 0x14, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x8, {0x3d, 0x6, 0x4, 0x400, 0x7}, [0x6, 0x9]}}, @name="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"}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 17m21.287024129s ago: executing program 1 (id=82): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0]) syz_open_dev$vim2m(0x0, 0xa57b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b5000040"]) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, 0x0) 17m18.627958804s ago: executing program 1 (id=85): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x62a10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x13, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 17m0.911830371s ago: executing program 32 (id=85): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x62a10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x13, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 16m49.531614717s ago: executing program 4 (id=114): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x10) 16m47.513901284s ago: executing program 4 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2d, 0x0, 0x0, @local}}, 0x42) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0xffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2e}, 0x14}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x1f, 0x0, &(0x7f0000000140)) 16m46.209119753s ago: executing program 4 (id=119): socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_pidfd_open(r1, 0x0) keyctl$session_to_parent(0x12) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0x1}], 0x1) dup3(r4, r7, 0x6700000000000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r0, 0x0, 0x400000001, 0x3) 16m44.969369109s ago: executing program 4 (id=121): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0x2664, 0x2, 0x2, 0x25f, 0x0, r0}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x400002, 0x0, 0x2}, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f0000000040)='()-+{\x00', 0x40, 0x10, &(0x7f0000000080)={0x3, 0x4000000, 0x1, 0x7a8}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8001) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x2, 0x9) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x282}, "2b47b51f5f3bfb00", "e031965d2d1dfb7a6aff63869597c6c1", "68df3b1c", "2aeacfefb488b663"}, 0x28) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) close_range(r2, r3, 0x2) 16m43.443075009s ago: executing program 4 (id=123): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f00000003c0)={'L+'}, 0x16, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x33, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000280)='\x00N35', 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) getsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000100), &(0x7f0000000740)=0x4) socket(0x400000000010, 0x3, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) timer_settime(0x0, 0x1, 0x0, 0x0) 16m36.533473723s ago: executing program 4 (id=131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4712, 0x1032c0) close_range(r0, r8, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 16m17.111260685s ago: executing program 33 (id=131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4712, 0x1032c0) close_range(r0, r8, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 15m54.307744181s ago: executing program 0 (id=161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 15m48.85715755s ago: executing program 0 (id=164): socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/83) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r5, &(0x7f0000002440)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}, {&(0x7f0000000cc0)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129851c8070000000000000005d4b034d0ce1f6e0be5b65e1ea3aab64fb19483ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40fa02b2a7b3f179ac1d1c332424093c93924b0fb97f23a2ce3a5ffd46a4ca58d205e8263de6c8f35ae0bdf26e7665d4521dc583997930691d414e950900194775678184d57e2a7bfbbb812ed678dee3f02a1c54cfd4c2faee9cd398d28b9f4f5fb8eb0290290399155c805fc6c3f6329e625d718b0215af67c4482ab8af756b973664ab0a372ecea980cf89a63de97a4f0721aab97a9", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae21c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e387f629ad9defaffa365aaf37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba14", 0x78}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000002500)="b85a302756b5c983924c342778e000aa1707d581478a9fc2db3eb7bb6c82e757c981749d65c93373f6549b488c1d2a4482dbbe77a836e6bd114cf72569cff1b57bc9054f77729d58073686e6fd5b1c92c883cdebfda1463120d2356e16d7cb26624ea547aea16f78ce1cd3c83041147ad29c7994a42c185bbeaa2b209232379157c4efcb82d1d1b1368cb36504f089940aa15f7351221d03d900d329d9019d343e39b49e6acb0bd17a95940f91a3a783f10b828fe8d260bf7600cc87f78a6dccaaa741bb90a1fc4ce4173068f3e3293db23abdf1c488ed70954d1fcafcae8cfe29c52384891d916f45ca246afbe2f81035ea92cf94145d43", 0xf8}, {&(0x7f0000000200)="db328433d8cfa472e00d6224a3fd8b1ce74f128f58df0bf2dd0c555b399256c989a373083e1245810b2661686c82667e784b508659132a8f", 0x38}], 0x8}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686c", 0x64}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(r5, &(0x7f0000000300), 0x5b0) 15m44.486426278s ago: executing program 0 (id=169): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ffffe, 0x8d, &(0x7f0000000040)) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket(0x1a, 0x7, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)) 15m42.466432257s ago: executing program 0 (id=171): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000", 0xc, 0xfffffffffffffffd) pread64(r0, &(0x7f0000000180), 0x0, 0x7fff) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x7, &(0x7f0000000100)={0x0, 0x34, 0x2, @tid=r5}, &(0x7f0000000180)) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e0003000100", 0x6) 15m39.509323285s ago: executing program 0 (id=173): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000480)=ANY=[]) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{0x0}, {&(0x7f00000024c0)=""/225, 0xe1}, {0x0}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 15m38.698977443s ago: executing program 0 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x800) mlockall(0x7) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) mlockall(0x7) 15m22.800934524s ago: executing program 34 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x800) mlockall(0x7) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) mlockall(0x7) 5m26.987627909s ago: executing program 2 (id=711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000a40)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x1008}, {&(0x7f00000006c0)=""/96, 0x60}], 0x2}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r6, r8, r9) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100040000000000040004000000000008000000", @ANYRES32=r9, @ANYBLOB="10000100000080df20"], 0x2c, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="a29a5a0e76cc809932179755a86c08e5d70d3acb907e2c30e10fe263be7b0bb36908a08e928a607c619b9eeba4ba7bdc53dd607a1f634f2d1c5467872e6216fbef33a484d28f27448777624b44521e120103435858aee0fd81f39c57523c9e08b6ecd2fbb16a089b5a6dff16eac24d654e4c9239d71cf972272b44f857e5953efda0d03c0e436e0b1978a14de1201d3f0556e95208629381d15193a46b7f5b749cd276835d53855d8639b38017da0776a4dc", 0xb2}, {&(0x7f0000000180)="d2d47e2bd71af658438cfa09cfe24fc131787cd4635ca6d031f56b5d300879b08f55f89f9b1db3afd48273885b51bd4687126a8f56eccd1c1ac73945e92b979cbf908a8e4a73d0ed13af0f2fc28e8f20af86fcc0b3257f5a8739e04d3cf1191661aa4aab344f23d002ece5be40b0452764d1bf86f43d", 0x76}, {&(0x7f00000003c0)="1715c70d21a7402d8140ef1c08b92a3faef7e672f8bae6078211eca51e9ca8b518c82a010dba01fdbbdbd0b01e00bab96f933956ed7fc5897bc7e89c396032ec0bda96087d5613ad4007e2e844fd18acbd6977f1ace31ac947b4cd9574edf758fc46928c9fb582c6bd64fee16752e649c7e53ee458f7492626b20ae5daaa7e51b4b8aa02b8f080e3d75a0a327b885f66c36ac1e38bd6376580c78bf91b037f1a3cb5392e9155b2765965f908e0c12225522ebdc1771c82594b2f8f505ce75fc1f8fc2ea7c835865d3012c18ff42b42c901eeb93e2e4382c785c026332ced2479998b4567d7c74a5dbec4fe0dff79958487d1df", 0xf3}, {&(0x7f00000004c0)="6a7bd6f3852e2955c6c4c0a9c61b0eb6830e4c9875f4475ffa4714a9bc51b37d8e6e0b9d9b597d049ca4c38b119326c58af9686e01137f26140867ba63840f83868297eef36806c76dc39e46a074217efdf1ba5cd7ca00f7dc3ea075e3379610e1732aa1a381d4e9b794891047d86ccb476af76408341ca24f0e53ec7a37117244aa0b44dc612caba4055bc8e9823cb1a62a24a7a5a63c2ce71d5a6ba47dfe695a897e32c70a49654aaccc12b7541d63f230d7a8f2cff273e9155939550a6b9f98218273de9a56c2e140645884a714807f16db1d8022f5c766ba3594cea52b25880bbab74c75100b054a40a5cb0cefa5165646b097402984", 0xf8}, {&(0x7f0000000240)="a25a28b798f8c2da92285bb3cfaa8befe401e8745a88c073758ea3e1d82a4937480418d8543d9678dcef62c2647ac1815a92e7e9503c1ef999e80f2a6b184bb3f34da022467410f629222693daae4ee8b5f6549e26e531cc4223428cd7c95aa85c8650b949e2ceb0415115b81ceaf354", 0x70}, {&(0x7f0000000600)="9a90601b0c076212081643046337382d3ae4a53d66bce9", 0x17}, {&(0x7f0000000640)="ecc5f5bfee665586815445ed3d0ca826a33cdd9e5da7a5c8e5025bcd74191b73e0968695ab086065c5e9c7fd6f72c9b4028957e2260a971dd1aab244a99e6d66add1eb7e6a0f5228d39b091cd6f4fdb9ada57904f6b4d3ef02c6ea8a", 0x5c}, {&(0x7f00000006c0)="4566efcc4d5eb26ea83a6ce38d042d7bb03b99c12b6b17c2de1fcd14fc4fe5b1d6f9", 0x22}, {&(0x7f0000000700)}], 0x9, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [r3, r3, r3, 0xffffffffffffffff, r1, r3, r1, r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r9}}}], 0x98, 0x4000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r10 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000a80)={0x4000, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 5m23.782642269s ago: executing program 2 (id=714): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80f0f004, 0x1}) 5m23.086006342s ago: executing program 2 (id=715): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000100)}}], 0x1, 0x4000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) 5m21.275861422s ago: executing program 2 (id=719): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x11, 0x66, 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40801) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x40946400, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg(r6, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) preadv(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/43, 0x2b}], 0x1, 0x101, 0x5) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000080)=0x16) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000000)={0x760a, 0x80000000, 0x3, 0xb, 0x6, "45c30fd7ec3df0fad8d2e350a35670f9c0aab5"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)) dup2(r8, 0xffffffffffffffff) 5m15.258986194s ago: executing program 2 (id=725): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m15.190812927s ago: executing program 2 (id=726): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m58.99854988s ago: executing program 35 (id=726): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m11.091718901s ago: executing program 7 (id=1127): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2m10.490259679s ago: executing program 7 (id=1130): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x5, 0x3, "70017f", "aefa23", 0xa, 0x8, 0xe9, @any, 0x7, 0x3, 0x6, 0x3, 0x11, 0x8, 0x7}}}, 0x1d) 2m10.060315304s ago: executing program 7 (id=1134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x2}) 2m9.862290881s ago: executing program 8 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x4, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setrlimit(0x1, &(0x7f0000000280)={0x4, 0x697}) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0x30000000}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0x5, 0x8, '\x00', 0x1, &(0x7f00000000c0)=[0x0]}) 2m7.608862237s ago: executing program 7 (id=1137): r0 = syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x80, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0xba, 0x54}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x1d, 0x6, {0x7, 0x25, 0x1, 0x82, 0x3, 0x4}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x13, &(0x7f0000000180)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x1, 0x7, 0x1, 0x8}, @generic={0x3, 0x10, 0x4}]}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m7.133305405s ago: executing program 8 (id=1140): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) 2m4.543074225s ago: executing program 8 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 2m3.719282701s ago: executing program 7 (id=1146): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x30, 0x5, {0x5, 0x8, "271edf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m3.703830828s ago: executing program 8 (id=1147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 2m2.769449547s ago: executing program 8 (id=1149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0x8000000000000000, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000980)={{r3}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x5, 0xc18, {0x8, 0x6, 0xc, 0xfffffffffffffa4b, 0x7fff}, [0x3214]}}, @devid=r5}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000880)={{}, 0x0, 0x14, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x8, {0x3d, 0x6, 0x4, 0x400, 0x7}, [0x6, 0x9]}}, @name="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"}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1m48.518578398s ago: executing program 7 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0x1, 0x7}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 1m34.083596197s ago: executing program 5 (id=1152): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1m33.065133989s ago: executing program 3 (id=1153): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x40, 0x6}, 0x0, 0x0}) 1m32.425725835s ago: executing program 36 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0x1, 0x7}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 1m30.519687454s ago: executing program 37 (id=1149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0x8000000000000000, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000980)={{r3}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x5, 0xc18, {0x8, 0x6, 0xc, 0xfffffffffffffa4b, 0x7fff}, [0x3214]}}, @devid=r5}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000880)={{}, 0x0, 0x14, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x8, {0x3d, 0x6, 0x4, 0x400, 0x7}, [0x6, 0x9]}}, @name="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"}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1m21.707520344s ago: executing program 3 (id=1158): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001300)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}}, 0x0) 1m21.580248773s ago: executing program 5 (id=1159): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) 1m20.752180118s ago: executing program 3 (id=1160): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m20.632408159s ago: executing program 5 (id=1161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1m19.881380657s ago: executing program 5 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc, 0x2}}}}}]}}]}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 1m17.292516436s ago: executing program 3 (id=1163): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x8, 0x9, 0xace8, 0x8023450, "856d7ab700", 0x6, 0x9, 0x2, 0x5, 0x2, 0x2, 0x4}) 1m15.138518671s ago: executing program 5 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 1m15.056136628s ago: executing program 3 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1m14.560498863s ago: executing program 5 (id=1166): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(r0, 0x5406, 0x0) 1m14.381886919s ago: executing program 3 (id=1167): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) 53.669665629s ago: executing program 38 (id=1166): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(r0, 0x5406, 0x0) 52.677803674s ago: executing program 39 (id=1167): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) 33.611942864s ago: executing program 6 (id=1177): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x7, 0x2, 0x8}}) 23.601779956s ago: executing program 6 (id=1178): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}], 0x1}) 21.965853554s ago: executing program 6 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x54, r1, 0x101, 0x70bd2a, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) 17.94859959s ago: executing program 6 (id=1180): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) getpeername$inet6(r0, 0x0, &(0x7f00000000c0)) 15.908366436s ago: executing program 6 (id=1181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) 15.470855772s ago: executing program 6 (id=1182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000108, 0x0, 0x101}]}) 0s ago: executing program 40 (id=1182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000108, 0x0, 0x101}]}) kernel console output (not intermixed with test programs): 9 > 2 [ 540.459697][ T6054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.477534][ T5856] Bluetooth: hci1: command tx timeout [ 544.742594][ T5856] Bluetooth: hci1: command tx timeout [ 545.042507][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 546.052795][ T6054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.807120][ T5856] Bluetooth: hci1: command tx timeout [ 546.917072][ T6099] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 548.675943][ T6099] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 548.676020][ T6099] usb 4-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.676044][ T6099] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 548.676092][ T6099] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 548.676116][ T6099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.877725][ T5856] Bluetooth: hci1: command tx timeout [ 549.406655][ T7679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.462114][ T6054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.797350][ T6099] usb 4-1: can't set config #4, error -71 [ 550.827822][ T6099] usb 4-1: USB disconnect, device number 4 [ 552.965110][ T7693] netlink: 'syz.3.358': attribute type 8 has an invalid length. [ 553.564283][ T6054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.841463][ T7553] chnl_net:caif_netlink_parms(): no params data found [ 554.851345][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 556.359215][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 556.468082][ T7713] syz.3.362 uses obsolete (PF_INET,SOCK_PACKET) [ 557.024027][ T37] audit: type=1326 audit(1757318635.366:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7712 comm="syz.3.362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b744debe9 code=0x0 [ 558.540831][ T7721] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 562.377209][ T6103] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 562.547052][ T6103] usb 3-1: Using ep0 maxpacket: 32 [ 563.940262][ T6103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.940298][ T6103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.940338][ T6103] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 563.940361][ T6103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.946344][ T6103] usb 3-1: config 0 descriptor?? [ 564.031151][ T6103] usbhid 3-1:0.0: can't add hid device: -71 [ 564.031461][ T6103] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 564.054573][ T6103] usb 3-1: USB disconnect, device number 3 [ 564.253178][ T7510] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 564.864043][ T7746] evm: overlay not supported [ 566.111116][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.368'. [ 567.113318][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 567.133094][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 567.152921][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 567.156768][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 567.174601][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.409247][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.409410][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.409685][ T7553] bridge_slave_0: entered allmulticast mode [ 567.418337][ T7553] bridge_slave_0: entered promiscuous mode [ 567.451360][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.451644][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.451929][ T7553] bridge_slave_1: entered allmulticast mode [ 567.455285][ T7553] bridge_slave_1: entered promiscuous mode [ 568.804726][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.804847][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.403444][ T5856] Bluetooth: hci5: command tx timeout [ 570.419139][ T6054] bridge_slave_1: left allmulticast mode [ 570.419300][ T6054] bridge_slave_1: left promiscuous mode [ 570.424546][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.476729][ T7781] NILFS (nullb0): couldn't find nilfs on the device [ 571.822171][ T6054] bridge_slave_0: left allmulticast mode [ 571.822212][ T6054] bridge_slave_0: left promiscuous mode [ 571.822548][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.823256][ T5856] Bluetooth: hci5: command tx timeout [ 573.398315][ T6054] bridge_slave_1: left allmulticast mode [ 573.398358][ T6054] bridge_slave_1: left promiscuous mode [ 573.398672][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.605277][ T6054] bridge_slave_0: left allmulticast mode [ 573.605316][ T6054] bridge_slave_0: left promiscuous mode [ 573.605606][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.915684][ T5856] Bluetooth: hci5: command tx timeout [ 575.449676][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.485546][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.501081][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.507405][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.510500][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.917267][ T5856] Bluetooth: hci5: command tx timeout [ 578.216513][ T5856] Bluetooth: hci2: command tx timeout [ 578.217466][ T7029] IPVS: starting estimator thread 0... [ 578.907190][ T7820] IPVS: using max 5 ests per chain, 12000 per kthread [ 580.237079][ T5856] Bluetooth: hci2: command tx timeout [ 581.947634][ T7832] netlink: 'syz.2.383': attribute type 8 has an invalid length. [ 582.318504][ T5856] Bluetooth: hci2: command tx timeout [ 583.073321][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.102396][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.267500][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.867876][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.121373][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.407184][ T5856] Bluetooth: hci2: command tx timeout [ 585.355975][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.079654][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.206432][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.854797][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.013032][ T7876] netlink: 68 bytes leftover after parsing attributes in process `syz.2.392'. [ 591.887526][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.264850][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.465546][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.502442][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.888652][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.988782][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.599918][ C0] vkms_vblank_simulate: vblank timer overrun [ 594.192467][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.299253][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.718164][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.798575][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.832868][ T6054] bond0 (unregistering): Released all slaves [ 596.356675][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.703465][ T6054] bond0 (unregistering): Released all slaves [ 599.295772][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 599.328273][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 599.334847][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 599.336431][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 599.369136][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 600.976539][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.085958][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.264817][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.538692][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.677673][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.940174][ T59] Bluetooth: hci6: command tx timeout [ 603.955121][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.114041][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.181109][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.686770][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.010050][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.265140][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.749692][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.441821][ T59] Bluetooth: hci6: command tx timeout [ 607.527264][ T7934] program syz.2.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.241900][ T59] Bluetooth: hci6: command tx timeout [ 612.889286][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.941718][ T59] Bluetooth: hci6: command tx timeout [ 613.782067][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.987633][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.069157][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.577470][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.853009][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.003985][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.656506][ T7969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.468289][ T7977] delete_channel: no stack [ 618.244943][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.356624][ T7977] syz.3.414 (7977) used greatest stack depth: 18224 bytes left [ 618.527336][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.617342][ T6054] bond0 (unregistering): Released all slaves [ 618.715290][ T7978] netlink: 'syz.2.413': attribute type 2 has an invalid length. [ 618.776321][ T7553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.182188][ T8023] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 629.691290][ T8023] orangefs_mount: mount request failed with -4 [ 630.252266][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.252351][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.552885][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.570609][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.587854][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.640743][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.641782][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.910028][ T8036] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 631.035958][ T8036] sctp: [Deprecated]: syz.3.424 (pid 8036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.035958][ T8036] Use struct sctp_sack_info instead [ 631.037917][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.628882][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.977993][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.867297][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.324610][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.679986][ T5856] Bluetooth: hci1: command tx timeout [ 634.945384][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.979970][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.035104][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.175299][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.487746][ C1] vkms_vblank_simulate: vblank timer overrun [ 635.862608][ T5856] Bluetooth: hci1: command tx timeout [ 637.917257][ T5856] Bluetooth: hci1: command tx timeout [ 639.249925][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 639.396869][ T8070] tmpfs: Bad value for 'mpol' [ 640.231990][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.241798][ T5853] Bluetooth: hci1: command tx timeout [ 640.248495][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.250000][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.252174][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.486657][ T8070] syz.2.432 (8070) used greatest stack depth: 18096 bytes left [ 642.316993][ T5852] Bluetooth: hci3: command tx timeout [ 644.511498][ T5852] Bluetooth: hci3: command tx timeout [ 644.562041][ T37] audit: type=1326 audit(1757318727.884:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8087 comm="syz.2.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c3ef2ebe9 code=0x0 [ 648.347007][ T5852] Bluetooth: hci3: command tx timeout [ 650.370829][ T8108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 650.370903][ T8108] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 650.371279][ T8108] vhci_hcd vhci_hcd.0: Device attached [ 650.397061][ T5852] Bluetooth: hci3: command tx timeout [ 650.779526][ T5930] vhci_hcd: vhci_device speed not set [ 650.840598][ T5930] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 650.991971][ T8112] vhci_hcd: connection reset by peer [ 651.044125][ T1499] vhci_hcd: stop threads [ 651.044184][ T1499] vhci_hcd: release socket [ 651.122401][ T1499] vhci_hcd: disconnect device [ 651.705280][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.433237][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.127339][ T5930] vhci_hcd: vhci_device speed not set [ 657.669582][ T8141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.241213][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 659.274388][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 659.292795][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 659.294742][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 659.300785][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 661.538969][ T5852] Bluetooth: hci7: command tx timeout [ 661.601432][ T6054] hsr_slave_0: left promiscuous mode [ 663.668383][ T6054] hsr_slave_1: left promiscuous mode [ 663.668554][ T5852] Bluetooth: hci7: command tx timeout [ 663.670917][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.670951][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.838409][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 664.702005][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.702062][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.454775][ T8167] usb usb6: usbfs: process 8167 (syz.3.451) did not claim interface 46 before use [ 666.334011][ T5852] Bluetooth: hci7: command tx timeout [ 666.587045][ T6054] hsr_slave_0: left promiscuous mode [ 668.205359][ T6054] hsr_slave_1: left promiscuous mode [ 668.209017][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.209048][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.402384][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.423488][ T5852] Bluetooth: hci7: command tx timeout [ 668.468525][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.468563][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.780621][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.074946][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.352037][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.924392][ T6054] veth1_macvtap: left promiscuous mode [ 670.924535][ T6054] veth0_macvtap: left promiscuous mode [ 670.924888][ T6054] veth1_vlan: left promiscuous mode [ 670.925126][ T6054] veth0_vlan: left promiscuous mode [ 671.250137][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.449650][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.963438][ T6054] veth1_macvtap: left promiscuous mode [ 672.963584][ T6054] veth0_macvtap: left promiscuous mode [ 672.963932][ T6054] veth1_vlan: left promiscuous mode [ 672.964185][ T6054] veth0_vlan: left promiscuous mode [ 673.185391][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.528522][ T8201] program syz.3.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.579452][ T8200] program syz.3.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 674.653549][ T8200] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 678.870052][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 679.416652][ T37] audit: type=1326 audit(1757318762.764:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8212 comm="syz.2.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c3ef2ebe9 code=0x0 [ 680.568255][ T8221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.462'. [ 682.878331][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 683.415814][ T8229] random: crng reseeded on system resumption [ 685.228289][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 685.457700][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 687.218403][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.225928][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.237173][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.243178][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.248174][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 689.277357][ T5852] Bluetooth: hci2: command tx timeout [ 690.339019][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 690.609540][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 691.383535][ T5852] Bluetooth: hci2: command tx timeout [ 691.697425][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.697518][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.437047][ T5852] Bluetooth: hci2: command tx timeout [ 695.526179][ T5852] Bluetooth: hci2: command tx timeout [ 695.657354][ T8143] chnl_net:caif_netlink_parms(): no params data found [ 696.422877][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 696.442127][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 696.462850][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 696.474915][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 696.500052][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 696.501353][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 696.999699][ T8143] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.999995][ T8143] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.000263][ T8143] bridge_slave_0: entered allmulticast mode [ 697.004737][ T8143] bridge_slave_0: entered promiscuous mode [ 697.055256][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.055448][ T8143] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.055711][ T8143] bridge_slave_1: entered allmulticast mode [ 697.060258][ T8143] bridge_slave_1: entered promiscuous mode [ 697.451844][ T8143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.556410][ T8143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.566725][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.576457][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.576744][ T8232] bridge_slave_0: entered allmulticast mode [ 697.580066][ T8232] bridge_slave_0: entered promiscuous mode [ 697.700541][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.700731][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.701497][ T8232] bridge_slave_1: entered allmulticast mode [ 697.705022][ T8232] bridge_slave_1: entered promiscuous mode [ 697.955340][ T8143] team0: Port device team_slave_0 added [ 698.103248][ T8143] team0: Port device team_slave_1 added [ 698.134694][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.261739][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.480401][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.480422][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.480449][ T8143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.609286][ T8143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.609305][ T8143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.609333][ T8143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.637575][ T5852] Bluetooth: hci1: command tx timeout [ 698.695834][ T8232] team0: Port device team_slave_0 added [ 698.743086][ T8232] team0: Port device team_slave_1 added [ 699.392334][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.392352][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.392380][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.640225][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.640245][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.640274][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.652942][ T8143] hsr_slave_0: entered promiscuous mode [ 699.654368][ T8143] hsr_slave_1: entered promiscuous mode [ 699.887384][ T6054] bridge_slave_1: left allmulticast mode [ 699.887424][ T6054] bridge_slave_1: left promiscuous mode [ 699.887745][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.969090][ T6054] bridge_slave_0: left allmulticast mode [ 699.969144][ T6054] bridge_slave_0: left promiscuous mode [ 699.969500][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.275006][ T6054] bond0 (unregistering): Released all slaves [ 700.717008][ T5852] Bluetooth: hci1: command tx timeout [ 700.808283][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.872152][ T6054] bond0 (unregistering): Released all slaves [ 701.128000][ T6054] bond0 (unregistering): Released all slaves [ 701.442006][ T6054] bond0 (unregistering): Released all slaves [ 701.652615][ T6054] bond0 (unregistering): Released all slaves [ 702.425011][ T8232] hsr_slave_0: entered promiscuous mode [ 702.437635][ T8232] hsr_slave_1: entered promiscuous mode [ 702.466987][ T8232] debugfs: 'hsr0' already exists in 'hsr' [ 702.467019][ T8232] Cannot create hsr debugfs directory [ 702.651554][ T8261] chnl_net:caif_netlink_parms(): no params data found [ 702.805327][ T5852] Bluetooth: hci1: command tx timeout [ 704.039326][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.039484][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.039686][ T8261] bridge_slave_0: entered allmulticast mode [ 704.043119][ T8261] bridge_slave_0: entered promiscuous mode [ 704.877093][ T5852] Bluetooth: hci1: command tx timeout [ 705.524629][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.524792][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.525038][ T8261] bridge_slave_1: entered allmulticast mode [ 705.531872][ T8261] bridge_slave_1: entered promiscuous mode [ 705.881739][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.919324][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.273481][ T8261] team0: Port device team_slave_0 added [ 706.305995][ T8261] team0: Port device team_slave_1 added [ 706.492308][ T8143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 706.888784][ T8143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 706.965957][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.965975][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.966004][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.970778][ T8143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.100101][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.100119][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.100147][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.213957][ T8143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.854019][ T8261] hsr_slave_0: entered promiscuous mode [ 707.855719][ T8261] hsr_slave_1: entered promiscuous mode [ 707.857504][ T8261] debugfs: 'hsr0' already exists in 'hsr' [ 707.857530][ T8261] Cannot create hsr debugfs directory [ 707.875390][ T8232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 708.054821][ T8232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 708.112929][ T8232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 708.231290][ T8232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 709.543483][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.557008][ T8261] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 709.654076][ T8261] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 709.753030][ T8261] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 709.862459][ T8261] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 710.016252][ T8143] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.063857][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.068999][ T816] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.069173][ T816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.175133][ T816] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.175405][ T816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.284430][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.372585][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.377119][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.469882][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.470083][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.984471][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.113438][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.140778][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.141073][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.209737][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.209913][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.774321][ T8143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.808120][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.463222][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.922330][ T8232] veth0_vlan: entered promiscuous mode [ 712.980305][ T8143] veth0_vlan: entered promiscuous mode [ 712.989495][ T8232] veth1_vlan: entered promiscuous mode [ 713.114875][ T8143] veth1_vlan: entered promiscuous mode [ 713.334283][ T8232] veth0_macvtap: entered promiscuous mode [ 713.415486][ T8232] veth1_macvtap: entered promiscuous mode [ 713.426401][ T8143] veth0_macvtap: entered promiscuous mode [ 713.487745][ T8143] veth1_macvtap: entered promiscuous mode [ 713.554928][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.641178][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.703014][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.747569][ T1499] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.754760][ T1499] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.761829][ T8143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.763037][ T1499] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.775076][ T1499] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.868542][ T1130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.913431][ T1130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.954844][ T1130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.981299][ T1130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.562184][ T8261] veth0_vlan: entered promiscuous mode [ 714.602789][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.602814][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.691710][ T8261] veth1_vlan: entered promiscuous mode [ 714.702453][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.702472][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.853174][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.853197][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.014154][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.014184][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.122090][ T8261] veth0_macvtap: entered promiscuous mode [ 715.187795][ T8261] veth1_macvtap: entered promiscuous mode [ 715.366190][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.444813][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.970771][ T1130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.988999][ T1130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.004513][ T1130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.139320][ T1130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.921466][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.468'. [ 724.893138][ T37] audit: type=1326 audit(1757318808.234:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.282595][ T37] audit: type=1326 audit(1757318808.634:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.306064][ T37] audit: type=1326 audit(1757318808.644:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.306131][ T37] audit: type=1326 audit(1757318808.654:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.371366][ T37] audit: type=1326 audit(1757318808.724:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.376538][ T37] audit: type=1326 audit(1757318808.724:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.385813][ T37] audit: type=1326 audit(1757318808.734:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.385877][ T37] audit: type=1326 audit(1757318808.734:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.387271][ T37] audit: type=1326 audit(1757318808.734:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 725.393673][ T37] audit: type=1326 audit(1757318808.744:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8459 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 726.523582][ T8470] syz.7.471 (8470) used greatest stack depth: 17816 bytes left [ 727.028277][ T8472] sctp: failed to load transform for md5: -2 [ 730.980150][ T8497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.143025][ T8505] erofs (device nbd2): cannot find valid erofs superblock [ 733.394372][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.394390][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.601611][ T8513] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 737.692594][ T1499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.692618][ T1499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.122432][ T8536] input: syz0 as /devices/virtual/input/input8 [ 747.624624][ T8573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 747.624886][ T8573] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 747.626265][ T8573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 747.654807][ T8573] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 747.654874][ T8573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 747.654930][ T8573] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 747.733701][ T8573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 747.762172][ T8573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 747.762217][ T8573] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 747.762771][ T8573] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 747.762804][ T8573] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 747.762841][ T8573] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 747.762908][ T8573] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 747.762939][ T8573] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 750.089650][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 750.089674][ T37] audit: type=1326 audit(1757318833.144:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.089734][ T37] audit: type=1326 audit(1757318833.144:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.089794][ T37] audit: type=1326 audit(1757318833.144:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.089845][ T37] audit: type=1326 audit(1757318833.144:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.089894][ T37] audit: type=1326 audit(1757318833.144:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.089943][ T37] audit: type=1326 audit(1757318833.144:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.089992][ T37] audit: type=1326 audit(1757318833.144:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.090041][ T37] audit: type=1326 audit(1757318833.144:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.090091][ T37] audit: type=1326 audit(1757318833.144:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.090140][ T37] audit: type=1326 audit(1757318833.144:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdb58ecebe9 code=0x7ffc0000 [ 750.377913][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.493'. [ 750.638763][ T8578] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 750.675755][ T8590] binder: BC_ATTEMPT_ACQUIRE not supported [ 750.675775][ T8590] binder: 8574:8590 ioctl c0306201 2000000001c0 returned -22 [ 750.679100][ T8590] delete_channel: no stack [ 753.423628][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.425440][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.824788][ T8613] netlink: 'syz.5.498': attribute type 1 has an invalid length. [ 754.824851][ T8613] netlink: 224 bytes leftover after parsing attributes in process `syz.5.498'. [ 763.296197][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 766.119243][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 766.119263][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 766.447036][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 767.609857][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 767.615177][ T9] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 767.615209][ T9] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 767.615230][ T9] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 767.615250][ T9] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 767.615270][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 767.615291][ T9] usb 7-1: config 0 has no interface number 0 [ 767.615355][ T9] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 767.615380][ T9] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 767.615401][ T9] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 767.615434][ T9] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.615462][ T9] usb 7-1: config 0 interface 125 has no altsetting 0 [ 767.615480][ T9] usb 7-1: config 0 interface 125 has no altsetting 2 [ 767.643892][ T9] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 767.643922][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.643941][ T9] usb 7-1: Product: syz [ 767.643954][ T9] usb 7-1: Manufacturer: syz [ 767.643967][ T9] usb 7-1: SerialNumber: syz [ 767.700432][ T9] usb 7-1: config 0 descriptor?? [ 767.772997][ T9] usb 7-1: selecting invalid altsetting 2 [ 768.670836][ T8668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 769.182157][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.508'. [ 769.612118][ T9] get_1284_register timeout [ 769.621290][ C0] usb 7-1: async_complete: urb error -104 [ 769.626292][ C0] usb 7-1: async_complete: urb error -104 [ 769.626415][ C0] usb 7-1: async_complete: urb error -104 [ 769.626529][ C0] usb 7-1: async_complete: urb error -104 [ 769.626736][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 769.634316][ T9] uss720 7-1:0.125: probe with driver uss720 failed with error -5 [ 770.785422][ T8676] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 773.500773][ T49] usb 7-1: USB disconnect, device number 2 [ 773.537017][ T8676] orangefs_mount: mount request failed with -4 [ 776.707694][ T8710] netlink: 16 bytes leftover after parsing attributes in process `syz.5.516'. [ 777.446956][ T6099] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 779.057608][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.518'. [ 779.057640][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.518'. [ 783.573458][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.558575][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.561587][ T6099] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 784.561629][ T6099] usb 3-1: can't read configurations, error -71 [ 784.841548][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.182674][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.337052][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.400363][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.412167][ T5852] Bluetooth: hci7: command 0x0406 tx timeout [ 787.784810][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.946998][ T6099] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 788.003540][ C1] vkms_vblank_simulate: vblank timer overrun [ 788.928608][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.426490][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 790.972095][ T5848] IPVS: starting estimator thread 0... [ 792.987146][ T8774] IPVS: using max 11 ests per chain, 26400 per kthread [ 793.749418][ T49] kernel write not supported for file /924/attr/sockcreate (pid: 49 comm: kworker/1:1) [ 793.798339][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 795.395256][ T8802] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 795.882283][ T8805] vivid-003: disconnect [ 795.901286][ T8805] Bluetooth: MGMT ver 1.23 [ 798.180286][ T8789] vivid-003: reconnect [ 803.549085][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.730250][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.073787][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.098905][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.7.541'. [ 804.519084][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.139100][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.508811][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.629009][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.971871][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.358078][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.472598][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.567222][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.619934][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.267289][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.082008][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 813.226183][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.493724][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.507350][ T8894] ceph: No mds server is up or the cluster is laggy [ 814.702069][ T8919] ucma_write: process 860 (syz.3.552) changed security contexts after opening file descriptor, this is not allowed. [ 814.769653][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.713977][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.714065][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.127518][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.309228][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.824685][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.328067][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.509332][ T8932] binder: 8930:8932 ioctl c0306201 200000000040 returned -14 [ 827.175722][ T8958] binder: BINDER_SET_CONTEXT_MGR already set [ 827.175740][ T8958] binder: 8956:8958 ioctl 4018620d 200000000040 returned -16 [ 830.133222][ T8974] syz.6.564 (8974) used greatest stack depth: 17008 bytes left [ 832.091161][ T8990] block nbd7: Attempted send on invalid socket [ 832.091351][ T8990] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 832.097402][ T8990] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 833.250276][ T8986] binder: 8984:8986 ioctl c0306201 200000000040 returned -14 [ 838.007803][ T9014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 838.011434][ T9014] block device autoloading is deprecated and will be removed. [ 846.605291][ T5852] Bluetooth: hci7: unexpected event for opcode 0x2040 [ 854.347881][ T9064] Process accounting resumed [ 856.865691][ T5852] Bluetooth: hci2: unexpected event for opcode 0x203b [ 860.047777][ T9096] cramfs: Unknown parameter 'discard' [ 861.594283][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.593'. [ 862.250490][ T5852] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 864.016882][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 864.123621][ T994] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 864.167150][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 864.171252][ T9] usb 3-1: config 6 has an invalid interface number: 153 but max is 0 [ 864.171285][ T9] usb 3-1: config 6 has no interface number 0 [ 864.233804][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=41.ba [ 864.233839][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.233860][ T9] usb 3-1: Product: syz [ 864.233886][ T9] usb 3-1: Manufacturer: syz [ 864.233902][ T9] usb 3-1: SerialNumber: syz [ 864.449995][ T994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 864.450054][ T994] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 864.450080][ T994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.500739][ T994] usb 8-1: config 0 descriptor?? [ 864.781816][ T9] usb 3-1: unknown interface protocol 0xad, assuming v1 [ 864.781843][ T9] usb 3-1: cannot find UAC_HEADER [ 865.272550][ T994] ath6kl: Failed to submit usb control message: -71 [ 865.272613][ T994] ath6kl: unable to send the bmi data to the device: -71 [ 865.272629][ T994] ath6kl: Unable to send get target info: -71 [ 866.425232][ T994] ath6kl: Failed to init ath6kl core: -71 [ 866.427119][ T994] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 866.529618][ T994] usb 8-1: USB disconnect, device number 2 [ 866.709838][ T9] snd-usb-audio 3-1:6.153: probe with driver snd-usb-audio failed with error -22 [ 867.445487][ T9] usb 3-1: USB disconnect, device number 6 [ 869.218492][ T9144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.262798][ T9150] loop2: detected capacity change from 0 to 7 [ 869.282196][ T9150] Dev loop2: unable to read RDB block 7 [ 869.282220][ T9150] loop2: AHDI p2 p3 [ 869.282244][ T9150] loop2: partition table partially beyond EOD, truncated [ 869.282428][ T9150] loop2: p2 size 150995456 extends beyond EOD, truncated [ 869.425880][ T8452] udevd[8452]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.153/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.973734][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 871.331443][ T1247] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 872.050652][ T1247] usb 6-1: Using ep0 maxpacket: 32 [ 872.100663][ T1247] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 872.100684][ T1247] usb 6-1: config 0 has no interface number 0 [ 872.100716][ T1247] usb 6-1: config 0 interface 85 has no altsetting 0 [ 872.118754][ T1247] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 872.118784][ T1247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.118804][ T1247] usb 6-1: Product: syz [ 872.118818][ T1247] usb 6-1: Manufacturer: syz [ 872.118832][ T1247] usb 6-1: SerialNumber: syz [ 872.124728][ T1247] usb 6-1: config 0 descriptor?? [ 872.131686][ T1247] appletouch 6-1:0.85: Could not find int-in endpoint [ 872.131723][ T1247] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 872.133236][ T1247] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 872.186894][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 872.340003][ T10] usb 8-1: config 0 has an invalid interface number: 197 but max is 0 [ 872.340037][ T10] usb 8-1: config 0 has no interface number 0 [ 872.340094][ T10] usb 8-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 872.340121][ T10] usb 8-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 872.343905][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 872.343926][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.343938][ T10] usb 8-1: Product: syz [ 872.343947][ T10] usb 8-1: Manufacturer: syz [ 872.343955][ T10] usb 8-1: SerialNumber: syz [ 872.351424][ T10] usb 8-1: config 0 descriptor?? [ 872.352597][ T9178] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 873.090240][ T8414] udevd[8414]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 873.149538][ T6045] usb 6-1: USB disconnect, device number 2 [ 873.532381][ T10] usb 8-1: USB disconnect, device number 3 [ 875.666757][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 875.666780][ T37] audit: type=1326 audit(1757318958.204:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9199 comm="syz.2.622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c3ef2ebe9 code=0x0 [ 876.140989][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.141093][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.444655][ T9216] IPv6: addrconf: prefix option has invalid lifetime [ 876.486895][ T10] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 876.678594][ T10] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice= b.76 [ 876.678629][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.678650][ T10] usb 8-1: Product: syz [ 876.678665][ T10] usb 8-1: Manufacturer: syz [ 876.678679][ T10] usb 8-1: SerialNumber: syz [ 876.696977][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 876.849809][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.882301][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 876.882337][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.882360][ T9] usb 7-1: Product: syz [ 876.882375][ T9] usb 7-1: Manufacturer: syz [ 876.882390][ T9] usb 7-1: SerialNumber: syz [ 877.029970][ T9] usb 7-1: config 0 descriptor?? [ 877.211728][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.629'. [ 877.840791][ T10] peak_usb 8-1:247.0 can0: unable to request usb[type=0 value=1] err=-71 [ 877.840827][ T10] peak_usb 8-1:247.0: unable to read PCAN-USB X6 firmware info (err -71) [ 877.944180][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 878.033855][ T9] usb 7-1: USB disconnect, device number 3 [ 878.477069][ T5848] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 878.636215][ T5848] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 878.636248][ T5848] usb 4-1: config 0 has no interface number 0 [ 878.636367][ T5848] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 878.676286][ T5848] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 878.676320][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.676339][ T5848] usb 4-1: Product: syz [ 878.676352][ T5848] usb 4-1: Manufacturer: syz [ 878.676367][ T5848] usb 4-1: SerialNumber: syz [ 878.746626][ T5848] usb 4-1: config 0 descriptor?? [ 878.753668][ T9235] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 878.896891][ T6103] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 878.922880][ T8561] udevd[8561]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.217065][ T5848] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 879.247017][ T6057] usb 4-1: Failed to submit usb control message: -71 [ 879.247064][ T6057] usb 4-1: unable to send the bmi data to the device: -71 [ 879.247084][ T6057] usb 4-1: unable to get target info from device [ 879.247100][ T6057] usb 4-1: could not get target info (-71) [ 879.247433][ T6057] usb 4-1: could not probe fw (-71) [ 879.257092][ T6103] usb 6-1: Using ep0 maxpacket: 32 [ 879.323062][ T6103] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 879.323093][ T6103] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 879.323116][ T6103] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 879.323209][ T6103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 879.323237][ T6103] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 879.323264][ T6103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.323287][ T6103] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.323311][ T6103] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 879.323359][ T6103] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 879.323384][ T6103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.446255][ T5848] usb 4-1: USB disconnect, device number 5 [ 879.522653][ T6103] usb 6-1: config 0 descriptor?? [ 879.526491][ T9241] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 879.599448][ T10] peak_usb 8-1:247.0: probe with driver peak_usb failed with error -71 [ 879.608921][ T6103] usblp0: Disabling reads from problematic bidirectional printer [ 879.725038][ T10] usb 8-1: USB disconnect, device number 4 [ 880.084009][ T6103] usblp 6-1:0.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 880.298433][ T6103] usb 6-1: USB disconnect, device number 3 [ 880.452128][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 880.667461][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 880.709611][ T10] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 880.709647][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.713949][ T6103] usblp0: removed [ 880.767246][ T10] usb 8-1: config 0 descriptor?? [ 880.786095][ T10] uvcvideo 8-1:0.0: probe with driver uvcvideo failed with error -22 [ 880.865145][ T9262] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.110595][ T6103] usb 8-1: USB disconnect, device number 5 [ 882.107120][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.645'. [ 882.107251][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.645'. [ 886.294825][ T9308] random: crng reseeded on system resumption [ 889.021494][ T9328] ieee802154 phy0 wpan0: encryption failed: -22 [ 890.448869][ T6103] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 891.867508][ T6103] usb 4-1: unable to get BOS descriptor or descriptor too short [ 891.868854][ T6103] usb 4-1: not running at top speed; connect to a high speed hub [ 891.921646][ T6103] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 891.921680][ T6103] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 892.082813][ T6103] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 892.082836][ T6103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.082856][ T6103] usb 4-1: Product: syz [ 892.082865][ T6103] usb 4-1: Manufacturer: syz [ 892.082874][ T6103] usb 4-1: SerialNumber: syz [ 892.294627][ T9342] netlink: 'syz.7.664': attribute type 1 has an invalid length. [ 892.294645][ T9342] netlink: 224 bytes leftover after parsing attributes in process `syz.7.664'. [ 893.560043][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 893.935405][ T6103] usb 4-1: USB disconnect, device number 6 [ 894.408404][ T9161] udevd[9161]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.733914][ T5848] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 896.910034][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 896.910073][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 896.910101][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 896.910127][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 896.910150][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 896.914757][ T5848] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 896.914807][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.914829][ T5848] usb 3-1: Product: syz [ 896.914844][ T5848] usb 3-1: Manufacturer: syz [ 896.914859][ T5848] usb 3-1: SerialNumber: syz [ 897.640591][ T9399] random: crng reseeded on system resumption [ 899.718910][ T5848] usb 3-1: config 0 descriptor?? [ 899.996399][ T5848] usb 3-1: can't set config #0, error -71 [ 900.124589][ T5848] usb 3-1: USB disconnect, device number 8 [ 900.683598][ T9418] ieee802154 phy0 wpan0: encryption failed: -90 [ 902.754007][ T9441] ieee802154 phy0 wpan0: encryption failed: -22 [ 903.076761][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.217030][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.337770][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.411282][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.503848][ C0] vkms_vblank_simulate: vblank timer overrun [ 903.972425][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.155151][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.302740][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.334955][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.326002][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.267204][ T9482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.315848][ T9488] netlink: 196 bytes leftover after parsing attributes in process `syz.2.705'. [ 918.367034][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 921.688792][ T9538] netlink: 'syz.3.720': attribute type 21 has an invalid length. [ 921.688880][ T9538] netlink: 164 bytes leftover after parsing attributes in process `syz.3.720'. [ 931.412033][ T9586] netlink: 'syz.3.734': attribute type 8 has an invalid length. [ 937.725025][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.725080][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.873449][ T9646] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 943.319912][ T9646] orangefs_mount: mount request failed with -4 [ 944.983971][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 945.005089][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 945.106189][ T9667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.972531][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 945.973772][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 945.974294][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 949.159735][ T9664] Bluetooth: hci3: command tx timeout [ 949.317809][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.757'. [ 949.737911][ T9693] block nbd3: Attempted send on invalid socket [ 949.737939][ T9693] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 949.740605][ T9693] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 951.197227][ T9664] Bluetooth: hci3: command tx timeout [ 951.327126][ T9704] ieee802154 phy0 wpan0: encryption failed: -90 [ 951.851412][ T9711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.214880][ T9664] Bluetooth: hci3: command tx timeout [ 956.679131][ T9664] Bluetooth: hci3: command tx timeout [ 957.664666][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 957.741747][ T9735] ieee802154 phy0 wpan0: encryption failed: -22 [ 959.508302][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.774'. [ 960.096030][ T9753] ieee802154 phy0 wpan0: encryption failed: -22 [ 960.583081][ T9754] delete_channel: no stack [ 961.134930][ T9747] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 961.134983][ T9747] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 961.135005][ T9747] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 963.327715][ T9780] netlink: 'syz.7.784': attribute type 8 has an invalid length. [ 964.831134][ T9794] binder: 9789:9794 ioctl c0306201 200000000040 returned -14 [ 966.728188][ T9804] netlink: 324 bytes leftover after parsing attributes in process `syz.7.791'. [ 966.728228][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.791'. [ 968.647779][ T9820] IPv6: Can't replace route, no match found [ 970.461684][ T9837] netlink: 'syz.6.797': attribute type 8 has an invalid length. [ 971.449126][ T1499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.916648][ T9839] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 973.160453][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.805'. [ 973.160475][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.805'. [ 975.331535][ T9878] netlink: 'syz.6.809': attribute type 1 has an invalid length. [ 975.331602][ T9878] netlink: 224 bytes leftover after parsing attributes in process `syz.6.809'. [ 981.672646][ T1499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.126098][ T37] audit: type=1326 audit(1757319065.474:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.6.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2b0ebe9 code=0x7ffc0000 [ 982.148588][ T37] audit: type=1326 audit(1757319065.504:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.6.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fdce2b0ebe9 code=0x7ffc0000 [ 982.148654][ T37] audit: type=1326 audit(1757319065.504:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.6.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2b0ebe9 code=0x7ffc0000 [ 982.148705][ T37] audit: type=1326 audit(1757319065.504:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9885 comm="syz.6.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdce2b0ebe9 code=0x7ffc0000 [ 983.702501][ T9899] netlink: 'syz.7.811': attribute type 8 has an invalid length. [ 984.867122][ T9907] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.816' sets config #4096 [ 985.975250][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.227939][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.228223][ T9660] bridge_slave_0: entered allmulticast mode [ 986.241686][ T9660] bridge_slave_0: entered promiscuous mode [ 986.885916][ T9936] netlink: 232 bytes leftover after parsing attributes in process `syz.5.830'. [ 991.932995][ T1499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.807163][ T9960] netlink: 'syz.6.823': attribute type 8 has an invalid length. [ 995.821287][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.836983][ T9962] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 995.837060][ T9962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.822'. [ 995.852752][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.853606][ T9660] bridge_slave_1: entered allmulticast mode [ 995.946937][ T9660] bridge_slave_1: entered promiscuous mode [ 996.719558][ T9973] netlink: 'syz.6.827': attribute type 8 has an invalid length. [ 997.777001][ T7160] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 998.026843][ T7160] usb 6-1: Using ep0 maxpacket: 32 [ 998.967263][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.967608][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.204900][ T7160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.205402][ T7160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.206832][ T7160] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 999.207149][ T7160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.688214][ T7160] usb 6-1: config 0 descriptor?? [ 999.897365][ T7160] usb 6-1: can't set config #0, error -71 [ 999.940090][ T7160] usb 6-1: USB disconnect, device number 4 [ 1000.485246][ T1499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.062630][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.349371][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.451514][T10018] netlink: 3 bytes leftover after parsing attributes in process `syz.3.840'. [ 1002.751003][T10018] 0ªX¹¦À: renamed from caif0 [ 1002.880377][T10018] 0ªX¹¦À: entered allmulticast mode [ 1002.880407][T10018] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1002.889099][T10019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.841'. [ 1006.439609][T10047] netlink: 'syz.7.844': attribute type 8 has an invalid length. [ 1009.598539][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.642338][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.645412][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.669134][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.671628][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.213314][ T1499] bridge_slave_1: left allmulticast mode [ 1012.213353][ T1499] bridge_slave_1: left promiscuous mode [ 1012.215018][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.484226][ T59] Bluetooth: hci0: command tx timeout [ 1012.889478][ T1499] bridge_slave_0: left allmulticast mode [ 1012.889518][ T1499] bridge_slave_0: left promiscuous mode [ 1012.889857][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.064453][T10116] netlink: 'syz.5.864': attribute type 8 has an invalid length. [ 1014.576817][ T59] Bluetooth: hci0: command tx timeout [ 1015.672287][T10128] random: crng reseeded on system resumption [ 1015.867498][T10133] vivid-002: disconnect [ 1016.646904][ T59] Bluetooth: hci0: command tx timeout [ 1017.913436][T10122] vivid-002: reconnect [ 1018.221867][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.871'. [ 1018.716814][ T59] Bluetooth: hci0: command tx timeout [ 1020.578719][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.642995][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.690689][ T1499] bond0 (unregistering): Released all slaves [ 1022.627979][T10132] IPv6: sit1: Disabled Multicast RS [ 1023.499788][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.7.882'. [ 1024.127104][T10172] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1024.127128][T10172] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1024.127140][T10172] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1024.127140][T10172] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1024.127160][T10172] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1024.127173][T10172] CUSE: DEVNAME unspecified [ 1024.150174][ T37] audit: type=1326 audit(1757319107.484:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.5.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb58ecebe9 code=0x0 [ 1026.712096][T10191] binder: 10179:10191 ioctl c0306201 200000000040 returned -14 [ 1027.692185][T10196] trusted_key: encrypted_key: keylen parameter is missing [ 1027.896901][ T7160] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1028.004697][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.891'. [ 1028.187561][ T7160] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1028.187597][ T7160] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.187618][ T7160] usb 8-1: Product: syz [ 1028.187633][ T7160] usb 8-1: Manufacturer: syz [ 1028.187648][ T7160] usb 8-1: SerialNumber: syz [ 1028.239826][ T7160] usb 8-1: config 0 descriptor?? [ 1028.573482][ T7160] hso 8-1:0.0: Failed to find BULK IN ep [ 1028.605389][ T7160] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1028.804288][ T7160] usb 8-1: USB disconnect, device number 6 [ 1029.582895][T10229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1029.587196][ T1499] hsr_slave_0: left promiscuous mode [ 1029.694897][ T1499] hsr_slave_1: left promiscuous mode [ 1029.696104][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.696138][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.778142][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.778179][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.307718][T10238] binder: 10231:10238 ioctl c0306201 200000000040 returned -14 [ 1031.900543][ T1499] veth1_macvtap: left promiscuous mode [ 1031.900697][ T1499] veth0_macvtap: left promiscuous mode [ 1031.901060][ T1499] veth1_vlan: left promiscuous mode [ 1031.903977][ T1499] veth0_vlan: left promiscuous mode [ 1036.358798][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1036.678010][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1039.888304][T10235] netlink: 'syz.6.902': attribute type 2 has an invalid length. [ 1039.909340][T10257] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1039.909374][T10257] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1039.910010][T10257] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1039.998765][T10065] chnl_net:caif_netlink_parms(): no params data found [ 1040.256171][ T37] audit: type=1326 audit(1757319123.604:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 1040.277936][ T37] audit: type=1326 audit(1757319123.624:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 1040.291084][ T37] audit: type=1326 audit(1757319123.644:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 1040.291141][ T37] audit: type=1326 audit(1757319123.644:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10259 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b744debe9 code=0x7ffc0000 [ 1041.170550][T10284] binder: 10272:10284 ioctl c0306201 200000000040 returned -14 [ 1042.280322][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.282648][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.282928][T10065] bridge_slave_0: entered allmulticast mode [ 1042.339446][T10065] bridge_slave_0: entered promiscuous mode [ 1042.369288][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.377104][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.377355][T10065] bridge_slave_1: entered allmulticast mode [ 1042.380295][T10065] bridge_slave_1: entered promiscuous mode [ 1042.979320][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.023191][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.580390][T10323] netlink: 'syz.7.928': attribute type 8 has an invalid length. [ 1044.942237][T10332] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1044.992366][T10065] team0: Port device team_slave_0 added [ 1045.088489][T10065] team0: Port device team_slave_1 added [ 1048.438911][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.439126][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.439355][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.858157][ T1499] IPVS: stop unused estimator thread 0... [ 1048.881374][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.881393][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.881424][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.163669][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.6.946'. [ 1051.807179][T10065] hsr_slave_0: entered promiscuous mode [ 1051.808793][T10065] hsr_slave_1: entered promiscuous mode [ 1051.809882][T10065] debugfs: 'hsr0' already exists in 'hsr' [ 1051.809911][T10065] Cannot create hsr debugfs directory [ 1053.723831][ T1499] bridge_slave_1: left allmulticast mode [ 1053.723871][ T1499] bridge_slave_1: left promiscuous mode [ 1053.724221][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.274345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1055.055870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1055.305759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1055.328733][ T1499] bridge_slave_0: left allmulticast mode [ 1055.328769][ T1499] bridge_slave_0: left promiscuous mode [ 1055.329081][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.251749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.495029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.877415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.361627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.491898][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.888479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.949435][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.157986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.950916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1059.194195][ T1499] bond0 (unregistering): Released all slaves [ 1059.463550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.155907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.828774][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.828869][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.022867][T10503] netlink: 'syz.7.990': attribute type 8 has an invalid length. [ 1063.038105][T10498] tty tty32: ldisc open failed (-12), clearing slot 31 [ 1066.361656][T10535] tipc: Enabling of bearer rejected, failed to enable media [ 1066.492279][ T9664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1066.513075][ T9664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1066.525101][ T9664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1066.544656][ T9664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1066.546932][ T9664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1066.967002][ T5848] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1066.967453][T10556] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1006'. [ 1066.967475][T10556] netlink: 'syz.3.1006': attribute type 5 has an invalid length. [ 1067.130008][ T5848] usb 6-1: Using ep0 maxpacket: 32 [ 1067.159181][ T5848] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1067.159217][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.159238][ T5848] usb 6-1: Product: syz [ 1067.159253][ T5848] usb 6-1: Manufacturer: syz [ 1067.159277][ T5848] usb 6-1: SerialNumber: syz [ 1067.230023][ T5848] usb 6-1: config 0 descriptor?? [ 1067.256354][ T5848] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1068.933034][ T5848] gspca_stk1135: reg_w 0x3 err -110 [ 1068.934082][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934096][ T5848] gspca_stk1135: Sensor write failed [ 1068.934127][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934139][ T5848] gspca_stk1135: Sensor write failed [ 1068.934171][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934181][ T5848] gspca_stk1135: Sensor read failed [ 1068.934211][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934221][ T5848] gspca_stk1135: Sensor read failed [ 1068.934229][ T5848] gspca_stk1135: Detected sensor type unknown (0x0) [ 1068.934265][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934275][ T5848] gspca_stk1135: Sensor read failed [ 1068.934315][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934325][ T5848] gspca_stk1135: Sensor read failed [ 1068.934354][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934364][ T5848] gspca_stk1135: Sensor write failed [ 1068.934394][ T5848] gspca_stk1135: serial bus timeout: status=0x00 [ 1068.934404][ T5848] gspca_stk1135: Sensor write failed [ 1068.934514][ T5848] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1068.955040][ T9664] Bluetooth: hci3: command tx timeout [ 1069.090026][ T5848] usb 6-1: USB disconnect, device number 5 [ 1070.616920][ T5848] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1070.796792][ T5848] usb 8-1: Using ep0 maxpacket: 16 [ 1070.799349][ T5848] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1070.799379][ T5848] usb 8-1: config 0 has no interface number 0 [ 1070.799433][ T5848] usb 8-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.799462][ T5848] usb 8-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.799486][ T5848] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1070.799524][ T5848] usb 8-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 1070.799550][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.966749][ T6103] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1070.972521][ T9664] Bluetooth: hci3: command tx timeout [ 1071.011402][ T5848] usb 8-1: config 0 descriptor?? [ 1071.143891][ T6103] usb 6-1: Using ep0 maxpacket: 32 [ 1071.165937][ T6103] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1071.181383][ T6103] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1071.181486][ T6103] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.181509][ T6103] usb 6-1: Product: syz [ 1071.181525][ T6103] usb 6-1: Manufacturer: syz [ 1071.181540][ T6103] usb 6-1: SerialNumber: syz [ 1071.346461][ T6103] usb 6-1: config 0 descriptor?? [ 1071.820124][ T6103] gs_usb 6-1:0.0: Configuring for 16 interfaces [ 1071.820152][ T6103] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1071.820195][ T6103] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1071.856918][ T6099] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1071.889410][ T5848] chicony 0003:04F2:0418.0002: item fetching failed at offset 0/4 [ 1071.890475][ T5848] chicony 0003:04F2:0418.0002: Chicony hid parse failed: -22 [ 1071.890567][ T5848] chicony 0003:04F2:0418.0002: probe with driver chicony failed with error -22 [ 1071.959525][ T5848] usb 8-1: USB disconnect, device number 7 [ 1072.007014][ T6099] usb 4-1: Using ep0 maxpacket: 8 [ 1072.010102][ T6099] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.010138][ T6099] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.010162][ T6099] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1072.010200][ T6099] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1072.010224][ T6099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.094262][ T9698] usb 6-1: USB disconnect, device number 6 [ 1072.168394][ T6099] usb 4-1: config 0 descriptor?? [ 1072.443272][ T6099] usbhid 4-1:0.0: can't add hid device: -71 [ 1072.443422][ T6099] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1072.465032][ T6099] usb 4-1: USB disconnect, device number 7 [ 1073.253785][ T9664] Bluetooth: hci3: command tx timeout [ 1074.241704][T10544] chnl_net:caif_netlink_parms(): no params data found [ 1074.344570][ T1499] bridge_slave_1: left allmulticast mode [ 1074.344617][ T1499] bridge_slave_1: left promiscuous mode [ 1074.344935][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.485776][ T9664] Bluetooth: hci3: command tx timeout [ 1075.582336][ T1499] bridge_slave_0: left allmulticast mode [ 1075.582377][ T1499] bridge_slave_0: left promiscuous mode [ 1075.582693][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.688006][ T9664] Bluetooth: latency 3388 > 499 [ 1076.606822][ T9698] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1076.788442][ T9698] usb 6-1: Using ep0 maxpacket: 32 [ 1077.165244][ T9698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.165284][ T9698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.165329][ T9698] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1077.165363][ T9698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.197245][ T9698] usb 6-1: config 0 descriptor?? [ 1077.701161][ T9698] ft260 0003:0403:6030.0003: unbalanced collection at end of report description [ 1077.702119][ T9698] ft260 0003:0403:6030.0003: failed to parse HID [ 1077.702232][ T9698] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -22 [ 1077.766862][ T9664] Bluetooth: hci2: command 0x0406 tx timeout [ 1077.820551][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.887602][ T9698] usb 6-1: USB disconnect, device number 7 [ 1077.989396][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.093988][ T1499] bond0 (unregistering): Released all slaves [ 1078.251681][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1029'. [ 1078.251712][T10637] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1078.671720][ T9664] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 1078.677439][ T9664] Bluetooth: hci2: unexpected event for opcode 0x203e [ 1078.937017][ T1499] hsr_slave_0: left promiscuous mode [ 1078.988109][ T1499] hsr_slave_1: left promiscuous mode [ 1078.989173][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1079.057949][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.136839][ T8920] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1079.286993][ T8920] usb 4-1: Using ep0 maxpacket: 16 [ 1079.293315][ T8920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.293353][ T8920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.293396][ T8920] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1079.293422][ T8920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.319560][ T8920] usb 4-1: config 0 descriptor?? [ 1079.366730][ T6103] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1079.621780][ T6103] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1079.621811][ T6103] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.621911][ T6103] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1079.621934][ T6103] usb 7-1: config 1 has no interface number 1 [ 1079.621995][ T6103] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1079.631524][ T6103] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1079.631614][ T6103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.631635][ T6103] usb 7-1: Product: syz [ 1079.631650][ T6103] usb 7-1: Manufacturer: syz [ 1079.631663][ T6103] usb 7-1: SerialNumber: syz [ 1080.072044][ T8920] hid-picolcd 0003:04D8:F002.0004: unbalanced collection at end of report description [ 1080.073089][ T8920] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 1080.073232][ T8920] hid-picolcd 0003:04D8:F002.0004: probe with driver hid-picolcd failed with error -22 [ 1080.148745][ T8920] usb 4-1: USB disconnect, device number 8 [ 1080.198732][ T6103] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1080.198801][ T6103] usb 7-1: MIDIStreaming interface descriptor not found [ 1080.419387][ T37] audit: type=1326 audit(1757319163.774:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.7.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc6eaebe9 code=0x7ffc0000 [ 1080.419701][ T37] audit: type=1326 audit(1757319163.774:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.7.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc6eaebe9 code=0x7ffc0000 [ 1080.469479][ T37] audit: type=1326 audit(1757319163.804:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.7.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fdbc6eaebe9 code=0x7ffc0000 [ 1080.469536][ T37] audit: type=1326 audit(1757319163.804:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.7.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc6eaebe9 code=0x7ffc0000 [ 1080.469585][ T37] audit: type=1326 audit(1757319163.804:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10683 comm="syz.7.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc6eaebe9 code=0x7ffc0000 [ 1080.602731][ T6103] usb 7-1: USB disconnect, device number 4 [ 1080.869946][T10561] udevd[10561]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1081.347790][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1081.377045][ T6103] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1081.590680][ T6103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.590735][ T6103] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1081.590759][ T6103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.629055][ T6103] usb 7-1: config 0 descriptor?? [ 1081.651169][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1082.179375][ T6103] logitech-djreceiver 0003:046D:C71F.0005: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.6-1/input0 [ 1082.267535][ T6103] usb 7-1: USB disconnect, device number 5 [ 1082.465899][T10702] fido_id[10702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1082.717854][ T9664] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1082.718203][ T9664] Bluetooth: hci2: Injecting HCI hardware error event [ 1082.719701][ T9664] Bluetooth: hci2: hardware error 0x00 [ 1083.383685][T10693] ip6erspan0: entered allmulticast mode [ 1083.913894][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1061'. [ 1084.133358][ T59] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 1084.352099][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.355181][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.355443][T10544] bridge_slave_0: entered allmulticast mode [ 1084.394531][T10544] bridge_slave_0: entered promiscuous mode [ 1084.415920][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.416471][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.419975][T10544] bridge_slave_1: entered allmulticast mode [ 1084.433390][T10544] bridge_slave_1: entered promiscuous mode [ 1084.882146][ T9664] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1084.980751][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.985893][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.388021][ T6099] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1085.556367][ T6099] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1085.569641][ T6099] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.595899][T10544] team0: Port device team_slave_0 added [ 1085.596003][ T6099] usb 7-1: string descriptor 0 read error: -22 [ 1085.596292][ T6099] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1085.596324][ T6099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.640547][T10544] team0: Port device team_slave_1 added [ 1085.964056][ T6099] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 1086.271681][T10755] Invalid option length (1046061) for dns_resolver key [ 1086.426561][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.426581][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.426611][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.489517][ T6099] usb 7-1: device descriptor read/64, error -71 [ 1086.490124][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.490140][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.490165][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.794825][T10757] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1072'. [ 1087.196470][ T6099] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 1087.313387][T10761] netlink: 'syz.3.1073': attribute type 8 has an invalid length. [ 1088.437568][T10544] hsr_slave_0: entered promiscuous mode [ 1088.449096][T10544] hsr_slave_1: entered promiscuous mode [ 1088.450106][T10544] debugfs: 'hsr0' already exists in 'hsr' [ 1088.450135][T10544] Cannot create hsr debugfs directory [ 1088.501751][ T6099] usb 7-1: device descriptor read/all, error -71 [ 1089.654498][ T37] audit: type=1400 audit(1757319172.974:104): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10774 comm="syz.7.1078" src=1 dest=20000 netif=wpan0 [ 1089.675384][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1089.770545][ T6099] usb 7-1: USB disconnect, device number 6 [ 1089.810753][ T9698] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1089.826988][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 1089.834673][ T5930] usb 4-1: config 0 has an invalid interface number: 127 but max is 0 [ 1089.834706][ T5930] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1089.834725][ T5930] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1089.834746][ T5930] usb 4-1: config 0 has no interface number 0 [ 1089.843064][ T5930] usb 4-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=63.99 [ 1089.843096][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.843116][ T5930] usb 4-1: Product: syz [ 1089.843130][ T5930] usb 4-1: Manufacturer: syz [ 1089.843143][ T5930] usb 4-1: SerialNumber: syz [ 1089.849238][ T5930] usb 4-1: config 0 descriptor?? [ 1089.864148][ T5930] ftdi_sio 4-1:0.127: FTDI USB Serial Device converter detected [ 1089.890198][ T5930] ftdi_sio ttyUSB0: unknown device type: 0x6399 [ 1089.968382][ T9698] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1089.968416][ T9698] usb 6-1: config 0 has no interface number 0 [ 1089.968471][ T9698] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1089.968497][ T9698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.114530][ T9698] usb 6-1: config 0 descriptor?? [ 1090.125730][ T6103] usb 4-1: USB disconnect, device number 9 [ 1090.149746][ T6099] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1090.213162][ T9698] usb 6-1: selecting invalid altsetting 1 [ 1090.215546][ T9698] dvb_ttusb_budget: ttusb_init_controller: error [ 1090.216232][ T9698] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1090.275883][ T6103] ftdi_sio 4-1:0.127: device disconnected [ 1090.327139][ T6099] usb 7-1: Using ep0 maxpacket: 8 [ 1090.345428][ T6099] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1090.352568][ T6099] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1090.376872][ T6099] usb 7-1: string descriptor 0 read error: -22 [ 1090.377059][ T6099] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1090.377087][ T6099] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.640889][ T6099] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1090.817921][ T6099] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1090.818409][ T6099] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1090.818470][ T6099] usb 7-1: media controller created [ 1090.918414][ T6099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.084557][ T6099] zl10353_read_register: readreg error (reg=127, ret==0) [ 1091.248655][ T6103] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1091.406885][ T6103] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.406926][ T6103] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.406971][ T6103] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1091.406996][ T6103] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.413028][ T9698] DVB: Unable to find symbol cx22700_attach() [ 1092.766470][T10800] netlink: 'syz.5.1085': attribute type 8 has an invalid length. [ 1093.340049][ T9698] DVB: Unable to find symbol tda10046_attach() [ 1093.340069][ T9698] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1093.399685][ T9698] usb 6-1: USB disconnect, device number 8 [ 1093.488074][ T6103] usb 8-1: config 0 descriptor?? [ 1093.902870][ T6099] usb 7-1: USB disconnect, device number 7 [ 1094.272479][ T6103] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 1094.304368][ T6103] usb 8-1: USB disconnect, device number 8 [ 1094.426871][ T9698] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1094.581802][T10544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1094.780893][ T6099] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1094.947871][ T9698] usb 6-1: Using ep0 maxpacket: 8 [ 1095.551866][T10544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1095.597027][ T6099] usb 7-1: Using ep0 maxpacket: 16 [ 1095.616100][ T6099] usb 7-1: config 0 has an invalid interface number: 63 but max is 0 [ 1095.616133][ T6099] usb 7-1: config 0 has no interface number 0 [ 1095.616287][ T6099] usb 7-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.616382][ T6099] usb 7-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.616408][ T6099] usb 7-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1095.616437][ T6099] usb 7-1: config 0 interface 63 has no altsetting 0 [ 1095.616476][ T6099] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1095.616563][ T6099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.891897][ T9698] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1095.891932][ T9698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.891954][ T9698] usb 6-1: Product: syz [ 1095.891968][ T9698] usb 6-1: Manufacturer: syz [ 1095.891983][ T9698] usb 6-1: SerialNumber: syz [ 1095.995266][ T6099] usb 7-1: config 0 descriptor?? [ 1096.017303][ T9698] usb 6-1: config 0 descriptor?? [ 1096.068968][ T9698] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1096.098063][T10544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1097.006366][ T9698] gspca_sq930x: ucbus_write failed -110 [ 1097.006551][ T9698] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 1097.537293][T10544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1097.687585][ T9698] usb 6-1: USB disconnect, device number 9 [ 1097.940609][ T6099] uclogic 0003:28BD:0909.0007: interface is invalid, ignoring [ 1097.966866][ T7029] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1098.137212][ T9698] usb 7-1: USB disconnect, device number 8 [ 1098.161011][ T7029] usb 4-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 1098.161037][ T7029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.161051][ T7029] usb 4-1: Product: syz [ 1098.161060][ T7029] usb 4-1: Manufacturer: syz [ 1098.161068][ T7029] usb 4-1: SerialNumber: syz [ 1098.242954][ T7029] usb 4-1: config 0 descriptor?? [ 1098.291253][ T7029] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 1098.552168][T10856] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1097'. [ 1099.111970][ T7029] gspca_sn9c20x: Write register 1002 failed -71 [ 1099.111992][ T7029] gspca_sn9c20x: Device initialization failed [ 1099.112097][ T7029] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1099.115558][ T7029] usb 4-1: USB disconnect, device number 10 [ 1099.236945][T10866] netlink: 'syz.7.1098': attribute type 8 has an invalid length. [ 1100.196033][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.262682][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.352673][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.352845][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.397187][ T5848] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1100.447933][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.448117][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.699802][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.699838][ T5848] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1101.699853][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.755334][ T5848] usb 6-1: config 0 descriptor?? [ 1102.236301][ T5848] kye 0003:0458:500F.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1102.241453][ T5848] hid_parser_main: 128 callbacks suppressed [ 1102.241479][ T5848] kye 0003:0458:500F.0008: unknown main item tag 0x3 [ 1102.269499][ T5848] kye 0003:0458:500F.0008: hidraw0: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0 [ 1102.269535][ T5848] kye 0003:0458:500F.0008: tablet-enabling feature report not found [ 1102.269549][ T5848] kye 0003:0458:500F.0008: tablet enabling failed [ 1102.544310][ T6099] usb 6-1: USB disconnect, device number 10 [ 1102.774655][T10891] fido_id[10891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1102.956970][ T7029] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1103.141289][ T7029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.141348][ T7029] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1103.141373][ T7029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.202209][ T7029] usb 4-1: config 0 descriptor?? [ 1103.920008][ T7029] logitech 0003:046D:C50C.0009: unbalanced delimiter at end of report description [ 1103.920983][ T7029] logitech 0003:046D:C50C.0009: parse failed [ 1103.921102][ T7029] logitech 0003:046D:C50C.0009: probe with driver logitech failed with error -22 [ 1105.038284][ T7029] usb 4-1: USB disconnect, device number 11 [ 1105.046287][T10544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.546877][ T7029] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1105.710135][ T7029] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.710194][ T7029] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1105.710220][ T7029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.962658][ T7029] usb 6-1: config 0 descriptor?? [ 1107.209454][ T7029] macally 0003:060B:0001.000A: item fetching failed at offset 0/2 [ 1107.210498][ T7029] macally 0003:060B:0001.000A: probe with driver macally failed with error -22 [ 1107.406124][ T8920] usb 6-1: USB disconnect, device number 11 [ 1107.756847][ T7029] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1107.906739][ T7029] usb 4-1: Using ep0 maxpacket: 32 [ 1107.909287][ T7029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.909319][ T7029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.909355][ T7029] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1107.909376][ T7029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.910805][T10544] veth0_vlan: entered promiscuous mode [ 1107.915799][ T7029] usb 4-1: config 0 descriptor?? [ 1107.967238][ T8920] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1108.007157][T10544] veth1_vlan: entered promiscuous mode [ 1108.072134][T10544] veth0_macvtap: entered promiscuous mode [ 1108.084672][T10544] veth1_macvtap: entered promiscuous mode [ 1108.116836][ T8920] usb 8-1: Using ep0 maxpacket: 32 [ 1108.119425][ T8920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.119460][ T8920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.119503][ T8920] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1108.119527][ T8920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.182846][T10544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.184774][ T8920] usb 8-1: config 0 descriptor?? [ 1108.337578][T10544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.549960][ T7029] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 1108.549998][ T7029] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 1108.550026][ T7029] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 1108.550051][ T7029] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 1108.550076][ T7029] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 1108.550101][ T7029] savu 0003:1E7D:2D5A.000B: unbalanced collection at end of report description [ 1108.550976][ T7029] savu 0003:1E7D:2D5A.000B: parse failed [ 1108.551050][ T7029] savu 0003:1E7D:2D5A.000B: probe with driver savu failed with error -22 [ 1108.852030][ T8920] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0 [ 1108.931822][ T8920] koneplus 0003:1E7D:2D51.000C: couldn't init struct koneplus_device [ 1108.931891][ T8920] koneplus 0003:1E7D:2D51.000C: couldn't install mouse [ 1108.958401][ T179] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.348610][ T1499] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.772847][ T6054] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.776200][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.939143][ T6103] usb 4-1: USB disconnect, device number 12 [ 1109.947296][ T8920] koneplus 0003:1E7D:2D51.000C: probe with driver koneplus failed with error -71 [ 1110.170457][ T8920] usb 8-1: USB disconnect, device number 9 [ 1110.375208][T10980] fido_id[10980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1110.976832][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.976859][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.199444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.199469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.546939][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1114.725696][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1114.777047][ T10] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1114.777078][ T10] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1114.777099][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1115.316806][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1115.316840][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.316862][ T10] usb 8-1: Product: syz [ 1115.316877][ T10] usb 8-1: Manufacturer: syz [ 1115.316892][ T10] usb 8-1: SerialNumber: syz [ 1116.092454][ T9476] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1117.129362][ T10] usb 8-1: 0:2 : does not exist [ 1117.207001][ T9476] usb 6-1: Using ep0 maxpacket: 16 [ 1117.213114][ T9476] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1117.213145][ T9476] usb 6-1: config 0 has no interface number 0 [ 1117.254008][ T9476] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1117.254043][ T9476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.254063][ T9476] usb 6-1: Product: syz [ 1117.254079][ T9476] usb 6-1: Manufacturer: syz [ 1117.254094][ T9476] usb 6-1: SerialNumber: syz [ 1117.295073][ T10] usb 8-1: USB disconnect, device number 10 [ 1117.324087][ T9476] usb 6-1: config 0 descriptor?? [ 1117.413196][ T9476] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1117.828391][T10591] udevd[10591]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.999320][ T9476] gspca_spca1528: reg_w err -71 [ 1118.016900][ T9476] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1118.057114][ T9476] usb 6-1: USB disconnect, device number 12 [ 1118.331493][ T8920] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1118.459920][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1118.496906][ T8920] usb 7-1: Using ep0 maxpacket: 32 [ 1118.500283][ T8920] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1118.500312][ T8920] usb 7-1: config 0 has no interface number 0 [ 1118.544055][ T8920] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1118.544092][ T8920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.544114][ T8920] usb 7-1: Product: syz [ 1118.544129][ T8920] usb 7-1: Manufacturer: syz [ 1118.544145][ T8920] usb 7-1: SerialNumber: syz [ 1118.614337][ T8920] usb 7-1: config 0 descriptor?? [ 1118.676962][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.676999][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1118.677047][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1118.677075][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.755155][ T8920] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1118.755186][ T8920] usb 7-1: selecting invalid altsetting 1 [ 1118.755204][ T8920] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1118.998411][ T8920] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1118.998940][ T8920] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1118.998999][ T8920] usb 7-1: media controller created [ 1119.156980][ T10] usb 8-1: config 0 descriptor?? [ 1119.204138][ T8920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1119.226895][ T5848] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1119.701390][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 1121.863205][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.863463][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.744450][ T5848] usb 4-1: device descriptor read/all, error -71 [ 1122.887032][ T8920] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1122.887197][ T8920] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1123.011113][ T8920] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1123.201532][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 1123.201686][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1123.305435][ T10] usb 8-1: USB disconnect, device number 11 [ 1123.771418][ T8920] usb 7-1: USB disconnect, device number 9 [ 1126.909283][ C0] sched: DL replenish lagged too much [ 1150.856268][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1156.322354][ T10] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 1156.322403][ T10] usb 4-1: can't read configurations, error -110 [ 1161.778081][ T5848] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1161.971123][ T5848] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1161.971158][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.971180][ T5848] usb 4-1: Product: syz [ 1161.971196][ T5848] usb 4-1: Manufacturer: syz [ 1161.971211][ T5848] usb 4-1: SerialNumber: syz [ 1162.106292][ T5848] usb 4-1: config 0 descriptor?? [ 1162.203475][ T5848] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1162.778258][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1163.063580][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.063620][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.063667][ T10] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1163.063770][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.113258][ T5848] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1163.113374][ T5848] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1163.212305][ T5848] usb 4-1: USB disconnect, device number 17 [ 1163.272693][ T10] usb 6-1: config 0 descriptor?? [ 1165.050478][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1165.093041][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1165.109365][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1165.132588][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1165.177222][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1165.718540][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1165.751391][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.755985][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.961819][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.977545][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.456244][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1166.456413][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1166.530280][ T10] usb 6-1: USB disconnect, device number 13 [ 1166.856221][T11116] tipc: Enabling of bearer rejected, failed to enable media [ 1167.542519][T11120] sp0: Synchronizing with TNC [ 1170.957012][ T5852] Bluetooth: hci0: command tx timeout [ 1172.436809][ T5852] Bluetooth: hci5: command tx timeout [ 1173.036776][ T5852] Bluetooth: hci0: command tx timeout [ 1174.476802][ T5852] Bluetooth: hci5: command tx timeout [ 1175.116778][ T5852] Bluetooth: hci0: command tx timeout [ 1176.556843][ T5852] Bluetooth: hci5: command tx timeout [ 1179.616714][ T5852] Bluetooth: hci0: command tx timeout [ 1179.616756][ T5852] Bluetooth: hci5: command tx timeout [ 1183.375273][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.375370][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.433898][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1191.467443][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1191.469525][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1191.472705][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1191.504539][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1191.805494][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1191.839222][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1191.840915][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1191.845747][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1191.856813][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1193.606233][ T5852] Bluetooth: hci2: command tx timeout [ 1193.997034][ T5852] Bluetooth: hci3: command tx timeout [ 1195.679260][ T5852] Bluetooth: hci2: command tx timeout [ 1196.076877][ T5852] Bluetooth: hci3: command tx timeout [ 1197.760820][ T5852] Bluetooth: hci2: command tx timeout [ 1198.156938][ T5852] Bluetooth: hci3: command tx timeout [ 1199.838480][ T5852] Bluetooth: hci2: command tx timeout [ 1200.237040][ T5852] Bluetooth: hci3: command tx timeout [ 1203.636957][ T5848] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1203.814793][ T5848] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1203.814829][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.814851][ T5848] usb 7-1: Product: syz [ 1203.814867][ T5848] usb 7-1: Manufacturer: syz [ 1203.814882][ T5848] usb 7-1: SerialNumber: syz [ 1203.884008][ T5848] usb 7-1: config 0 descriptor?? [ 1204.945200][T11109] chnl_net:caif_netlink_parms(): no params data found [ 1205.501950][ T5848] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1205.502588][ T5848] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1205.626810][ T5848] usb 7-1: USB disconnect, device number 10 [ 1207.620385][T11107] chnl_net:caif_netlink_parms(): no params data found [ 1211.070133][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1211.095979][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1211.115737][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1211.138361][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1211.142109][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1212.098349][ T5852] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1212.105291][ T5852] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1212.123778][ T5852] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1212.142402][ T5852] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1212.143403][ T5852] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1213.277037][ T59] Bluetooth: hci6: command tx timeout [ 1214.237006][ T59] Bluetooth: hci8: command tx timeout [ 1215.356934][ T59] Bluetooth: hci6: command tx timeout [ 1216.316798][ T59] Bluetooth: hci8: command tx timeout [ 1217.436864][ T59] Bluetooth: hci6: command tx timeout [ 1218.397283][ T59] Bluetooth: hci8: command tx timeout [ 1218.479211][ T7160] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1218.670623][ T7160] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.670656][ T7160] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1218.670714][ T7160] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1218.670738][ T7160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.742043][ T7160] usb 7-1: config 0 descriptor?? [ 1218.774714][ T7160] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1218.775152][ T7160] dvb-usb: bulk message failed: -22 (3/0) [ 1218.849057][ T7160] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1218.850322][ T7160] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1218.850387][ T7160] usb 7-1: media controller created [ 1218.898922][ T7160] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1218.970392][ T7160] dvb-usb: bulk message failed: -22 (6/0) [ 1218.970558][ T7160] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1219.042332][ T7160] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 1219.252090][ T7160] dvb-usb: schedule remote query interval to 150 msecs. [ 1219.252121][ T7160] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1219.302672][ T7160] usb 7-1: USB disconnect, device number 11 [ 1219.517167][ T59] Bluetooth: hci6: command tx timeout [ 1220.477396][ T59] Bluetooth: hci8: command tx timeout [ 1223.310182][ T7160] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1223.860383][T11142] chnl_net:caif_netlink_parms(): no params data found [ 1228.220464][T11139] chnl_net:caif_netlink_parms(): no params data found [ 1242.746345][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1242.783373][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1242.785814][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1242.806098][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1242.817487][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1244.652391][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.652481][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.877083][ T5852] Bluetooth: hci0: command tx timeout [ 1246.957134][ T5852] Bluetooth: hci0: command tx timeout [ 1249.037320][ T5852] Bluetooth: hci0: command tx timeout [ 1250.842570][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1250.868661][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1250.870594][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1250.901711][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1250.906531][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1251.064670][ T9664] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1251.095483][ T9664] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1251.121795][ T59] Bluetooth: hci0: command tx timeout [ 1251.141784][ T9664] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1251.186369][ T9664] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1251.197144][ T9664] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1253.037231][ T5852] Bluetooth: hci5: command tx timeout [ 1255.117092][ T9664] Bluetooth: hci9: command tx timeout [ 1255.117794][ T9664] Bluetooth: hci5: command tx timeout [ 1257.197141][ T9664] Bluetooth: hci5: command tx timeout [ 1257.197179][ T9664] Bluetooth: hci9: command tx timeout [ 1259.276957][ T5852] Bluetooth: hci9: command tx timeout [ 1259.276997][ T5852] Bluetooth: hci5: command tx timeout [ 1261.356970][ T9664] Bluetooth: hci9: command tx timeout [ 1267.172083][T11139] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1272.358858][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1272.416163][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1272.419823][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1272.424526][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1272.447055][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1273.440528][ T9664] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1273.486927][ T9664] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1273.490177][ T9664] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1273.491631][ T9664] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1273.492942][ T9664] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1274.637089][ T5852] Bluetooth: hci4: command tx timeout [ 1275.596820][ T5852] Bluetooth: hci10: command tx timeout [ 1276.716781][ T5852] Bluetooth: hci4: command tx timeout [ 1277.676984][ T5852] Bluetooth: hci10: command tx timeout [ 1278.798580][ T5852] Bluetooth: hci4: command tx timeout [ 1279.762950][ T5852] Bluetooth: hci10: command tx timeout [ 1280.876952][ T5852] Bluetooth: hci4: command tx timeout [ 1281.837172][ T5852] Bluetooth: hci10: command tx timeout [ 1302.998780][ T9664] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1303.029719][ T9664] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1303.031453][ T9664] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1303.032852][ T9664] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1303.062819][ T9664] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1306.097808][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.097912][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.916918][ T5852] Bluetooth: hci11: command tx timeout [ 1310.006621][ T5852] Bluetooth: hci11: command tx timeout [ 1310.758576][ T9664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1310.793711][ T9664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1310.795482][ T9664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1310.812101][ T9664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1310.832514][ T9664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1311.448371][ T9664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1311.469047][ T9664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1311.497740][ T9664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1311.509648][ T9664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1311.511227][ T9664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1312.077072][ T5852] Bluetooth: hci11: command tx timeout [ 1312.876991][ T5852] Bluetooth: hci2: command tx timeout [ 1313.597261][ T5852] Bluetooth: hci3: command tx timeout [ 1314.157118][ T5852] Bluetooth: hci11: command tx timeout [ 1314.956984][ T5852] Bluetooth: hci2: command tx timeout [ 1315.677239][ T5852] Bluetooth: hci3: command tx timeout [ 1317.036888][ T5852] Bluetooth: hci2: command tx timeout [ 1317.756991][ T5852] Bluetooth: hci3: command tx timeout [ 1319.823722][ T5852] Bluetooth: hci2: command tx timeout [ 1319.836679][ T9664] Bluetooth: hci3: command tx timeout [ 1333.070048][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1333.215101][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1333.230740][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1333.232247][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1333.247387][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1333.767622][ T5852] Bluetooth: hci6: command 0x0406 tx timeout [ 1334.237649][ T38] INFO: task syz.5.1166:11119 blocked for more than 143 seconds. [ 1334.237678][ T38] Not tainted syzkaller #0 [ 1334.237690][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1334.237700][ T38] task:syz.5.1166 state:D stack:21960 pid:11119 tgid:11119 ppid:8143 task_flags:0x400040 flags:0x00004006 [ 1334.237769][ T38] Call Trace: [ 1334.237776][ T38] [ 1334.237792][ T38] __schedule+0x16f3/0x4c20 [ 1334.237857][ T38] ? __lock_acquire+0xab9/0xd20 [ 1334.237899][ T38] ? __pfx___schedule+0x10/0x10 [ 1334.237951][ T38] ? schedule+0x91/0x360 [ 1334.237985][ T38] schedule+0x165/0x360 [ 1334.238018][ T38] schedule_timeout+0x9a/0x270 [ 1334.238049][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1334.238094][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.238126][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1334.238156][ T38] ? wait_for_completion+0x267/0x5d0 [ 1334.238190][ T38] wait_for_completion+0x2bf/0x5d0 [ 1334.238238][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1334.238279][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 1334.238311][ T38] rcu_barrier+0x463/0x570 [ 1334.238347][ T38] netdev_run_todo+0x327/0xea0 [ 1334.238381][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1334.238402][ T38] ? unregister_netdevice_queue+0x33c/0x380 [ 1334.238429][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1334.238450][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1334.238483][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1334.238512][ T38] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 1334.238546][ T38] unregister_netdev+0x52/0x60 [ 1334.238579][ T38] sixpack_close+0x1d8/0x280 [ 1334.238610][ T38] tty_ldisc_kill+0xa3/0x1a0 [ 1334.238637][ T38] tty_ldisc_release+0x1a4/0x200 [ 1334.238662][ T38] tty_release_struct+0x2a/0xd0 [ 1334.238689][ T38] tty_release+0xcb6/0x1650 [ 1334.238727][ T38] ? evm_file_release+0x10b/0x1e0 [ 1334.238759][ T38] ? __pfx_tty_release+0x10/0x10 [ 1334.238780][ T38] __fput+0x45b/0xa80 [ 1334.238836][ T38] task_work_run+0x1d4/0x260 [ 1334.238863][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1334.238894][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 1334.238928][ T38] exit_to_user_mode_loop+0xec/0x110 [ 1334.238959][ T38] do_syscall_64+0x2bd/0x3b0 [ 1334.238978][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1334.239010][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.239032][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1334.239060][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.239081][ T38] RIP: 0033:0x7fdb58ecebe9 [ 1334.239101][ T38] RSP: 002b:00007ffcf066eee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1334.239124][ T38] RAX: 0000000000000000 RBX: 00007fdb59107da0 RCX: 00007fdb58ecebe9 [ 1334.239140][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1334.239154][ T38] RBP: 00007fdb59107da0 R08: 0000000000006f1c R09: 00000003f066f1df [ 1334.239170][ T38] R10: 00000000005f8450 R11: 0000000000000246 R12: 000000000011d10c [ 1334.239185][ T38] R13: 00007ffcf066efe0 R14: ffffffffffffffff R15: 00007ffcf066f000 [ 1334.239223][ T38] [ 1334.239249][ T38] [ 1334.239249][ T38] Showing all locks held in the system: [ 1334.239261][ T38] 7 locks held by ktimers/1/29: [ 1334.239274][ T38] 2 locks held by ksoftirqd/1/30: [ 1334.239286][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1334.239343][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1334.239401][ T38] 4 locks held by kworker/1:0/31: [ 1334.239413][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.239470][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.239528][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1334.239592][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1334.239648][ T38] 1 lock held by khungtaskd/38: [ 1334.239659][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1334.239733][ T38] 3 locks held by udevd/5206: [ 1334.239746][ T38] 2 locks held by getty/5597: [ 1334.239758][ T38] #0: ffff88823bf840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1334.239818][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1334.239876][ T38] 3 locks held by kworker/u9:4/5852: [ 1334.239888][ T38] #0: ffff88805b9b6938 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.239945][ T38] #1: ffffc90004c37bc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.240001][ T38] #2: ffff88804e680e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 1334.240056][ T38] 3 locks held by kworker/u8:13/5997: [ 1334.240069][ T38] 7 locks held by kworker/u8:16/6078: [ 1334.240082][ T38] 6 locks held by kworker/1:8/7029: [ 1334.240094][ T38] #0: ffff888027dded38 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.240155][ T38] #1: ffffc900043bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.240229][ T38] #2: ffff88805fa315f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 1334.240285][ T38] #3: ffff888032c74388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 1334.240337][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1334.240391][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1334.240451][ T38] 3 locks held by kworker/u8:22/8591: [ 1334.240463][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.240519][ T38] #1: ffffc90005387bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.240577][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1334.240628][ T38] 6 locks held by kworker/u9:1/9664: [ 1334.240641][ T38] #0: ffff88805b5dd138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.240696][ T38] #1: ffffc90003a1fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.240751][ T38] #2: ffff88804d0fce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1334.240802][ T38] #3: ffff88804d0fc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1334.240860][ T38] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1334.240920][ T38] #5: ffff888027c99358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1334.240988][ T38] 3 locks held by kworker/u8:24/9930: [ 1334.241001][ T38] #0: ffff8880304bf938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.241058][ T38] #1: ffffc90004dd7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.241115][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1334.241179][ T38] 1 lock held by syz-executor/10544: [ 1334.241192][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.241244][ T38] 3 locks held by kworker/u8:25/11072: [ 1334.241256][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.241312][ T38] #1: ffffc900059d7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.241367][ T38] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.241416][ T38] 1 lock held by syz.7.1151/11077: [ 1334.241428][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.241478][ T38] 1 lock held by syz-executor/11107: [ 1334.241490][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.241539][ T38] 1 lock held by syz-executor/11109: [ 1334.241551][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.241610][ T38] 3 locks held by syz.5.1166/11119: [ 1334.241623][ T38] #0: ffff88805cf320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 1334.241671][ T38] #1: ffff88805cf350a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 1334.241724][ T38] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.241773][ T38] 1 lock held by syz.3.1167/11123: [ 1334.241785][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1334.241856][ T38] 4 locks held by kworker/1:12/11125: [ 1334.241869][ T38] #0: ffff88805f115938 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1334.241929][ T38] #1: ffffc90005b97bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1334.241987][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1334.242041][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1334.242097][ T38] 1 lock held by syz-executor/11139: [ 1334.242109][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1334.242168][ T38] 1 lock held by syz-executor/11142: [ 1334.242180][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1334.242240][ T38] 2 locks held by syz-executor/11176: [ 1334.242252][ T38] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1334.242309][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 1334.242360][ T38] 2 locks held by syz-executor/11179: [ 1334.242373][ T38] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1334.242428][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 1334.242479][ T38] 1 lock held by syz.6.1182/11199: [ 1334.242491][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1334.242542][ T38] 1 lock held by syz-executor/11209: [ 1334.242555][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1334.242619][ T38] 1 lock held by syz-executor/11216: [ 1334.242631][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1334.242688][ T38] 1 lock held by syz-executor/11219: [ 1334.242700][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1334.242758][ T38] 1 lock held by syz-executor/11231: [ 1334.242770][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1334.242823][ T38] 1 lock held by syz-executor/11237: [ 1334.242836][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1334.242887][ T38] 1 lock held by syz-executor/11241: [ 1334.242899][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1334.242950][ T38] 1 lock held by syz-executor/11247: [ 1334.242962][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1334.243013][ T38] 1 lock held by syz-executor/11249: [ 1334.243025][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1334.243074][ T38] 1 lock held by syz-executor/11254: [ 1334.243086][ T38] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1334.243139][ T38] [ 1334.243144][ T38] ============================================= [ 1334.243144][ T38] [ 1334.243155][ T38] NMI backtrace for cpu 0 [ 1334.243170][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1334.243194][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1334.243207][ T38] Call Trace: [ 1334.243215][ T38] [ 1334.243223][ T38] dump_stack_lvl+0x189/0x250 [ 1334.243260][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1334.243292][ T38] ? __pfx__printk+0x10/0x10 [ 1334.243329][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1334.243360][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1334.243391][ T38] ? __pfx__printk+0x10/0x10 [ 1334.243419][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1334.243450][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1334.243481][ T38] watchdog+0xf93/0xfe0 [ 1334.243515][ T38] ? watchdog+0x1de/0xfe0 [ 1334.243550][ T38] kthread+0x70e/0x8a0 [ 1334.243594][ T38] ? __pfx_watchdog+0x10/0x10 [ 1334.243621][ T38] ? __pfx_kthread+0x10/0x10 [ 1334.243659][ T38] ? __pfx_kthread+0x10/0x10 [ 1334.243692][ T38] ret_from_fork+0x3f9/0x770 [ 1334.243724][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.243759][ T38] ? __switch_to_asm+0x39/0x70 [ 1334.243778][ T38] ? __switch_to_asm+0x33/0x70 [ 1334.243797][ T38] ? __pfx_kthread+0x10/0x10 [ 1334.243831][ T38] ret_from_fork_asm+0x1a/0x30 [ 1334.243869][ T38] [ 1334.243878][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1334.243908][ C1] NMI backtrace for cpu 1 [ 1334.243924][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1334.243944][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1334.243954][ C1] RIP: 0010:___slab_alloc+0x485/0xdc0 [ 1334.243982][ C1] Code: 31 87 e3 08 41 89 c4 83 f8 08 0f 83 9a 08 00 00 4a 8b 04 e5 10 1d 25 8d 4a 8d 3c 28 48 83 c7 58 be ff ff ff ff e8 db 70 e3 08 <85> c0 0f 84 2e 08 00 00 49 8b 46 10 83 78 28 00 0f 89 b6 08 00 00 [ 1334.243997][ C1] RSP: 0018:ffffc90000a3ed48 EFLAGS: 00000282 [ 1334.244012][ C1] RAX: 0000000000000001 RBX: ffff88801bec1dc0 RCX: 365c2f3a6bfc7800 [ 1334.244024][ C1] RDX: 0000000000000000 RSI: ffffffff8d21a336 RDI: ffffffff8b621000 [ 1334.244036][ C1] RBP: ffffea000130fec0 R08: 0000000000000000 R09: ffffffff8af90c4b [ 1334.244047][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ab47 R12: 0000000000000001 [ 1334.244059][ C1] R13: ffffffff91f86680 R14: ffff8880b8945660 R15: ffff88804c3fb280 [ 1334.244071][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 1334.244086][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1334.244098][ C1] CR2: 00005609db32f400 CR3: 0000000036320000 CR4: 00000000003526f0 [ 1334.244115][ C1] Call Trace: [ 1334.244122][ C1] [ 1334.244128][ C1] ? __netif_receive_skb+0x143/0x380 [ 1334.244148][ C1] ? process_backlog+0x31e/0x900 [ 1334.244168][ C1] ? run_ktimerd+0xcf/0x190 [ 1334.244189][ C1] ? smpboot_thread_fn+0x53f/0xa60 [ 1334.244206][ C1] ? __alloc_skb+0x112/0x2d0 [ 1334.244230][ C1] ? __alloc_skb+0x112/0x2d0 [ 1334.244258][ C1] kmem_cache_alloc_node_noprof+0xf2/0x330 [ 1334.244283][ C1] __alloc_skb+0x112/0x2d0 [ 1334.244313][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 1334.244344][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1334.244367][ C1] ? nft_symhash_init+0x2a0/0x310 [ 1334.244390][ C1] ? synproxy_pernet+0x45/0x270 [ 1334.244410][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 1334.244430][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1334.244448][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1334.244467][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1334.244487][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1334.244504][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1334.244531][ C1] nft_do_chain+0x409/0x1920 [ 1334.244553][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1334.244583][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 1334.244607][ C1] nft_do_chain_inet+0x25d/0x340 [ 1334.244623][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1334.244640][ C1] ? __lock_acquire+0xab9/0xd20 [ 1334.244666][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1334.244688][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1334.244705][ C1] nf_hook_slow+0xc2/0x220 [ 1334.244730][ C1] NF_HOOK+0x206/0x3a0 [ 1334.244752][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1334.244774][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1334.244793][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1334.244812][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1334.244836][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1334.244858][ C1] ? skb_dst+0x4f/0xd0 [ 1334.244880][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1334.244904][ C1] NF_HOOK+0x30c/0x3a0 [ 1334.244925][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1334.244946][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1334.244966][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1334.244989][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1334.245015][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1334.245035][ C1] __netif_receive_skb+0x143/0x380 [ 1334.245054][ C1] ? rt_spin_unlock+0x65/0x80 [ 1334.245074][ C1] ? process_backlog+0x27b/0x900 [ 1334.245094][ C1] process_backlog+0x31e/0x900 [ 1334.245120][ C1] __napi_poll+0xb3/0x540 [ 1334.245142][ C1] net_rx_action+0x707/0xe00 [ 1334.245162][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.245193][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1334.245231][ C1] handle_softirqs+0x22f/0x710 [ 1334.245255][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1334.245280][ C1] run_ktimerd+0xcf/0x190 [ 1334.245302][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1334.245331][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1334.245351][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 1334.245372][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1334.245390][ C1] smpboot_thread_fn+0x53f/0xa60 [ 1334.245411][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1334.245434][ C1] kthread+0x70e/0x8a0 [ 1334.245459][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1334.245478][ C1] ? __pfx_kthread+0x10/0x10 [ 1334.245504][ C1] ? __pfx_kthread+0x10/0x10 [ 1334.245527][ C1] ret_from_fork+0x3f9/0x770 [ 1334.245549][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.245573][ C1] ? __switch_to_asm+0x39/0x70 [ 1334.245587][ C1] ? __switch_to_asm+0x33/0x70 [ 1334.245602][ C1] ? __pfx_kthread+0x10/0x10 [ 1334.245626][ C1] ret_from_fork_asm+0x1a/0x30 [ 1334.245649][ C1] [ 1334.245904][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1334.245921][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1334.245945][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1334.245957][ T38] Call Trace: [ 1334.245965][ T38] [ 1334.245974][ T38] dump_stack_lvl+0x99/0x250 [ 1334.246006][ T38] ? __asan_memcpy+0x40/0x70 [ 1334.246030][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1334.246062][ T38] ? __pfx__printk+0x10/0x10 [ 1334.246100][ T38] vpanic+0x281/0x750 [ 1334.246135][ T38] ? __pfx_vpanic+0x10/0x10 [ 1334.246165][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1334.246188][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1334.246231][ T38] panic+0xb9/0xc0 [ 1334.246263][ T38] ? __pfx_panic+0x10/0x10 [ 1334.246297][ T38] ? irq_work_queue+0xc3/0x140 [ 1334.246328][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1334.246359][ T38] watchdog+0xfd2/0xfe0 [ 1334.246392][ T38] ? watchdog+0x1de/0xfe0 [ 1334.246426][ T38] kthread+0x70e/0x8a0 [ 1334.246461][ T38] ? __pfx_watchdog+0x10/0x10 [ 1334.246488][ T38] ? __pfx_kthread+0x10/0x10 [ 1334.246530][ T38] ? __pfx_kthread+0x10/0x10 [ 1334.246567][ T38] ret_from_fork+0x3f9/0x770 [ 1334.246597][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.246632][ T38] ? __switch_to_asm+0x39/0x70 [ 1334.246652][ T38] ? __switch_to_asm+0x33/0x70 [ 1334.246671][ T38] ? __pfx_kthread+0x10/0x10 [ 1334.246705][ T38] ret_from_fork_asm+0x1a/0x30 [ 1334.246743][ T38] [ 1334.247080][ T38] Kernel Offset: disabled