last executing test programs: 2m7.751121573s ago: executing program 2 (id=3): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x4, 0x7, 0x400) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r1, 0x0, 0x333abdda, 0x401}) 2m6.678533232s ago: executing program 2 (id=7): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/{ys/kCrn0l/debug/sync/inf\x8c\x00'}, 0x30) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000500), 0x0, 0x4044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x38}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000"], 0x0) 1m59.029154888s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 1m43.319326806s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 17.323687624s ago: executing program 3 (id=166): r0 = creat(0x0, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = dup(0xffffffffffffffff) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r3, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, r0}, 0x94) r7 = socket$kcm(0x2d, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) 14.600707396s ago: executing program 1 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x5a59) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) syz_usbip_server_init(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) 13.213324822s ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000dc0)='./file1\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0xa, 0x8001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') getdents(r4, 0x0, 0x48) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0xa0000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d29bd700001dcdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="2000308014000400b64e94522f4bf885d3348e929ef5a42502b8d7238b40761a81213d3f93fd0000008067ab4ac54eeba882c41179f59bd3b86f7e3c04e8437ff7352e077667b0907c9fb735657a57b7539771044e76f6b8dd1ee5202d17611f5e08fdb524e324337901a230488badf57fe7a261d45d"], 0x3c}, 0x1, 0x0, 0x0, 0x4044181}, 0x0) 11.021240125s ago: executing program 1 (id=176): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113b00000000008510f8ff01b100009500001200000000"], 0x0, 0x4}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4071}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSBRKP(r4, 0x5425, 0x4) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r11 = dup(r3) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) 9.380030215s ago: executing program 1 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) 9.323184293s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r5 = socket$rds(0x15, 0x5, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040), &(0x7f00000000c0), 0x4, 0x1) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) recvfrom(r3, &(0x7f00000004c0)=""/54, 0x36, 0x100, &(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@dev}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f00000003c0)='./file0\x00', r7, 0xee01) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r8, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(0x0, r9) 9.156132149s ago: executing program 4 (id=182): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) socket$key(0xf, 0x3, 0x2) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 8.444572302s ago: executing program 1 (id=183): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000059f0ffffb31ea7d535dc31c2093bb2063bbbed3800000000ad4be5ad793902005d7147e688423b74e1782ca71fc139a727771c288433f21f08"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r7) write$cgroup_subtree(r8, &(0x7f0000003100)=ANY=[], 0x10448) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 8.21945897s ago: executing program 3 (id=185): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x40010, r0, 0x8000000) 8.179602982s ago: executing program 4 (id=186): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r5 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="a5", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="a5", 0x1, 0xfffffffffffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x4, 0x7, 0x800}}) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d3", 0xc2, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xbc, 0x52, 0x0, 0x0) 5.78425139s ago: executing program 0 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) 5.458481699s ago: executing program 4 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) (fail_nth: 1) 5.335139064s ago: executing program 1 (id=189): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6004000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aae638005b"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) 3.666452476s ago: executing program 0 (id=190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000006feffff720af0fff8ffffff71a4f0ff000000006a030000000100001d400500000000004704000001ed000072030000000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000000c0)={0x5, 0xc6f, 0x0, 0x6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@map=0x1, 0xc, 0x1, 0xffff, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)={@map, r1, 0x1c, 0x11, 0xffffffffffffffff, @void, @value, @void, @void, r2}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r3, r0, 0x21, 0x8, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) 3.663560317s ago: executing program 1 (id=191): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) socket$kcm(0xa, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x80b) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) 3.550745338s ago: executing program 4 (id=192): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 3.459537576s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 3.357224963s ago: executing program 3 (id=194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xc2, 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$nci(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="710502063fd72771a698960202bfe9773c6a"], 0x12) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) 1.744616681s ago: executing program 0 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="4fbb32", 0x3}], 0x1) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)=ANY=[@ANYRES32, @ANYBLOB="2f00f20000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r2, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) (async) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x40000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) socket$isdn(0x22, 0x3, 0x26) (async) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x4000) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x3f58, &(0x7f0000000380)={0x0, 0xa8b6, 0x400, 0x3, 0x325}, &(0x7f0000000200), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000580)=""/2, 0x2}], 0x2) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) 1.335939885s ago: executing program 4 (id=196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) socket$key(0xf, 0x3, 0x2) r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r1, &(0x7f0000000040)={':!-}@^(', 0x20, ':\xba,$:', 0x20, 'wb'}, 0x11) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 498.211049ms ago: executing program 3 (id=197): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003540)={0x84, &(0x7f0000000a40)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x2, 0x5, {0x5, 0x7, "068e6a"}}, &(0x7f0000000080)={0x0, 0x3, 0x91, @string={0x91, 0x3, "f56ce4eca2aa94c7b54b16bdc2096ae3115d58c9589abb68670cd2e8807bfc1520200133b3d6adc72bfe2e1d2bcb7e15771c45637ac286937f0cbee3e3417dbc509ad858381f9b874539d12d5270792e6bad596c2772d64c249105f76ce6e8d653c3e744c5edf6368ba648a831ce4638a6da346904a75f7a81a7b8f77f16f3938e21c3f6518c8b07e1a413d236d0eb"}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x17, 0x5b, "fbe61ffa8d5348c06e8d64f5d221140e6be66d9e9f44896557546841af568f427a333e4e7ddea39e5f7e4b8546517ecc9556ff2ae6ad3b5ad9af0c908b99c0cc43dd92f789930856b217564abe530355cdad92f2667fa43bb3d0b8"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0xc0, 0x5, 0x5, "b5a1021c0c"}, &(0x7f00000002c0)={0x40, 0x5, 0x1, "15"}}) 347.563141ms ago: executing program 0 (id=198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x48, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b64e94522f4bf885d3345e6373c5a425"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfd}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044181}, 0x0) 293.01104ms ago: executing program 4 (id=199): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = epoll_create1(0x0) creat(0x0, 0x4b) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) socket$kcm(0x2d, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r7 = syz_open_dev$media(&(0x7f0000000180), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000240)={0x200b}) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 0 (id=200): r0 = syz_io_uring_setup(0x2666, &(0x7f0000000240)={0x0, 0x7736, 0x1ff, 0xefffffff, 0x3c3}, &(0x7f00000001c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/{ys/kCrn0l/debug/sync/inf\x8c\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) fcntl$setsig(r2, 0xa, 0x11) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}, {&(0x7f0000000240)}, {0x0}], 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000400000000008400000000000010ff0700000300000018000000000000008400000007000000ffffffff00000000"], 0x30, 0x14001}], 0x1, 0x4044040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x38}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100de2ae663e7005d35b94082058d00ac7a010203010902120001000000000904000000959ec800"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 80.620453][ T5826] cgroup: Unknown subsys name 'net' [ 80.853858][ T5826] cgroup: Unknown subsys name 'cpuset' [ 80.909440][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.696182][ T9] cfg80211: failed to load regulatory.db [ 82.726881][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.623728][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.624603][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.626263][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.628609][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.633032][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.640938][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.652293][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.681620][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.682445][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.683777][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.699367][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.699673][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.699816][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.700649][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.708209][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.709139][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.713585][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.715182][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.729351][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.746558][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.850590][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.852117][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.854290][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.859811][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.861674][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.716125][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.737682][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 86.826443][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.035109][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 87.055078][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.738624][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.740786][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.741362][ T5848] bridge_slave_0: entered allmulticast mode [ 87.744175][ T5848] bridge_slave_0: entered promiscuous mode [ 87.772095][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.772173][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.772309][ T5838] bridge_slave_0: entered allmulticast mode [ 87.773856][ T5838] bridge_slave_0: entered promiscuous mode [ 87.780844][ T5155] Bluetooth: hci2: command tx timeout [ 87.780971][ T5155] Bluetooth: hci3: command tx timeout [ 87.781049][ T5155] Bluetooth: hci0: command tx timeout [ 87.781292][ T5847] Bluetooth: hci1: command tx timeout [ 87.911883][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.912023][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.912629][ T5848] bridge_slave_1: entered allmulticast mode [ 87.915652][ T5848] bridge_slave_1: entered promiscuous mode [ 87.928844][ T5847] Bluetooth: hci4: command tx timeout [ 87.929880][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.930094][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.930277][ T5838] bridge_slave_1: entered allmulticast mode [ 87.933006][ T5838] bridge_slave_1: entered promiscuous mode [ 88.320200][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.320452][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.320629][ T5837] bridge_slave_0: entered allmulticast mode [ 88.323309][ T5837] bridge_slave_0: entered promiscuous mode [ 88.663668][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.663807][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.664015][ T5837] bridge_slave_1: entered allmulticast mode [ 88.666782][ T5837] bridge_slave_1: entered promiscuous mode [ 88.683695][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.683941][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.684066][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.684225][ T5852] bridge_slave_0: entered allmulticast mode [ 88.686786][ T5852] bridge_slave_0: entered promiscuous mode [ 88.704734][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.720111][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.720242][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.720469][ T5842] bridge_slave_0: entered allmulticast mode [ 88.723180][ T5842] bridge_slave_0: entered promiscuous mode [ 88.823718][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.823932][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.824060][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.824223][ T5852] bridge_slave_1: entered allmulticast mode [ 88.827184][ T5852] bridge_slave_1: entered promiscuous mode [ 88.836527][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.930277][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.930442][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.930631][ T5842] bridge_slave_1: entered allmulticast mode [ 88.934091][ T5842] bridge_slave_1: entered promiscuous mode [ 89.316602][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.574477][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.576895][ T5848] team0: Port device team_slave_0 added [ 89.581039][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.583693][ T5838] team0: Port device team_slave_0 added [ 89.588526][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.662638][ T5848] team0: Port device team_slave_1 added [ 89.666579][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.671087][ T5838] team0: Port device team_slave_1 added [ 89.675067][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.849855][ T5847] Bluetooth: hci1: command tx timeout [ 89.849890][ T5847] Bluetooth: hci0: command tx timeout [ 89.849911][ T5847] Bluetooth: hci3: command tx timeout [ 89.849930][ T5847] Bluetooth: hci2: command tx timeout [ 90.009040][ T5845] Bluetooth: hci4: command tx timeout [ 90.038230][ T5837] team0: Port device team_slave_0 added [ 90.555411][ T5837] team0: Port device team_slave_1 added [ 90.556610][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.556621][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.556634][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.566868][ T5852] team0: Port device team_slave_0 added [ 90.568147][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.568158][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.568180][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.591063][ T5842] team0: Port device team_slave_0 added [ 90.680971][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.680987][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.681010][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.683264][ T5852] team0: Port device team_slave_1 added [ 90.684249][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.684259][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.684272][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.686399][ T5842] team0: Port device team_slave_1 added [ 90.971130][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.971146][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.971169][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.142582][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.142598][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.142621][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.145634][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.145647][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.145669][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.256917][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.256933][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.256956][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.376023][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.376037][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.376059][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.464630][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.464641][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.464654][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.631538][ T5848] hsr_slave_0: entered promiscuous mode [ 91.633208][ T5848] hsr_slave_1: entered promiscuous mode [ 91.652129][ T5838] hsr_slave_0: entered promiscuous mode [ 91.653569][ T5838] hsr_slave_1: entered promiscuous mode [ 91.654725][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 91.654851][ T5838] Cannot create hsr debugfs directory [ 91.929012][ T5845] Bluetooth: hci2: command tx timeout [ 91.929045][ T5845] Bluetooth: hci3: command tx timeout [ 91.929065][ T5845] Bluetooth: hci0: command tx timeout [ 91.929083][ T5845] Bluetooth: hci1: command tx timeout [ 92.088872][ T5847] Bluetooth: hci4: command tx timeout [ 92.142926][ T5837] hsr_slave_0: entered promiscuous mode [ 92.143715][ T5837] hsr_slave_1: entered promiscuous mode [ 92.144226][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 92.144246][ T5837] Cannot create hsr debugfs directory [ 92.487919][ T5852] hsr_slave_0: entered promiscuous mode [ 92.489422][ T5852] hsr_slave_1: entered promiscuous mode [ 92.490256][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 92.490279][ T5852] Cannot create hsr debugfs directory [ 92.510613][ T5842] hsr_slave_0: entered promiscuous mode [ 92.511884][ T5842] hsr_slave_1: entered promiscuous mode [ 92.512718][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.512739][ T5842] Cannot create hsr debugfs directory [ 93.986618][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.009348][ T5845] Bluetooth: hci0: command tx timeout [ 94.009377][ T5845] Bluetooth: hci3: command tx timeout [ 94.009398][ T5845] Bluetooth: hci2: command tx timeout [ 94.009456][ T5847] Bluetooth: hci1: command tx timeout [ 94.063942][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.097763][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.150619][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.168925][ T5847] Bluetooth: hci4: command tx timeout [ 94.293557][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.332689][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.393668][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.437204][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.574962][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.622785][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.660027][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.715497][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.900357][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.938455][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.986078][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.031026][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.183538][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.235268][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.278043][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.324449][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.365553][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.492087][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.521011][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.575922][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.576500][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.636955][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.637057][ T1434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.660528][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.687620][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.725137][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.725391][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.777491][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.777712][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.836091][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.888587][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.889434][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.922580][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.959366][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.959462][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.081430][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.087438][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.154026][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.154300][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.262555][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.262846][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.283620][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.367882][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.368125][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.425365][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.425638][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.726650][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.754895][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.032402][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.105949][ T5848] veth0_vlan: entered promiscuous mode [ 97.160628][ T5838] veth0_vlan: entered promiscuous mode [ 97.202170][ T5848] veth1_vlan: entered promiscuous mode [ 97.247183][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.260998][ T5838] veth1_vlan: entered promiscuous mode [ 97.441718][ T5837] veth0_vlan: entered promiscuous mode [ 97.471875][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.531786][ T5848] veth0_macvtap: entered promiscuous mode [ 97.565772][ T5837] veth1_vlan: entered promiscuous mode [ 97.582117][ T5838] veth0_macvtap: entered promiscuous mode [ 97.586303][ T5848] veth1_macvtap: entered promiscuous mode [ 97.660043][ T5838] veth1_macvtap: entered promiscuous mode [ 97.736157][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.770000][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.776211][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.815955][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.850976][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.868138][ T5842] veth0_vlan: entered promiscuous mode [ 97.877407][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.897252][ T5837] veth0_macvtap: entered promiscuous mode [ 97.906422][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.923532][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.940345][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957534][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.966647][ T5837] veth1_macvtap: entered promiscuous mode [ 98.003305][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.007775][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.024866][ T5842] veth1_vlan: entered promiscuous mode [ 98.118129][ T5852] veth0_vlan: entered promiscuous mode [ 98.324532][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.340916][ T5852] veth1_vlan: entered promiscuous mode [ 98.428212][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.459698][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.459722][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.515206][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.539520][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.547265][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.585771][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.598100][ T5842] veth0_macvtap: entered promiscuous mode [ 98.606366][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.606385][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.726515][ T5842] veth1_macvtap: entered promiscuous mode [ 98.739612][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.739631][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.892983][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.893002][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.898063][ T5852] veth0_macvtap: entered promiscuous mode [ 98.998560][ T5852] veth1_macvtap: entered promiscuous mode [ 99.021655][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.121800][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.172299][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.172319][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.227958][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.234330][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266381][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.094514][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.097750][ T1434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.155916][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.176669][ T1434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.888543][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.008835][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.019475][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.019494][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.049041][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.150468][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.175550][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.270916][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.534096][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.550268][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.477677][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.477696][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.498817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.508948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.598695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.598883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.598936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.599018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.599069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.599134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.599210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.599436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.853913][ T994] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.918876][ T994] usb 3-1: device descriptor read/64, error -71 [ 110.627355][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.627375][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.955435][ T1453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.955455][ T1453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.735785][ T5995] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.872405][ T1518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.872424][ T1518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.732912][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.230711][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.539138][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.573862][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.014380][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.374682][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.058823][ T5921] usb 4-1: device descriptor read/64, error -71 [ 118.891168][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.190332][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.839148][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.010188][ T5928] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 124.010215][ T5928] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 124.010233][ T5928] usb 2-1: config 220 has no interface number 2 [ 124.010669][ T5928] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 124.010695][ T5928] usb 2-1: config 220 interface 0 has no altsetting 0 [ 124.010710][ T5928] usb 2-1: config 220 interface 76 has no altsetting 0 [ 124.010725][ T5928] usb 2-1: config 220 interface 1 has no altsetting 0 [ 124.015540][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 124.015566][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.015583][ T5928] usb 2-1: Product: syz [ 124.015595][ T5928] usb 2-1: Manufacturer: syz [ 124.015607][ T5928] usb 2-1: SerialNumber: syz [ 124.459663][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.498479][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.585234][ T5928] usb 2-1: selecting invalid altsetting 0 [ 124.601115][ T5928] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 124.601150][ T5928] usb 2-1: No valid video chain found. [ 124.645524][ T5928] usb 2-1: selecting invalid altsetting 0 [ 124.645563][ T5928] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 124.937480][ T5928] usb 2-1: USB disconnect, device number 2 [ 128.137205][ T44] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 128.959754][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 128.959787][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 128.959809][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 128.967040][ T44] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 128.967067][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.967085][ T44] usb 4-1: Product: syz [ 128.967096][ T44] usb 4-1: Manufacturer: syz [ 128.967107][ T44] usb 4-1: SerialNumber: syz [ 129.093948][ T44] usb 4-1: config 0 descriptor?? [ 129.097028][ T6079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.097518][ T6079] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.119801][ T44] usb 4-1: ucan: probing device on interface #0 [ 129.258833][ T6074] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.403215][ T6074] usb 2-1: device descriptor read/64, error -71 [ 129.752489][ T44] ucan 4-1:0.0: probe with driver ucan failed with error -22 [ 129.770419][ T6074] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.302700][ T6074] usb 2-1: device descriptor read/64, error -71 [ 130.496034][ T6074] usb usb2-port1: attempt power cycle [ 130.563351][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.564546][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.642868][ T44] usb 4-1: USB disconnect, device number 4 [ 130.831091][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.868994][ T6074] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.889193][ T6074] usb 2-1: device descriptor read/8, error -71 [ 130.902032][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.906096][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.925376][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.926504][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.947874][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948184][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.485766][ T5155] Bluetooth: hci5: command tx timeout [ 134.667336][ T6124] FAULT_INJECTION: forcing a failure. [ 134.667336][ T6124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.667386][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.3.37 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.667406][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.667425][ T6124] Call Trace: [ 134.667432][ T6124] [ 134.667440][ T6124] dump_stack_lvl+0x189/0x250 [ 134.667478][ T6124] ? __pfx____ratelimit+0x10/0x10 [ 134.667501][ T6124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.667523][ T6124] ? __pfx__printk+0x10/0x10 [ 134.667542][ T6124] ? __might_fault+0xb0/0x130 [ 134.667576][ T6124] should_fail_ex+0x46c/0x600 [ 134.667603][ T6124] _copy_from_user+0x2d/0xb0 [ 134.667622][ T6124] ___sys_sendmsg+0x158/0x2a0 [ 134.667648][ T6124] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.667706][ T6124] ? __fget_files+0x2a/0x420 [ 134.667727][ T6124] ? __fget_files+0x3a6/0x420 [ 134.667759][ T6124] __sys_sendmmsg+0x22d/0x430 [ 134.667787][ T6124] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.667819][ T6124] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 134.667852][ T6124] ? ksys_write+0x230/0x260 [ 134.667875][ T6124] ? __pfx_ksys_write+0x10/0x10 [ 134.667892][ T6124] ? rcu_is_watching+0x15/0xb0 [ 134.667922][ T6124] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.667947][ T6124] do_syscall_64+0xfa/0x3b0 [ 134.667967][ T6124] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.667987][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.668004][ T6124] ? clear_bhb_loop+0x60/0xb0 [ 134.668025][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.668042][ T6124] RIP: 0033:0x7f3d4e9eebe9 [ 134.668062][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.668075][ T6124] RSP: 002b:00007f3d4cc56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.668100][ T6124] RAX: ffffffffffffffda RBX: 00007f3d4ec25fa0 RCX: 00007f3d4e9eebe9 [ 134.668112][ T6124] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 134.668124][ T6124] RBP: 00007f3d4cc56090 R08: 0000000000000000 R09: 0000000000000000 [ 134.668134][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.668144][ T6124] R13: 00007f3d4ec26038 R14: 00007f3d4ec25fa0 R15: 00007ffe4a3e4938 [ 134.668172][ T6124] [ 135.773368][ T5155] Bluetooth: hci5: command tx timeout [ 135.974957][ T6134] IPv6: Can't replace route, no match found [ 138.404321][ T6137] Zero length message leads to an empty skb [ 138.404525][ T5847] Bluetooth: hci5: command tx timeout [ 140.139177][ T6156] FAULT_INJECTION: forcing a failure. [ 140.139177][ T6156] name failslab, interval 1, probability 0, space 0, times 1 [ 140.139209][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.139229][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.139238][ T6156] Call Trace: [ 140.139246][ T6156] [ 140.139253][ T6156] dump_stack_lvl+0x189/0x250 [ 140.139282][ T6156] ? __pfx____ratelimit+0x10/0x10 [ 140.139305][ T6156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.139328][ T6156] ? __pfx__printk+0x10/0x10 [ 140.139352][ T6156] ? __pfx___might_resched+0x10/0x10 [ 140.139370][ T6156] ? fs_reclaim_acquire+0x7d/0x100 [ 140.139391][ T6156] should_fail_ex+0x46c/0x600 [ 140.139417][ T6156] ? getname_flags+0xb8/0x540 [ 140.139439][ T6156] should_failslab+0xa8/0x100 [ 140.139461][ T6156] ? getname_flags+0xb8/0x540 [ 140.139481][ T6156] kmem_cache_alloc_noprof+0x6e/0x310 [ 140.139509][ T6156] getname_flags+0xb8/0x540 [ 140.139536][ T6156] do_sys_openat2+0xbc/0x1c0 [ 140.139556][ T6156] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.139574][ T6156] ? ksys_write+0x230/0x260 [ 140.139596][ T6156] ? __pfx_ksys_write+0x10/0x10 [ 140.139620][ T6156] __x64_sys_openat+0x138/0x170 [ 140.139642][ T6156] do_syscall_64+0xfa/0x3b0 [ 140.139663][ T6156] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.139684][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.139701][ T6156] ? clear_bhb_loop+0x60/0xb0 [ 140.139722][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.139738][ T6156] RIP: 0033:0x7f9cedb2ebe9 [ 140.139754][ T6156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.139767][ T6156] RSP: 002b:00007f9cebd4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.139786][ T6156] RAX: ffffffffffffffda RBX: 00007f9cedd66180 RCX: 00007f9cedb2ebe9 [ 140.139798][ T6156] RDX: 0000000000004842 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 140.139809][ T6156] RBP: 00007f9cebd4c090 R08: 0000000000000000 R09: 0000000000000000 [ 140.139820][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.139830][ T6156] R13: 00007f9cedd66218 R14: 00007f9cedd66180 R15: 00007ffe41145f18 [ 140.139858][ T6156] [ 140.476444][ T5155] Bluetooth: hci5: command tx timeout [ 142.014766][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.464247][ T6174] FAULT_INJECTION: forcing a failure. [ 142.464247][ T6174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.464305][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.464325][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.464336][ T6174] Call Trace: [ 142.464343][ T6174] [ 142.464351][ T6174] dump_stack_lvl+0x189/0x250 [ 142.464380][ T6174] ? __pfx____ratelimit+0x10/0x10 [ 142.464402][ T6174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.464425][ T6174] ? __pfx__printk+0x10/0x10 [ 142.464444][ T6174] ? __might_fault+0xb0/0x130 [ 142.464478][ T6174] should_fail_ex+0x46c/0x600 [ 142.464506][ T6174] _copy_to_iter+0x1de/0x1790 [ 142.464546][ T6174] ? __pfx__copy_to_iter+0x10/0x10 [ 142.464574][ T6174] ? chacha_block_generic+0x53/0xc80 [ 142.464609][ T6174] get_random_bytes_user+0x1a0/0x380 [ 142.464633][ T6174] ? __pfx_get_random_bytes_user+0x10/0x10 [ 142.464650][ T6174] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 142.464693][ T6174] ? import_ubuf+0xfb/0x1d0 [ 142.464713][ T6174] __x64_sys_getrandom+0x16d/0x260 [ 142.464734][ T6174] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 142.464772][ T6174] do_syscall_64+0xfa/0x3b0 [ 142.464795][ T6174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.464812][ T6174] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 142.464828][ T6174] ? clear_bhb_loop+0x60/0xb0 [ 142.464847][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.464864][ T6174] RIP: 0033:0x7f9cedb2ebe9 [ 142.464879][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.464893][ T6174] RSP: 002b:00007f9cebd4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 142.464911][ T6174] RAX: ffffffffffffffda RBX: 00007f9cedd66180 RCX: 00007f9cedb2ebe9 [ 142.464924][ T6174] RDX: 0000000000000000 RSI: 00000000ffffff4f RDI: 0000200000000600 [ 142.464935][ T6174] RBP: 00007f9cebd4c090 R08: 0000000000000000 R09: 0000000000000000 [ 142.464946][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.464956][ T6174] R13: 00007f9cedd66218 R14: 00007f9cedd66180 R15: 00007ffe41145f18 [ 142.464985][ T6174] [ 143.708793][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.895348][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.895374][ T5956] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 143.895421][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.933895][ T5956] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 143.933922][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.933940][ T5956] usb 4-1: Product: syz [ 143.933952][ T5956] usb 4-1: Manufacturer: syz [ 143.933964][ T5956] usb 4-1: SerialNumber: syz [ 143.971509][ T5956] usb 4-1: config 0 descriptor?? [ 144.020679][ T5956] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 144.239029][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.468767][ T31] usb 4-1: USB disconnect, device number 5 [ 145.701277][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.127217][ T6208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.392752][ T6212] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.391969][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.479841][ T6217] FAULT_INJECTION: forcing a failure. [ 149.479841][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 149.479869][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.479888][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.479897][ T6217] Call Trace: [ 149.479904][ T6217] [ 149.479912][ T6217] dump_stack_lvl+0x189/0x250 [ 149.479939][ T6217] ? __pfx____ratelimit+0x10/0x10 [ 149.479960][ T6217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.479983][ T6217] ? __pfx__printk+0x10/0x10 [ 149.480007][ T6217] ? __pfx___might_resched+0x10/0x10 [ 149.480025][ T6217] ? fs_reclaim_acquire+0x7d/0x100 [ 149.480046][ T6217] should_fail_ex+0x46c/0x600 [ 149.480074][ T6217] should_failslab+0xa8/0x100 [ 149.480133][ T6217] __kmalloc_noprof+0xcb/0x430 [ 149.480155][ T6217] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 149.480183][ T6217] tomoyo_realpath_from_path+0xe3/0x5d0 [ 149.480204][ T6217] ? tomoyo_domain+0xda/0x130 [ 149.480231][ T6217] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 149.480249][ T6217] tomoyo_path_number_perm+0x1e8/0x5a0 [ 149.480272][ T6217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.480296][ T6217] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 149.480318][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.480347][ T6217] ? __lock_acquire+0xab9/0xd20 [ 149.480389][ T6217] ? __fget_files+0x2a/0x420 [ 149.480413][ T6217] ? __fget_files+0x2a/0x420 [ 149.480432][ T6217] ? __fget_files+0x3a6/0x420 [ 149.480452][ T6217] ? __fget_files+0x2a/0x420 [ 149.480477][ T6217] security_file_ioctl+0xcb/0x2d0 [ 149.480499][ T6217] __se_sys_ioctl+0x47/0x170 [ 149.480522][ T6217] do_syscall_64+0xfa/0x3b0 [ 149.480542][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.480562][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.480578][ T6217] ? clear_bhb_loop+0x60/0xb0 [ 149.480599][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.480615][ T6217] RIP: 0033:0x7f9cedb2ebe9 [ 149.480631][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.480643][ T6217] RSP: 002b:00007f9cebd8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.480661][ T6217] RAX: ffffffffffffffda RBX: 00007f9cedd65fa0 RCX: 00007f9cedb2ebe9 [ 149.480674][ T6217] RDX: 0000200000000080 RSI: 00000000c008561c RDI: 0000000000000003 [ 149.480685][ T6217] RBP: 00007f9cebd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 149.480695][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.480705][ T6217] R13: 00007f9cedd66038 R14: 00007f9cedd65fa0 R15: 00007ffe41145f18 [ 149.480733][ T6217] [ 149.480740][ T6217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.742918][ T6096] chnl_net:caif_netlink_parms(): no params data found [ 150.018806][ T5956] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 150.201181][ T5956] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 150.201208][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.220349][ T5956] usb 1-1: config 0 descriptor?? [ 150.511086][ T5956] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 152.773310][ T6060] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.045690][ T6253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.679937][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.684223][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.685643][ T6096] bridge_slave_0: entered allmulticast mode [ 153.690875][ T5956] gp8psk: usb out operation failed. [ 153.690911][ T5956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 153.690952][ T5956] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 153.780468][ T6096] bridge_slave_0: entered promiscuous mode [ 153.790794][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.790932][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.791154][ T6096] bridge_slave_1: entered allmulticast mode [ 153.819637][ T6096] bridge_slave_1: entered promiscuous mode [ 155.031339][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.128294][ T10] usb 1-1: USB disconnect, device number 2 [ 155.201240][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.201295][ T5920] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.201315][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.274783][ T5920] usb 2-1: config 0 descriptor?? [ 155.300339][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 155.391782][ T6276] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 156.930230][ T5920] pwc: recv_control_msg error -71 req 02 val 2b00 [ 156.931072][ T5920] pwc: recv_control_msg error -71 req 02 val 2700 [ 156.931677][ T5920] pwc: recv_control_msg error -71 req 02 val 2c00 [ 156.932140][ T5920] pwc: recv_control_msg error -71 req 04 val 1000 [ 156.935356][ T5920] pwc: recv_control_msg error -71 req 04 val 1300 [ 156.935776][ T5920] pwc: recv_control_msg error -71 req 04 val 1400 [ 156.936399][ T5920] pwc: recv_control_msg error -71 req 02 val 2000 [ 156.936828][ T5920] pwc: recv_control_msg error -71 req 02 val 2100 [ 156.997560][ T5920] pwc: recv_control_msg error -71 req 04 val 1500 [ 157.006898][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.039081][ T5920] pwc: recv_control_msg error -71 req 02 val 2500 [ 157.039622][ T5920] pwc: recv_control_msg error -71 req 02 val 2400 [ 157.040994][ T5920] pwc: recv_control_msg error -71 req 02 val 2600 [ 157.041493][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 157.041966][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.044337][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.045549][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.105455][ T5920] pwc: Registered as video103. [ 157.114928][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 157.235207][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.308909][ T5920] usb 2-1: USB disconnect, device number 7 [ 157.340684][ T57] bridge_slave_1: left allmulticast mode [ 157.343259][ T57] bridge_slave_1: left promiscuous mode [ 157.347733][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.491259][ T6289] FAULT_INJECTION: forcing a failure. [ 157.491259][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 157.491280][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.491294][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.491301][ T6289] Call Trace: [ 157.491305][ T6289] [ 157.491309][ T6289] dump_stack_lvl+0x189/0x250 [ 157.491328][ T6289] ? __pfx____ratelimit+0x10/0x10 [ 157.491341][ T6289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.491353][ T6289] ? __pfx__printk+0x10/0x10 [ 157.491367][ T6289] ? __pfx___might_resched+0x10/0x10 [ 157.491378][ T6289] ? fs_reclaim_acquire+0x7d/0x100 [ 157.491389][ T6289] should_fail_ex+0x46c/0x600 [ 157.491405][ T6289] should_failslab+0xa8/0x100 [ 157.491420][ T6289] __kmalloc_noprof+0xcb/0x430 [ 157.491431][ T6289] ? copy_splice_read+0x143/0xa60 [ 157.491446][ T6289] copy_splice_read+0x143/0xa60 [ 157.491461][ T6289] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 157.491473][ T6289] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.491486][ T6289] ? __pfx_copy_splice_read+0x10/0x10 [ 157.491496][ T6289] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 157.491507][ T6289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.491523][ T6289] ? wait_for_space+0x24d/0x2d0 [ 157.491538][ T6289] ? __pfx_copy_splice_read+0x10/0x10 [ 157.491549][ T6289] splice_file_to_pipe+0x27c/0x450 [ 157.491564][ T6289] do_sendfile+0x487/0x7f0 [ 157.491578][ T6289] ? __pfx_vfs_write+0x10/0x10 [ 157.491592][ T6289] ? __pfx_do_sendfile+0x10/0x10 [ 157.491612][ T6289] __se_sys_sendfile64+0x13e/0x190 [ 157.491626][ T6289] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 157.491638][ T6289] ? rcu_is_watching+0x15/0xb0 [ 157.491654][ T6289] ? do_syscall_64+0xbe/0x3b0 [ 157.491669][ T6289] do_syscall_64+0xfa/0x3b0 [ 157.491680][ T6289] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.491691][ T6289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.491700][ T6289] ? clear_bhb_loop+0x60/0xb0 [ 157.491711][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.491720][ T6289] RIP: 0033:0x7f8bc77cebe9 [ 157.491729][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.491739][ T6289] RSP: 002b:00007f8bc5a0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.491753][ T6289] RAX: ffffffffffffffda RBX: 00007f8bc7a06090 RCX: 00007f8bc77cebe9 [ 157.491760][ T6289] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 157.491765][ T6289] RBP: 00007f8bc5a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 157.491771][ T6289] R10: 0000000000110003 R11: 0000000000000246 R12: 0000000000000001 [ 157.491776][ T6289] R13: 00007f8bc7a06128 R14: 00007f8bc7a06090 R15: 00007fffc72178d8 [ 157.491792][ T6289] [ 157.795238][ T57] bridge_slave_0: left allmulticast mode [ 157.795268][ T57] bridge_slave_0: left promiscuous mode [ 157.798861][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.946578][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.546510][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.683488][ T6314] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.873346][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.594570][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.761362][ T6326] loop7: detected capacity change from 0 to 7 [ 162.796665][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.796773][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797011][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.797036][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797159][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.797178][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797294][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.797316][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797467][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.797488][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797626][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.797647][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797768][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.797789][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.797872][ T6326] ldm_validate_partition_table(): Disk read failed. [ 162.798022][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.798044][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.798165][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.798185][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.798304][ T6326] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.798326][ T6326] Buffer I/O error on dev loop7, logical block 0, async page read [ 162.798531][ T6326] Dev loop7: unable to read RDB block 0 [ 162.809375][ T6326] loop7: unable to read partition table [ 162.809603][ T6326] loop7: partition table beyond EOD, truncated [ 162.809635][ T6326] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 163.611781][ T6331] trusted_key: encrypted_key: insufficient parameters specified [ 164.540645][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.599262][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.627971][ T57] bond0 (unregistering): Released all slaves [ 164.833165][ T6096] team0: Port device team_slave_0 added [ 164.842764][ T6096] team0: Port device team_slave_1 added [ 165.049021][ T6331] syz.0.83 (6331) used greatest stack depth: 18968 bytes left [ 165.845810][ T6339] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 170.292366][ T6364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 172.333944][ T6381] loop7: detected capacity change from 0 to 7 [ 172.358583][ C0] blk_print_req_error: 5 callbacks suppressed [ 172.358602][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.358752][ C0] buffer_io_error: 5 callbacks suppressed [ 172.358764][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.397021][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.397059][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.397389][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.397416][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.397673][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.397700][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.455042][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.455081][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.479752][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.479789][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.508889][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.508929][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.512120][ T6381] ldm_validate_partition_table(): Disk read failed. [ 172.512372][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.512402][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.571449][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.571487][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.571867][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.571896][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.572630][ T6381] Dev loop7: unable to read RDB block 0 [ 172.573717][ T6381] loop7: unable to read partition table [ 172.573948][ T6381] loop7: partition table beyond EOD, truncated [ 172.573979][ T6381] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 172.670016][ T6387] FAULT_INJECTION: forcing a failure. [ 172.670016][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.670046][ T6387] CPU: 0 UID: 0 PID: 6387 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.670066][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.670076][ T6387] Call Trace: [ 172.670082][ T6387] [ 172.670090][ T6387] dump_stack_lvl+0x189/0x250 [ 172.670118][ T6387] ? __pfx____ratelimit+0x10/0x10 [ 172.670140][ T6387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.670163][ T6387] ? __pfx__printk+0x10/0x10 [ 172.670182][ T6387] ? __might_fault+0xb0/0x130 [ 172.670215][ T6387] should_fail_ex+0x46c/0x600 [ 172.670243][ T6387] _copy_from_user+0x2d/0xb0 [ 172.670262][ T6387] ___sys_sendmsg+0x158/0x2a0 [ 172.670289][ T6387] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.670348][ T6387] ? __fget_files+0x2a/0x420 [ 172.670369][ T6387] ? __fget_files+0x3a6/0x420 [ 172.670401][ T6387] __x64_sys_sendmsg+0x1a1/0x260 [ 172.670426][ T6387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.670466][ T6387] ? __pfx_ksys_write+0x10/0x10 [ 172.670492][ T6387] ? do_syscall_64+0xbe/0x3b0 [ 172.670518][ T6387] do_syscall_64+0xfa/0x3b0 [ 172.670538][ T6387] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.670558][ T6387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.670575][ T6387] ? clear_bhb_loop+0x60/0xb0 [ 172.670596][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.670612][ T6387] RIP: 0033:0x7f8bc77cebe9 [ 172.670627][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.670641][ T6387] RSP: 002b:00007f8bc5a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.670660][ T6387] RAX: ffffffffffffffda RBX: 00007f8bc7a06090 RCX: 00007f8bc77cebe9 [ 172.670673][ T6387] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 172.670684][ T6387] RBP: 00007f8bc5a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.670694][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.670704][ T6387] R13: 00007f8bc7a06128 R14: 00007f8bc7a06090 R15: 00007fffc72178d8 [ 172.670733][ T6387] [ 173.051456][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.051472][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.051494][ T6096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.096102][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.096117][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.096140][ T6096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.940195][ T6396] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 174.952387][ T6409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.238785][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.332449][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.494956][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.641666][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.687410][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.032374][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.208761][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 177.216674][ T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 177.216699][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.216717][ T9] usb 5-1: Product: syz [ 177.216729][ T9] usb 5-1: Manufacturer: syz [ 177.216740][ T9] usb 5-1: SerialNumber: syz [ 177.250513][ T9] usb 5-1: config 0 descriptor?? [ 177.385173][ T9] as10x_usb: device has been detected [ 177.385931][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 177.440667][ T6436] loop7: detected capacity change from 0 to 7 [ 177.535154][ C0] blk_print_req_error: 5 callbacks suppressed [ 177.535173][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.535201][ C0] buffer_io_error: 5 callbacks suppressed [ 177.535211][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.559358][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.559393][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.559703][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.559729][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.559975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.559999][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.560571][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.560598][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.560849][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.560873][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.561104][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.561129][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.561216][ T6050] ldm_validate_partition_table(): Disk read failed. [ 177.561363][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.561386][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.561604][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.561628][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.561859][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.561884][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.562189][ T6050] Dev loop7: unable to read RDB block 0 [ 177.563085][ T6050] loop7: unable to read partition table [ 177.563338][ T6050] loop7: partition table beyond EOD, truncated [ 177.590523][ T6436] ldm_validate_partition_table(): Disk read failed. [ 177.593152][ T6436] Dev loop7: unable to read RDB block 0 [ 177.602756][ T6436] loop7: unable to read partition table [ 177.602994][ T6436] loop7: partition table beyond EOD, truncated [ 177.603023][ T6436] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 177.736426][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 178.009985][ T6444] zonefs (nullb0) ERROR: Not a zoned block device [ 178.014141][ T6096] hsr_slave_0: entered promiscuous mode [ 178.015455][ T6096] hsr_slave_1: entered promiscuous mode [ 178.020903][ T6096] debugfs: 'hsr0' already exists in 'hsr' [ 178.020926][ T6096] Cannot create hsr debugfs directory [ 178.034668][ T6444] loop4: detected capacity change from 0 to 524255232 [ 178.327595][ T9] as10x_usb: error during firmware upload part1 [ 178.328330][ T9] Registered device Abilis Systems DVB-Titan [ 178.361397][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.377911][ T9] usb 5-1: USB disconnect, device number 3 [ 178.489275][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.403581][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.447265][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.851868][ T9] Unregistered device Abilis Systems DVB-Titan [ 179.862416][ T9] as10x_usb: device has been disconnected [ 180.046781][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.533658][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.536806][ T57] hsr_slave_0: left promiscuous mode [ 181.237308][ T57] hsr_slave_1: left promiscuous mode [ 181.238574][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.240366][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.367581][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.367617][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.513325][ T57] veth1_macvtap: left promiscuous mode [ 181.513597][ T57] veth0_macvtap: left promiscuous mode [ 181.515650][ T57] veth1_vlan: left promiscuous mode [ 181.519601][ T57] veth0_vlan: left promiscuous mode [ 183.029338][ T6478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.642397][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.650463][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.651642][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.653351][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.654273][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.688950][ T5847] Bluetooth: hci1: command tx timeout [ 188.469613][ T57] team0 (unregistering): Port device team_slave_1 removed [ 188.691527][ T57] team0 (unregistering): Port device team_slave_0 removed [ 189.768923][ T5847] Bluetooth: hci1: command tx timeout [ 192.041891][ T5847] Bluetooth: hci1: command tx timeout [ 192.339634][ T6518] FAULT_INJECTION: forcing a failure. [ 192.339634][ T6518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.339664][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.4.121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.339683][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.339693][ T6518] Call Trace: [ 192.339700][ T6518] [ 192.339708][ T6518] dump_stack_lvl+0x189/0x250 [ 192.339736][ T6518] ? __pfx____ratelimit+0x10/0x10 [ 192.339759][ T6518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.339781][ T6518] ? __pfx__printk+0x10/0x10 [ 192.339815][ T6518] should_fail_ex+0x46c/0x600 [ 192.339843][ T6518] _copy_to_user+0x31/0xb0 [ 192.339864][ T6518] simple_read_from_buffer+0xe1/0x170 [ 192.339892][ T6518] proc_fail_nth_read+0x1b6/0x220 [ 192.339914][ T6518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.339935][ T6518] ? rw_verify_area+0x2ac/0x4e0 [ 192.339954][ T6518] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.339973][ T6518] vfs_read+0x203/0xa30 [ 192.340002][ T6518] ? __pfx_vfs_read+0x10/0x10 [ 192.340019][ T6518] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 192.340046][ T6518] ? mutex_lock_nested+0x154/0x1d0 [ 192.340062][ T6518] ? fdget_pos+0x253/0x320 [ 192.340093][ T6518] ksys_read+0x14b/0x260 [ 192.340116][ T6518] ? __pfx_ksys_read+0x10/0x10 [ 192.340141][ T6518] ? do_syscall_64+0xbe/0x3b0 [ 192.340167][ T6518] do_syscall_64+0xfa/0x3b0 [ 192.340187][ T6518] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.340208][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.340225][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 192.340246][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.340263][ T6518] RIP: 0033:0x7f8bc77cd5fc [ 192.340278][ T6518] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.340292][ T6518] RSP: 002b:00007f8bc5a2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.340310][ T6518] RAX: ffffffffffffffda RBX: 00007f8bc7a05fa0 RCX: 00007f8bc77cd5fc [ 192.340322][ T6518] RDX: 000000000000000f RSI: 00007f8bc5a2e0a0 RDI: 0000000000000003 [ 192.340333][ T6518] RBP: 00007f8bc5a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.340344][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.340354][ T6518] R13: 00007f8bc7a06038 R14: 00007f8bc7a05fa0 R15: 00007fffc72178d8 [ 192.340383][ T6518] [ 192.611664][ T6520] FAULT_INJECTION: forcing a failure. [ 192.611664][ T6520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.611696][ T6520] CPU: 0 UID: 0 PID: 6520 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.611716][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.611726][ T6520] Call Trace: [ 192.611733][ T6520] [ 192.611740][ T6520] dump_stack_lvl+0x189/0x250 [ 192.611769][ T6520] ? __pfx____ratelimit+0x10/0x10 [ 192.611792][ T6520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.611814][ T6520] ? __pfx__printk+0x10/0x10 [ 192.611833][ T6520] ? __might_fault+0xb0/0x130 [ 192.611868][ T6520] should_fail_ex+0x46c/0x600 [ 192.611895][ T6520] _copy_from_user+0x2d/0xb0 [ 192.611914][ T6520] ___sys_sendmsg+0x158/0x2a0 [ 192.611941][ T6520] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.612000][ T6520] ? __fget_files+0x2a/0x420 [ 192.612022][ T6520] ? __fget_files+0x3a6/0x420 [ 192.612054][ T6520] __x64_sys_sendmsg+0x1a1/0x260 [ 192.612080][ T6520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.612113][ T6520] ? __pfx_ksys_write+0x10/0x10 [ 192.612131][ T6520] ? rcu_is_watching+0x15/0xb0 [ 192.612159][ T6520] ? do_syscall_64+0xbe/0x3b0 [ 192.612185][ T6520] do_syscall_64+0xfa/0x3b0 [ 192.612205][ T6520] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.612225][ T6520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.612242][ T6520] ? clear_bhb_loop+0x60/0xb0 [ 192.612268][ T6520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.612285][ T6520] RIP: 0033:0x7fa5f3d9ebe9 [ 192.612300][ T6520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.612313][ T6520] RSP: 002b:00007fa5f1fbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.612332][ T6520] RAX: ffffffffffffffda RBX: 00007fa5f3fd6180 RCX: 00007fa5f3d9ebe9 [ 192.612345][ T6520] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 192.612355][ T6520] RBP: 00007fa5f1fbc090 R08: 0000000000000000 R09: 0000000000000000 [ 192.612366][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.612376][ T6520] R13: 00007fa5f3fd6218 R14: 00007fa5f3fd6180 R15: 00007ffddf02f358 [ 192.612404][ T6520] [ 194.027505][ T6539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.150524][ T5847] Bluetooth: hci1: command tx timeout [ 194.699590][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.699667][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.386206][ T6547] FAULT_INJECTION: forcing a failure. [ 195.386206][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 195.386238][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.4.129 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.386258][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.386268][ T6547] Call Trace: [ 195.386275][ T6547] [ 195.386283][ T6547] dump_stack_lvl+0x189/0x250 [ 195.386311][ T6547] ? __pfx____ratelimit+0x10/0x10 [ 195.386334][ T6547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.386357][ T6547] ? __pfx__printk+0x10/0x10 [ 195.386382][ T6547] ? __pfx___might_resched+0x10/0x10 [ 195.386410][ T6547] ? fs_reclaim_acquire+0x7d/0x100 [ 195.386431][ T6547] should_fail_ex+0x46c/0x600 [ 195.386459][ T6547] should_failslab+0xa8/0x100 [ 195.386484][ T6547] __kmalloc_noprof+0xcb/0x430 [ 195.386505][ T6547] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.386533][ T6547] tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.386558][ T6547] ? tomoyo_domain+0xda/0x130 [ 195.386586][ T6547] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.386606][ T6547] tomoyo_path_number_perm+0x1e8/0x5a0 [ 195.386629][ T6547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.386653][ T6547] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 195.386675][ T6547] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.386705][ T6547] ? __lock_acquire+0xab9/0xd20 [ 195.386748][ T6547] ? __fget_files+0x2a/0x420 [ 195.386774][ T6547] ? __fget_files+0x2a/0x420 [ 195.386795][ T6547] ? __fget_files+0x3a6/0x420 [ 195.386815][ T6547] ? __fget_files+0x2a/0x420 [ 195.386841][ T6547] security_file_ioctl+0xcb/0x2d0 [ 195.386864][ T6547] __se_sys_ioctl+0x47/0x170 [ 195.386887][ T6547] do_syscall_64+0xfa/0x3b0 [ 195.386907][ T6547] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.386927][ T6547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.386945][ T6547] ? clear_bhb_loop+0x60/0xb0 [ 195.386966][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.386983][ T6547] RIP: 0033:0x7f8bc77cebe9 [ 195.386998][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.387010][ T6547] RSP: 002b:00007f8bc5a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.387029][ T6547] RAX: ffffffffffffffda RBX: 00007f8bc7a05fa0 RCX: 00007f8bc77cebe9 [ 195.387042][ T6547] RDX: 0000200000000280 RSI: 0000000000008915 RDI: 0000000000000003 [ 195.387053][ T6547] RBP: 00007f8bc5a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.387064][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.387074][ T6547] R13: 00007f8bc7a06038 R14: 00007f8bc7a05fa0 R15: 00007fffc72178d8 [ 195.387104][ T6547] [ 195.387111][ T6547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.791506][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 196.020516][ T6557] io-wq is not configured for unbound workers [ 196.235826][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 197.119912][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.121401][ T6554] batadv_slave_0: entered promiscuous mode [ 197.403094][ T6579] capability: warning: `syz.3.134' uses deprecated v2 capabilities in a way that may be insecure [ 199.921247][ T6597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.588725][ T6618] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 202.793467][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.793640][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.793895][ T6489] bridge_slave_0: entered allmulticast mode [ 202.872379][ T6489] bridge_slave_0: entered promiscuous mode [ 202.888999][ T6626] fuse: Unknown parameter 'fd0x0000000000000003' [ 202.918299][ T6074] Process accounting resumed [ 202.923887][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.924033][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.924263][ T6489] bridge_slave_1: entered allmulticast mode [ 202.926851][ T6489] bridge_slave_1: entered promiscuous mode [ 203.211311][ T6638] FAULT_INJECTION: forcing a failure. [ 203.211311][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 203.211339][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.211356][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.211365][ T6638] Call Trace: [ 203.211371][ T6638] [ 203.211379][ T6638] dump_stack_lvl+0x189/0x250 [ 203.211405][ T6638] ? __pfx____ratelimit+0x10/0x10 [ 203.211425][ T6638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.211444][ T6638] ? __pfx__printk+0x10/0x10 [ 203.211465][ T6638] ? __pfx___might_resched+0x10/0x10 [ 203.211494][ T6638] ? fs_reclaim_acquire+0x7d/0x100 [ 203.211512][ T6638] should_fail_ex+0x46c/0x600 [ 203.211535][ T6638] ? audit_log_start+0x126/0x850 [ 203.211550][ T6638] should_failslab+0xa8/0x100 [ 203.211571][ T6638] ? audit_log_start+0x126/0x850 [ 203.211585][ T6638] kmem_cache_alloc_noprof+0x6e/0x310 [ 203.211608][ T6638] audit_log_start+0x126/0x850 [ 203.211627][ T6638] ? __pfx_audit_log_start+0x10/0x10 [ 203.211647][ T6638] ? migrate_enable+0x29c/0x3c0 [ 203.211668][ T6638] ? __lock_acquire+0xab9/0xd20 [ 203.211687][ T6638] ? __pfx_migrate_enable+0x10/0x10 [ 203.211710][ T6638] audit_seccomp+0x64/0x190 [ 203.211738][ T6638] __seccomp_filter+0x9aa/0x1a40 [ 203.211768][ T6638] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 203.211788][ T6638] ? __pfx___seccomp_filter+0x10/0x10 [ 203.211806][ T6638] ? __pfx_vfs_write+0x10/0x10 [ 203.211822][ T6638] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 203.211840][ T6638] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 203.211857][ T6638] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 203.211894][ T6638] ? __secure_computing+0xe2/0x2a0 [ 203.211916][ T6638] syscall_trace_enter+0xaa/0x160 [ 203.211937][ T6638] do_syscall_64+0xd3/0x3b0 [ 203.211957][ T6638] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.211976][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.211992][ T6638] ? clear_bhb_loop+0x60/0xb0 [ 203.212012][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.212028][ T6638] RIP: 0033:0x7f3d4e9eebe9 [ 203.212042][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.212055][ T6638] RSP: 002b:00007f3d4cc56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000094 [ 203.212073][ T6638] RAX: ffffffffffffffda RBX: 00007f3d4ec25fa0 RCX: 00007f3d4e9eebe9 [ 203.212086][ T6638] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000000 [ 203.212095][ T6638] RBP: 00007f3d4cc56090 R08: 0000000000000000 R09: 0000000000000000 [ 203.212105][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.212130][ T6638] R13: 00007f3d4ec26038 R14: 00007f3d4ec25fa0 R15: 00007ffe4a3e4938 [ 203.212157][ T6638] [ 203.212165][ T6638] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 203.212178][ T6638] audit: out of memory in audit_log_start [ 203.299387][ T37] audit: type=1326 audit(1756762562.821:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e9eebe9 code=0x7ffc0000 [ 203.299437][ T37] audit: type=1326 audit(1756762562.821:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d4e9ed550 code=0x7ffc0000 [ 203.299473][ T37] audit: type=1326 audit(1756762562.821:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d4e9ed69f code=0x7ffc0000 [ 203.299509][ T37] audit: type=1326 audit(1756762562.821:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3d4e9ed5fc code=0x7ffc0000 [ 203.299546][ T37] audit: type=1326 audit(1756762562.821:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d4e9ed69f code=0x7ffc0000 [ 203.299583][ T37] audit: type=1326 audit(1756762562.821:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3d4e9ed84a code=0x7ffc0000 [ 203.299621][ T37] audit: type=1326 audit(1756762562.821:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6637 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e9eebe9 code=0x7ffc0000 [ 203.370174][ T37] audit: type=1326 audit(1756762562.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6640 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cedb2ebe9 code=0x7ffc0000 [ 205.523415][ T3561] bridge_slave_1: left allmulticast mode [ 205.523446][ T3561] bridge_slave_1: left promiscuous mode [ 205.523710][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.690482][ T3561] bridge_slave_0: left allmulticast mode [ 205.690514][ T3561] bridge_slave_0: left promiscuous mode [ 205.692411][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.697645][ T6656] FAULT_INJECTION: forcing a failure. [ 205.697645][ T6656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.697674][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 205.697694][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.697703][ T6656] Call Trace: [ 205.697710][ T6656] [ 205.697718][ T6656] dump_stack_lvl+0x189/0x250 [ 205.697746][ T6656] ? __pfx____ratelimit+0x10/0x10 [ 205.697768][ T6656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.697791][ T6656] ? __pfx__printk+0x10/0x10 [ 205.697822][ T6656] should_fail_ex+0x46c/0x600 [ 205.697849][ T6656] strncpy_from_user+0x36/0x290 [ 205.697891][ T6656] __x64_sys_getxattr+0x153/0x210 [ 205.697921][ T6656] ? __pfx___x64_sys_getxattr+0x10/0x10 [ 205.697970][ T6656] ? __pfx_ksys_write+0x10/0x10 [ 205.697987][ T6656] ? rcu_is_watching+0x15/0xb0 [ 205.698015][ T6656] ? do_syscall_64+0xbe/0x3b0 [ 205.698040][ T6656] do_syscall_64+0xfa/0x3b0 [ 205.698059][ T6656] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.698079][ T6656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.698096][ T6656] ? clear_bhb_loop+0x60/0xb0 [ 205.698117][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.698134][ T6656] RIP: 0033:0x7fa5f3d9ebe9 [ 205.698149][ T6656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.698163][ T6656] RSP: 002b:00007fa5f1ffe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 205.698181][ T6656] RAX: ffffffffffffffda RBX: 00007fa5f3fd5fa0 RCX: 00007fa5f3d9ebe9 [ 205.698194][ T6656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000100 [ 205.698205][ T6656] RBP: 00007fa5f1ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 205.698216][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.698225][ T6656] R13: 00007fa5f3fd6038 R14: 00007fa5f3fd5fa0 R15: 00007ffddf02f358 [ 205.698254][ T6656] [ 207.288066][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 207.456289][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.456314][ T10] usb 1-1: config 179 has no interface number 0 [ 207.456360][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 207.456380][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 207.456403][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 207.456426][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 207.456446][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.456481][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.456499][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.490959][ T6665] FAULT_INJECTION: forcing a failure. [ 207.490959][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.490991][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.491011][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.491020][ T6665] Call Trace: [ 207.491027][ T6665] [ 207.491034][ T6665] dump_stack_lvl+0x189/0x250 [ 207.491069][ T6665] ? __pfx____ratelimit+0x10/0x10 [ 207.491092][ T6665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.491114][ T6665] ? __pfx__printk+0x10/0x10 [ 207.491132][ T6665] ? __might_fault+0xb0/0x130 [ 207.491165][ T6665] should_fail_ex+0x46c/0x600 [ 207.491191][ T6665] _copy_from_user+0x2d/0xb0 [ 207.491210][ T6665] __sys_bpf+0x1ed/0x870 [ 207.491233][ T6665] ? __pfx___sys_bpf+0x10/0x10 [ 207.491264][ T6665] ? ksys_write+0x230/0x260 [ 207.491286][ T6665] ? __pfx_ksys_write+0x10/0x10 [ 207.491303][ T6665] ? rcu_is_watching+0x15/0xb0 [ 207.491333][ T6665] __x64_sys_bpf+0x7c/0x90 [ 207.491352][ T6665] do_syscall_64+0xfa/0x3b0 [ 207.491372][ T6665] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.491391][ T6665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.491408][ T6665] ? clear_bhb_loop+0x60/0xb0 [ 207.491428][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.491444][ T6665] RIP: 0033:0x7f9cedb2ebe9 [ 207.491458][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.491471][ T6665] RSP: 002b:00007f9cebd8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.491488][ T6665] RAX: ffffffffffffffda RBX: 00007f9cedd65fa0 RCX: 00007f9cedb2ebe9 [ 207.491501][ T6665] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000008 [ 207.491512][ T6665] RBP: 00007f9cebd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.491522][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.491531][ T6665] R13: 00007f9cedd66038 R14: 00007f9cedd65fa0 R15: 00007ffe41145f18 [ 207.491559][ T6665] [ 207.882065][ T6661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.882187][ T6661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.279164][ T6661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 208.279190][ T6661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.531645][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.574098][ T6675] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 208.574124][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 208.574969][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 208.609100][ T6661] vhci_hcd vhci_hcd.0: Device attached [ 208.645342][ T6676] vhci_hcd: connection closed [ 208.664420][ T6672] vhci_hcd: connection closed [ 208.771822][ T6074] usb 1-1: USB disconnect, device number 3 [ 208.771828][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 208.771898][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 208.825776][ T1434] vhci_hcd: stop threads [ 208.826554][ T1434] vhci_hcd: release socket [ 208.838796][ T1434] vhci_hcd: disconnect device [ 208.848029][ T1434] vhci_hcd: stop threads [ 208.848041][ T1434] vhci_hcd: release socket [ 208.868725][ T1434] vhci_hcd: disconnect device [ 209.092386][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.256719][ T3561] bond0 (unregistering): Released all slaves [ 210.268446][ T6686] usb usb6: usbfs: process 6686 (syz.3.162) did not claim interface 46 before use [ 210.873648][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.905410][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.438472][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 212.438687][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 212.438836][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 212.468398][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 213.356813][ T6489] team0: Port device team_slave_0 added [ 213.399541][ T3561] hsr_slave_0: left promiscuous mode [ 214.049515][ T3561] hsr_slave_1: left promiscuous mode [ 214.050420][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.174658][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.321683][ T6724] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 214.321708][ T6724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 214.321799][ T6724] vhci_hcd vhci_hcd.0: Device attached [ 214.511049][ T10] vhci_hcd: vhci_device speed not set [ 214.530128][ T6728] vhci_hcd: connection closed [ 214.532382][ T1434] vhci_hcd: stop threads [ 214.532401][ T1434] vhci_hcd: release socket [ 214.532481][ T1434] vhci_hcd: disconnect device [ 214.578891][ T10] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 214.579126][ T10] usb 35-1: enqueue for inactive port 0 [ 214.650035][ T10] vhci_hcd: vhci_device speed not set [ 216.645401][ T6740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.175'. [ 217.141643][ T6755] input: syz1 as /devices/virtual/input/input6 [ 217.324897][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 217.471993][ T3561] team0 (unregistering): Port device team_slave_0 removed [ 217.490345][ T6055] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.668748][ T6055] usb 1-1: Using ep0 maxpacket: 32 [ 217.675591][ T6055] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 217.675617][ T6055] usb 1-1: config 0 has no interface number 0 [ 217.675647][ T6055] usb 1-1: config 0 interface 85 has no altsetting 0 [ 217.704803][ T6055] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 217.704830][ T6055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.704847][ T6055] usb 1-1: Product: syz [ 217.704860][ T6055] usb 1-1: Manufacturer: syz [ 217.704872][ T6055] usb 1-1: SerialNumber: syz [ 217.760869][ T6055] usb 1-1: config 0 descriptor?? [ 217.765627][ T6055] appletouch 1-1:0.85: Could not find int-in endpoint [ 217.765660][ T6055] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 217.767203][ T6055] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 218.197325][ T6489] team0: Port device team_slave_1 added [ 218.216662][ T6746] warning: `syz.1.176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 218.285361][ T6754] syz.0.178 (6754) used obsolete PPPIOCDETACH ioctl [ 218.308884][ T6074] usb 1-1: USB disconnect, device number 4 [ 218.569443][ T6764] netlink: 'syz.3.181': attribute type 2 has an invalid length. [ 218.697387][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 218.697404][ T37] audit: type=1800 audit(1756762578.301:19): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.181" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 218.746854][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.746864][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.746878][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.805817][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.805834][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.805856][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.117097][ T6489] hsr_slave_0: entered promiscuous mode [ 219.118429][ T6489] hsr_slave_1: entered promiscuous mode [ 219.131886][ T6489] debugfs: 'hsr0' already exists in 'hsr' [ 219.131911][ T6489] Cannot create hsr debugfs directory [ 219.329157][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 219.329178][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 221.907939][ T6771] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.183'. [ 222.527860][ T6793] FAULT_INJECTION: forcing a failure. [ 222.527860][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.527883][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.4.188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.527894][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.527900][ T6793] Call Trace: [ 222.527905][ T6793] [ 222.527909][ T6793] dump_stack_lvl+0x189/0x250 [ 222.527927][ T6793] ? __pfx____ratelimit+0x10/0x10 [ 222.527941][ T6793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.527953][ T6793] ? __pfx__printk+0x10/0x10 [ 222.527964][ T6793] ? __might_fault+0xb0/0x130 [ 222.527983][ T6793] should_fail_ex+0x46c/0x600 [ 222.527999][ T6793] _copy_from_user+0x2d/0xb0 [ 222.528010][ T6793] ___sys_sendmsg+0x158/0x2a0 [ 222.528026][ T6793] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.528056][ T6793] ? __fget_files+0x2a/0x420 [ 222.528069][ T6793] ? __fget_files+0x3a6/0x420 [ 222.528086][ T6793] __x64_sys_sendmsg+0x1a1/0x260 [ 222.528100][ T6793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.528117][ T6793] ? __pfx_ksys_write+0x10/0x10 [ 222.528128][ T6793] ? rcu_is_watching+0x15/0xb0 [ 222.528144][ T6793] ? do_syscall_64+0xbe/0x3b0 [ 222.528158][ T6793] do_syscall_64+0xfa/0x3b0 [ 222.528169][ T6793] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.528181][ T6793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.528190][ T6793] ? clear_bhb_loop+0x60/0xb0 [ 222.528202][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.528211][ T6793] RIP: 0033:0x7f8bc77cebe9 [ 222.528220][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.528227][ T6793] RSP: 002b:00007f8bc5a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.528238][ T6793] RAX: ffffffffffffffda RBX: 00007f8bc7a06090 RCX: 00007f8bc77cebe9 [ 222.528245][ T6793] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000009 [ 222.528251][ T6793] RBP: 00007f8bc5a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 222.528257][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.528262][ T6793] R13: 00007f8bc7a06128 R14: 00007f8bc7a06090 R15: 00007fffc72178d8 [ 222.528279][ T6793] [ 226.880834][ T6829] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 227.650787][ T6489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.679732][ T6074] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 227.884558][ T6489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.948914][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.199'. [ 228.141326][ T6074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.141380][ T6074] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.141401][ T6074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.266544][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.345560][ T6855] [ 228.345572][ T6855] ====================================================== [ 228.345580][ T6855] WARNING: possible circular locking dependency detected [ 228.345593][ T6855] syzkaller #0 Not tainted [ 228.345602][ T6855] ------------------------------------------------------ [ 228.345609][ T6855] syz.0.200/6855 is trying to acquire lock: [ 228.345619][ T6855] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 228.345678][ T6855] [ 228.345678][ T6855] but task is already holding lock: [ 228.345684][ T6855] ffff8881437003a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 228.345725][ T6855] [ 228.345725][ T6855] which lock already depends on the new lock. [ 228.345725][ T6855] [ 228.345731][ T6855] [ 228.345731][ T6855] the existing dependency chain (in reverse order) is: [ 228.345737][ T6855] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.345737][ T6855] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 228.345762][ T6855] lock_acquire+0x120/0x360 [ 228.345783][ T6855] rt_spin_lock+0x88/0x2c0 [ 228.345798][ T6855] drm_crtc_vblank_on_config+0x2cd/0x860 [ 228.345816][ T6855] drm_crtc_vblank_on+0x88/0xc0 [ 228.345832][ T6855] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 228.345851][ T6855] vkms_atomic_commit_tail+0x69/0x210 [ 228.345869][ T6855] commit_tail+0x281/0x3a0 [ 228.345886][ T6855] drm_atomic_helper_commit+0xa6b/0xb10 [ 228.345903][ T6855] drm_atomic_commit+0x262/0x2c0 [ 228.345917][ T6855] drm_client_modeset_commit_atomic+0x620/0x760 [ 228.345940][ T6855] drm_client_modeset_commit_locked+0xce/0x4d0 [ 228.345962][ T6855] drm_client_modeset_commit+0x4a/0x70 [ 228.345984][ T6855] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 228.346002][ T6855] drm_fb_helper_set_par+0xaf/0x100 [ 228.346018][ T6855] fbcon_init+0x1255/0x2370 [ 228.346037][ T6855] visual_init+0x2ef/0x650 [ 228.346055][ T6855] do_bind_con_driver+0x890/0xf70 [ 228.346074][ T6855] do_take_over_console+0x899/0xa10 [ 228.346093][ T6855] do_fbcon_takeover+0x118/0x200 [ 228.346111][ T6855] fbcon_fb_registered+0x35e/0x610 [ 228.346130][ T6855] register_framebuffer+0x70f/0x890 [ 228.346151][ T6855] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 228.346170][ T6855] drm_fbdev_client_hotplug+0x16f/0x230 [ 228.346189][ T6855] drm_client_register+0x16f/0x210 [ 228.346208][ T6855] drm_fbdev_client_setup+0x19f/0x3f0 [ 228.346226][ T6855] drm_client_setup+0x10a/0x230 [ 228.346243][ T6855] vkms_init+0x3e0/0x4b0 [ 228.346263][ T6855] do_one_initcall+0x233/0x820 [ 228.346277][ T6855] do_initcall_level+0x104/0x190 [ 228.346293][ T6855] do_initcalls+0x59/0xa0 [ 228.346310][ T6855] kernel_init_freeable+0x334/0x4b0 [ 228.346325][ T6855] kernel_init+0x1d/0x1d0 [ 228.346339][ T6855] ret_from_fork+0x3f9/0x770 [ 228.346358][ T6855] ret_from_fork_asm+0x1a/0x30 [ 228.346373][ T6855] [ 228.346373][ T6855] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 228.346396][ T6855] lock_acquire+0x120/0x360 [ 228.346415][ T6855] rt_spin_lock+0x88/0x2c0 [ 228.346430][ T6855] vblank_disable_fn+0x72/0x190 [ 228.346445][ T6855] call_timer_fn+0x17b/0x5f0 [ 228.346465][ T6855] __run_timer_base+0x648/0x970 [ 228.346482][ T6855] run_timer_softirq+0xb7/0x180 [ 228.346499][ T6855] handle_softirqs+0x22c/0x710 [ 228.346517][ T6855] run_ktimerd+0xcf/0x190 [ 228.346536][ T6855] smpboot_thread_fn+0x542/0xa60 [ 228.346554][ T6855] kthread+0x711/0x8a0 [ 228.346574][ T6855] ret_from_fork+0x3f9/0x770 [ 228.346592][ T6855] ret_from_fork_asm+0x1a/0x30 [ 228.346606][ T6855] [ 228.346606][ T6855] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 228.346629][ T6855] lock_acquire+0x120/0x360 [ 228.346656][ T6855] call_timer_fn+0xdb/0x5f0 [ 228.346675][ T6855] __run_timer_base+0x648/0x970 [ 228.346692][ T6855] run_timer_softirq+0xb7/0x180 [ 228.346710][ T6855] handle_softirqs+0x22c/0x710 [ 228.346729][ T6855] run_ktimerd+0xcf/0x190 [ 228.346748][ T6855] smpboot_thread_fn+0x542/0xa60 [ 228.346767][ T6855] kthread+0x711/0x8a0 [ 228.346788][ T6855] ret_from_fork+0x3f9/0x770 [ 228.346806][ T6855] ret_from_fork_asm+0x1a/0x30 [ 228.346821][ T6855] [ 228.346821][ T6855] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 228.346844][ T6855] lock_acquire+0x120/0x360 [ 228.346862][ T6855] rt_spin_lock+0x88/0x2c0 [ 228.346877][ T6855] __run_timer_base+0x114/0x970 [ 228.346894][ T6855] run_timer_softirq+0x67/0x180 [ 228.346910][ T6855] handle_softirqs+0x22c/0x710 [ 228.346928][ T6855] run_ktimerd+0xcf/0x190 [ 228.346947][ T6855] smpboot_thread_fn+0x542/0xa60 [ 228.346964][ T6855] kthread+0x711/0x8a0 [ 228.346984][ T6855] ret_from_fork+0x3f9/0x770 [ 228.347002][ T6855] ret_from_fork_asm+0x1a/0x30 [ 228.347017][ T6855] [ 228.347017][ T6855] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 228.347040][ T6855] validate_chain+0xb9b/0x2140 [ 228.347061][ T6855] __lock_acquire+0xab9/0xd20 [ 228.347079][ T6855] reacquire_held_locks+0x127/0x1d0 [ 228.347101][ T6855] lock_release+0x1b4/0x3e0 [ 228.347119][ T6855] __local_bh_enable_ip+0x10c/0x270 [ 228.347137][ T6855] hrtimer_cancel+0x39/0x60 [ 228.347156][ T6855] drm_vblank_disable_and_save+0x1bc/0x380 [ 228.347172][ T6855] drm_crtc_vblank_off+0x22e/0x820 [ 228.347189][ T6855] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 228.347208][ T6855] vkms_atomic_commit_tail+0x51/0x210 [ 228.347225][ T6855] commit_tail+0x281/0x3a0 [ 228.347241][ T6855] drm_atomic_helper_commit+0xa6b/0xb10 [ 228.347258][ T6855] drm_atomic_commit+0x262/0x2c0 [ 228.347273][ T6855] drm_atomic_helper_set_config+0xe2/0x160 [ 228.347291][ T6855] drm_mode_setcrtc+0x9a4/0x1c50 [ 228.347311][ T6855] drm_ioctl_kernel+0x2d2/0x3a0 [ 228.347331][ T6855] drm_ioctl+0x685/0xb20 [ 228.347349][ T6855] __se_sys_ioctl+0xfc/0x170 [ 228.347366][ T6855] do_syscall_64+0xfa/0x3b0 [ 228.347386][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.347401][ T6855] [ 228.347401][ T6855] other info that might help us debug this: [ 228.347401][ T6855] [ 228.347407][ T6855] Chain exists of: [ 228.347407][ T6855] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 228.347407][ T6855] [ 228.347435][ T6855] Possible unsafe locking scenario: [ 228.347435][ T6855] [ 228.347440][ T6855] CPU0 CPU1 [ 228.347446][ T6855] ---- ---- [ 228.347451][ T6855] lock(&dev->vblank_time_lock); [ 228.347463][ T6855] lock(&dev->vbl_lock); [ 228.347475][ T6855] lock(&dev->vblank_time_lock); [ 228.347488][ T6855] lock((softirq_ctrl.lock)); [ 228.347499][ T6855] [ 228.347499][ T6855] *** DEADLOCK *** [ 228.347499][ T6855] [ 228.347504][ T6855] 8 locks held by syz.0.200/6855: [ 228.347514][ T6855] #0: ffffc90004307b20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 228.347560][ T6855] #1: ffffc90004307b48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 228.347607][ T6855] #2: ffff8881437004b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 228.347657][ T6855] #3: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 228.347698][ T6855] #4: ffff888143700420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 228.347740][ T6855] #5: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 228.347780][ T6855] #6: ffff8881437003a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 228.347822][ T6855] #7: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 228.347862][ T6855] [ 228.347862][ T6855] stack backtrace: [ 228.347874][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 228.347893][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.347905][ T6855] Call Trace: [ 228.347912][ T6855] [ 228.347920][ T6855] dump_stack_lvl+0x189/0x250 [ 228.347947][ T6855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.347971][ T6855] ? __pfx__printk+0x10/0x10 [ 228.347989][ T6855] ? print_lock_name+0xde/0x100 [ 228.348007][ T6855] print_circular_bug+0x2ee/0x310 [ 228.348025][ T6855] check_noncircular+0x134/0x160 [ 228.348052][ T6855] validate_chain+0xb9b/0x2140 [ 228.348082][ T6855] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 228.348105][ T6855] __lock_acquire+0xab9/0xd20 [ 228.348129][ T6855] reacquire_held_locks+0x127/0x1d0 [ 228.348152][ T6855] ? __local_bh_disable_ip+0x264/0x400 [ 228.348174][ T6855] lock_release+0x1b4/0x3e0 [ 228.348194][ T6855] ? __local_bh_enable_ip+0x100/0x270 [ 228.348215][ T6855] __local_bh_enable_ip+0x10c/0x270 [ 228.348235][ T6855] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 228.348257][ T6855] ? rt_spin_unlock+0x65/0x80 [ 228.348276][ T6855] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 228.348299][ T6855] ? hrtimer_cancel_wait_running+0x142/0x180 [ 228.348323][ T6855] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 228.348343][ T6855] hrtimer_cancel+0x39/0x60 [ 228.348365][ T6855] drm_vblank_disable_and_save+0x1bc/0x380 [ 228.348385][ T6855] drm_crtc_vblank_off+0x22e/0x820 [ 228.348406][ T6855] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 228.348429][ T6855] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 228.348451][ T6855] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 228.348477][ T6855] vkms_atomic_commit_tail+0x51/0x210 [ 228.348495][ T6855] ? read_tsc+0x9/0x20 [ 228.348513][ T6855] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 228.348532][ T6855] commit_tail+0x281/0x3a0 [ 228.348553][ T6855] drm_atomic_helper_commit+0xa6b/0xb10 [ 228.348574][ T6855] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 228.348591][ T6855] drm_atomic_commit+0x262/0x2c0 [ 228.348606][ T6855] ? __pfx_drm_atomic_commit+0x10/0x10 [ 228.348621][ T6855] ? __pfx___drm_printfn_info+0x10/0x10 [ 228.348655][ T6855] ? drm_atomic_state_init+0x231/0x310 [ 228.348682][ T6855] drm_atomic_helper_set_config+0xe2/0x160 [ 228.348704][ T6855] drm_mode_setcrtc+0x9a4/0x1c50 [ 228.348738][ T6855] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 228.348760][ T6855] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.348783][ T6855] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 228.348815][ T6855] ? rt_spin_unlock+0x65/0x80 [ 228.348834][ T6855] ? drm_is_current_master+0x1a2/0x210 [ 228.348854][ T6855] drm_ioctl_kernel+0x2d2/0x3a0 [ 228.348876][ T6855] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 228.348896][ T6855] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 228.348921][ T6855] drm_ioctl+0x685/0xb20 [ 228.348940][ T6855] ? smk_tskacc+0x2fc/0x370 [ 228.348965][ T6855] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 228.348988][ T6855] ? __pfx_drm_ioctl+0x10/0x10 [ 228.349013][ T6855] ? __fget_files+0x2a/0x420 [ 228.349037][ T6855] ? bpf_lsm_file_ioctl+0x9/0x20 [ 228.349056][ T6855] ? __pfx_drm_ioctl+0x10/0x10 [ 228.349076][ T6855] __se_sys_ioctl+0xfc/0x170 [ 228.349095][ T6855] do_syscall_64+0xfa/0x3b0 [ 228.349117][ T6855] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.349137][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.349155][ T6855] ? clear_bhb_loop+0x60/0xb0 [ 228.349173][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.349190][ T6855] RIP: 0033:0x7fa5f3d9ebe9 [ 228.349206][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.349220][ T6855] RSP: 002b:00007fa5f1b99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.349238][ T6855] RAX: ffffffffffffffda RBX: 00007fa5f3fd6270 RCX: 00007fa5f3d9ebe9 [ 228.349251][ T6855] RDX: 0000200000000740 RSI: 00000000c06864a2 RDI: 0000000000000005 [ 228.349263][ T6855] RBP: 00007fa5f3e21e19 R08: 0000000000000000 R09: 0000000000000000 [ 228.349274][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.349284][ T6855] R13: 00007fa5f3fd6308 R14: 00007fa5f3fd6270 R15: 00007ffddf02f358 [ 228.349303][ T6855] [ 228.568369][ T6074] usb 4-1: config 0 descriptor?? [ 228.795650][ T6074] pwc: Askey VC010 type 2 USB webcam detected. [ 229.118773][ T6060] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.144941][ T6074] pwc: recv_control_msg error -32 req 02 val 2b00 [ 229.152750][ T6074] pwc: recv_control_msg error -32 req 02 val 2700 [ 229.169969][ T6074] pwc: recv_control_msg error -32 req 02 val 2c00 [ 229.173909][ T6074] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.176284][ T6074] pwc: recv_control_msg error -32 req 04 val 1300 [ 229.250952][ T6060] usb 1-1: device descriptor read/64, error -71 [ 230.762112][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.642838][ T6074] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.644582][ T6074] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.644922][ T6074] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.646256][ T6074] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.647644][ T6074] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.647975][ T6074] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.648308][ T6074] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.648746][ T6074] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.654085][ T6074] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.654448][ T6074] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.656495][ T6074] pwc: Registered as video103. [ 231.658399][ T6074] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 231.684989][ T6074] usb 4-1: USB disconnect, device number 6 [ 231.850688][ T3561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.050483][ T3561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.262290][ T3561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.470774][ T3561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.678888][ T3561] bridge_slave_1: left allmulticast mode [ 232.678912][ T3561] bridge_slave_1: left promiscuous mode [ 232.679191][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.783349][ T3561] bridge_slave_0: left allmulticast mode [ 232.783375][ T3561] bridge_slave_0: left promiscuous mode [ 232.783531][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.249107][ T3561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.341948][ T3561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.362725][ T3561] bond0 (unregistering): Released all slaves [ 235.428807][ T3561] hsr_slave_0: left promiscuous mode [ 235.470325][ T3561] hsr_slave_1: left promiscuous mode [ 235.471542][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.471561][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.509162][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.509183][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.579479][ T3561] veth1_macvtap: left promiscuous mode [ 235.579544][ T3561] veth0_macvtap: left promiscuous mode [ 235.579675][ T3561] veth1_vlan: left promiscuous mode [ 235.579768][ T3561] veth0_vlan: left promiscuous mode [ 237.239288][ T3561] team0 (unregistering): Port device team_slave_1 removed [ 237.429139][ T3561] team0 (unregistering): Port device team_slave_0 removed