last executing test programs: 56.966334359s ago: executing program 1 (id=123): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_peer\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x1fffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 54.590349558s ago: executing program 1 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 53.418934279s ago: executing program 1 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) connect$tipc(0xffffffffffffffff, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioprio_get$pid(0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) 48.189662101s ago: executing program 1 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 46.691637094s ago: executing program 1 (id=136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x59091fd, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) 45.189094929s ago: executing program 1 (id=137): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10000000}) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400"], 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 29.145339565s ago: executing program 32 (id=137): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10000000}) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400"], 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 17.152887428s ago: executing program 4 (id=182): syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 13.18769546s ago: executing program 4 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0xf) setreuid(0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100015040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001d0000000000050001"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) 10.815168723s ago: executing program 4 (id=199): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 9.82684205s ago: executing program 3 (id=201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)='\'', 0x1}], 0x1}}], 0x1, 0x4008840) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x46, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0xffff0001, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0xffffffff, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x40c, 0x9, 0x2bf, 0x6c9, 0x1, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x3, 0x20000009, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0x10003, 0x3, 0x7e, 0x20100, 0x9602, 0xc639, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa21, 0xc, 0x7, 0xce3, 0x6c1b, 0x8000, 0x1, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x7]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.826314292s ago: executing program 4 (id=202): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwrite64(r3, 0x0, 0x0, 0x5) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x180000) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 9.628650206s ago: executing program 3 (id=204): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x3, 0xff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept(r4, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x2, 0x48000018, 0x1c, 0x10000079, &(0x7f00000004c0)}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setgroups(0x0, 0x0) setregid(0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 7.846772509s ago: executing program 4 (id=206): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x12, 0x0) 6.858791381s ago: executing program 2 (id=207): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0x10dc3}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.378199053s ago: executing program 3 (id=208): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10000880}, 0x0) 6.377311462s ago: executing program 0 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r3, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.376489237s ago: executing program 4 (id=210): r0 = socket(0x2a, 0x2, 0x9) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000000040)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r5, 0x0, 0x0, 0x10122, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, 0x0, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000200)={0xa000000a}) readv(r1, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 5.161594463s ago: executing program 3 (id=211): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 4.165126467s ago: executing program 0 (id=212): r0 = syz_open_dev$loop(&(0x7f0000001b80), 0x7fffffffffffffff, 0x80000) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 4.14652914s ago: executing program 2 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f246, 0x6800c}, [@IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) 4.053677035s ago: executing program 0 (id=214): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$media(&(0x7f00000001c0), 0xb81, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 3.986507053s ago: executing program 3 (id=215): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"f6439e77", 0x6, 0x1, 0x2, 0x4, 0x9, "0000000100ed00", "00080702", '\x00', "0e000008", ["f2ffff507f802e673b8a4400", "1b0a001d920553fed31f2f89", "0000efffffffff3c86008000"]}) 2.929047521s ago: executing program 2 (id=216): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 2.832596356s ago: executing program 0 (id=217): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x6, 0x5, 0x2, 0x0, 0x9, "0000004c5b76df7300", "00080702", "0300", '\x00', ["fdffffff84a438dfc5d5c010", "1b0a1c0000000000001d0d01", "0000efffffffff3c8600"]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.789545926s ago: executing program 3 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) userfaultfd(0x1) close_range(r4, 0xffffffffffffffff, 0x0) 2.55819163s ago: executing program 0 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) copy_file_range(r3, &(0x7f0000000100), r2, 0x0, 0xffffffffa003e45b, 0x700000000000000) truncate(&(0x7f0000000040)='./file1\x00', 0x8000) 598.560644ms ago: executing program 0 (id=220): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x29, 0xe, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 587.688243ms ago: executing program 2 (id=221): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="a800000010000108fdfffffffddbdf2500000000", @ANYRES32, @ANYBLOB="000000002104020008001b000000000080001a80280002802400018008001c00a13e2c1a08001d000080000008001d000800000008001f000600000054000a80140007"], 0xa8}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 225.620584ms ago: executing program 2 (id=222): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000001c0), 0x4) 0s ago: executing program 2 (id=223): r0 = socket$rxrpc(0x21, 0x2, 0x2) write(r0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 81.137538][ T5830] cgroup: Unknown subsys name 'net' [ 81.375282][ T5830] cgroup: Unknown subsys name 'cpuset' [ 81.420677][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.215441][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.952416][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.953572][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.957931][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.961629][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.963291][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.965721][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.974299][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.977974][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.978721][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.996415][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.036236][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.059271][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.071139][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.076039][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.076416][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.078485][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.098060][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.101447][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.110279][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.111072][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.198894][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.208950][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.228550][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.231746][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.232487][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.877350][ T10] cfg80211: failed to load regulatory.db [ 87.093489][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 87.130212][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 87.196498][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.364943][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 87.385097][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.072633][ T5847] Bluetooth: hci0: command tx timeout [ 88.072844][ T5849] Bluetooth: hci2: command tx timeout [ 88.075439][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.076635][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.077214][ T5855] bridge_slave_0: entered allmulticast mode [ 88.078889][ T5855] bridge_slave_0: entered promiscuous mode [ 88.160467][ T5847] Bluetooth: hci1: command tx timeout [ 88.160629][ T5849] Bluetooth: hci3: command tx timeout [ 88.171912][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.172049][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.172220][ T5858] bridge_slave_0: entered allmulticast mode [ 88.174973][ T5858] bridge_slave_0: entered promiscuous mode [ 88.213858][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.214017][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.214230][ T5855] bridge_slave_1: entered allmulticast mode [ 88.216363][ T5855] bridge_slave_1: entered promiscuous mode [ 88.320210][ T5849] Bluetooth: hci4: command tx timeout [ 88.337649][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.337735][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.337869][ T5858] bridge_slave_1: entered allmulticast mode [ 88.339357][ T5858] bridge_slave_1: entered promiscuous mode [ 88.531637][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.531798][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.531985][ T5844] bridge_slave_0: entered allmulticast mode [ 88.534672][ T5844] bridge_slave_0: entered promiscuous mode [ 88.872462][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.872628][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.872876][ T5844] bridge_slave_1: entered allmulticast mode [ 88.875366][ T5844] bridge_slave_1: entered promiscuous mode [ 88.962465][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.962597][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.962784][ T5848] bridge_slave_0: entered allmulticast mode [ 88.965598][ T5848] bridge_slave_0: entered promiscuous mode [ 88.975724][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.978067][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.978195][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.978364][ T5841] bridge_slave_0: entered allmulticast mode [ 88.992669][ T5841] bridge_slave_0: entered promiscuous mode [ 89.094661][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.094940][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.095091][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.095257][ T5848] bridge_slave_1: entered allmulticast mode [ 89.097048][ T5848] bridge_slave_1: entered promiscuous mode [ 89.102709][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.102920][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.103047][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.103204][ T5841] bridge_slave_1: entered allmulticast mode [ 89.105757][ T5841] bridge_slave_1: entered promiscuous mode [ 89.194713][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.544968][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.795665][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.865841][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.867804][ T5855] team0: Port device team_slave_0 added [ 89.873061][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.946601][ T5858] team0: Port device team_slave_0 added [ 89.949352][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.953532][ T5855] team0: Port device team_slave_1 added [ 89.957435][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.098673][ T5858] team0: Port device team_slave_1 added [ 90.151692][ T5847] Bluetooth: hci0: command tx timeout [ 90.151787][ T5849] Bluetooth: hci2: command tx timeout [ 90.230667][ T5849] Bluetooth: hci3: command tx timeout [ 90.230699][ T5849] Bluetooth: hci1: command tx timeout [ 90.332552][ T5844] team0: Port device team_slave_0 added [ 90.390993][ T5847] Bluetooth: hci4: command tx timeout [ 90.595719][ T5844] team0: Port device team_slave_1 added [ 90.879078][ T5848] team0: Port device team_slave_0 added [ 90.887251][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.887266][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.887289][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.897657][ T5841] team0: Port device team_slave_0 added [ 91.002516][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.002533][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.002555][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.005365][ T5848] team0: Port device team_slave_1 added [ 91.006965][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.006978][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.007002][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.009672][ T5841] team0: Port device team_slave_1 added [ 91.106148][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.106165][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.106187][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.293228][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.293243][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.293266][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.447454][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.447473][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.447498][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.456829][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.456843][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.456866][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.459518][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.459531][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.459553][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.531040][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.531056][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.531080][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.535980][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.535992][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.536020][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.891353][ T5855] hsr_slave_0: entered promiscuous mode [ 91.893010][ T5855] hsr_slave_1: entered promiscuous mode [ 91.917931][ T5858] hsr_slave_0: entered promiscuous mode [ 91.918758][ T5858] hsr_slave_1: entered promiscuous mode [ 91.919608][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 91.919689][ T5858] Cannot create hsr debugfs directory [ 92.230155][ T5847] Bluetooth: hci2: command tx timeout [ 92.230186][ T5847] Bluetooth: hci0: command tx timeout [ 92.261886][ T5844] hsr_slave_0: entered promiscuous mode [ 92.263156][ T5844] hsr_slave_1: entered promiscuous mode [ 92.263779][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 92.263800][ T5844] Cannot create hsr debugfs directory [ 92.310203][ T5847] Bluetooth: hci3: command tx timeout [ 92.310383][ T5849] Bluetooth: hci1: command tx timeout [ 92.470422][ T5849] Bluetooth: hci4: command tx timeout [ 92.584245][ T5848] hsr_slave_0: entered promiscuous mode [ 92.585039][ T5848] hsr_slave_1: entered promiscuous mode [ 92.585590][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 92.585611][ T5848] Cannot create hsr debugfs directory [ 92.602363][ T5841] hsr_slave_0: entered promiscuous mode [ 92.603508][ T5841] hsr_slave_1: entered promiscuous mode [ 92.605025][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.605047][ T5841] Cannot create hsr debugfs directory [ 94.310243][ T5849] Bluetooth: hci0: command tx timeout [ 94.310275][ T5849] Bluetooth: hci2: command tx timeout [ 94.375398][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.390171][ T5847] Bluetooth: hci1: command tx timeout [ 94.390202][ T5847] Bluetooth: hci3: command tx timeout [ 94.424278][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.462192][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.513817][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.550263][ T5849] Bluetooth: hci4: command tx timeout [ 94.637692][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.663954][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.705690][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.769032][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.901950][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.945067][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.984860][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.033364][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.217243][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.260253][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.299674][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.366865][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.448040][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.551465][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.603162][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.653456][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.694202][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.698644][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.758995][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.759516][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.828743][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.828855][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.859838][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.983591][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.018151][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.049273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.049391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.102490][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.102728][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.166543][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.216898][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.244283][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.244711][ T4896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.309261][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.309447][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.406903][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.473511][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.473725][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.497589][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.538643][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.538897][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.654207][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.682832][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.704474][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.704700][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.765345][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.766509][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.114358][ T5855] veth0_vlan: entered promiscuous mode [ 97.205024][ T5855] veth1_vlan: entered promiscuous mode [ 97.228331][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.291184][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.428337][ T5855] veth0_macvtap: entered promiscuous mode [ 97.482719][ T5855] veth1_macvtap: entered promiscuous mode [ 97.489175][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.599225][ T5858] veth0_vlan: entered promiscuous mode [ 97.652983][ T5844] veth0_vlan: entered promiscuous mode [ 97.674193][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.707168][ T5858] veth1_vlan: entered promiscuous mode [ 97.718614][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.747380][ T5844] veth1_vlan: entered promiscuous mode [ 97.768786][ T152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.774860][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.779731][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.787560][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.813207][ T152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.127097][ T5858] veth0_macvtap: entered promiscuous mode [ 98.196811][ T5844] veth0_macvtap: entered promiscuous mode [ 98.198384][ T5858] veth1_macvtap: entered promiscuous mode [ 98.249447][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.249472][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.267242][ T5844] veth1_macvtap: entered promiscuous mode [ 98.347849][ T5841] veth0_vlan: entered promiscuous mode [ 98.374500][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.394678][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.394697][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.424433][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.432978][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.487664][ T5841] veth1_vlan: entered promiscuous mode [ 98.518598][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.518682][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.541455][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.564375][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.565314][ T5848] veth0_vlan: entered promiscuous mode [ 98.583051][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.605509][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.611469][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.666046][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.677697][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.695981][ T5848] veth1_vlan: entered promiscuous mode [ 98.840111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.849968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.900129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.090692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.280071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.330149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.369979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.712745][ T5841] veth0_macvtap: entered promiscuous mode [ 99.903241][ T5841] veth1_macvtap: entered promiscuous mode [ 99.969159][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.969172][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.014193][ T5848] veth0_macvtap: entered promiscuous mode [ 100.080542][ T5848] veth1_macvtap: entered promiscuous mode [ 100.200727][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.200750][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.252372][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.356617][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.361990][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.372547][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.372567][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.483361][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.483457][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.544325][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.547998][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.575658][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.575673][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.575949][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.657322][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.677104][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.711164][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.768469][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.594848][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.594864][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.976419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.976438][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.039973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.572836][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.572850][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.147025][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.147044][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.700657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.701209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.933118][ T6003] mmap: syz.4.5 (6003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.910622][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.945394][ T5832] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 110.124897][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.124925][ T5832] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.124964][ T5832] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.124986][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.283935][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 110.288046][ T5930] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.288073][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.288096][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.288118][ T5930] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.288158][ T5930] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.288178][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.350080][ T1801] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.059326][ T5832] usb 3-1: config 0 descriptor?? [ 111.231169][ T1801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.231214][ T1801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.259998][ T5930] usb 1-1: usb_control_msg returned -32 [ 111.260053][ T5930] usbtmc 1-1:16.0: can't read capabilities [ 111.279342][ T1801] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 111.279370][ T1801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.279389][ T1801] usb 4-1: Product: syz [ 111.279401][ T1801] usb 4-1: Manufacturer: syz [ 111.279414][ T1801] usb 4-1: SerialNumber: syz [ 111.372514][ T1801] usb 4-1: config 0 descriptor?? [ 111.424516][ T1801] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 111.481877][ T5930] usb 1-1: USB disconnect, device number 2 [ 112.066126][ T5929] usb 3-1: USB disconnect, device number 2 [ 112.174426][ T1801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.209778][ T1801] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 112.209868][ T1801] usb 4-1: media controller created [ 112.307123][ T1801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.954135][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 115.218006][ T1801] DVB: Unable to find symbol tda10046_attach() [ 115.218022][ T1801] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 115.218050][ T1801] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 115.260195][ T1801] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 115.505325][ T1801] usb 4-1: USB disconnect, device number 2 [ 117.493542][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.717988][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.801923][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.010089][ T5930] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.173395][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 119.175907][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.175934][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.175957][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.175979][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.176020][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.176043][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.546175][ T5930] usb 3-1: usb_control_msg returned -32 [ 119.546205][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 119.588140][ T5930] usb 3-1: USB disconnect, device number 3 [ 119.630140][ T5832] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.825618][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.825640][ T5832] usb 4-1: config 0 has no interfaces? [ 119.825658][ T5832] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.825669][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.842928][ T5832] usb 4-1: config 0 descriptor?? [ 120.133027][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.425464][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.610108][ T5985] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 122.664624][ T5985] usb 5-1: config 9 has an invalid interface number: 1 but max is 0 [ 122.664651][ T5985] usb 5-1: config 9 has no interface number 0 [ 122.664681][ T5985] usb 5-1: config 9 interface 1 has no altsetting 0 [ 122.814463][ T5985] usb 5-1: string descriptor 0 read error: -22 [ 122.814563][ T5985] usb 5-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 122.814575][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.889710][ T5985] cx231xx 5-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 122.889743][ T5985] cx231xx 5-1:9.1: Not found matching IAD interface [ 123.390149][ T6096] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 123.640120][ T5930] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.796708][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.796725][ T5930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.796747][ T5930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 123.796759][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.809353][ T5930] usb 2-1: config 0 descriptor?? [ 123.940269][ T5930] usb 5-1: USB disconnect, device number 2 [ 124.019384][ T6111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.40'. [ 124.205409][ T5859] usb 2-1: USB disconnect, device number 2 [ 124.300182][ T1801] usb 4-1: USB disconnect, device number 3 [ 127.730070][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.671884][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 128.676919][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.676947][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.676970][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.677014][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.677056][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.677078][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.978936][ T44] usb 4-1: usb_control_msg returned -32 [ 128.978972][ T44] usbtmc 4-1:16.0: can't read capabilities [ 129.038349][ T44] usb 4-1: USB disconnect, device number 4 [ 130.300152][ T1801] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.311467][ T5832] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.399994][ T6167] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.501617][ T1801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.501659][ T1801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.537253][ T1801] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 130.537369][ T1801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.537389][ T1801] usb 2-1: Product: syz [ 130.537401][ T1801] usb 2-1: Manufacturer: syz [ 130.537415][ T1801] usb 2-1: SerialNumber: syz [ 130.576874][ T5832] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.576901][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.612948][ T5832] usb 4-1: config 0 descriptor?? [ 130.615701][ T1801] usb 2-1: config 0 descriptor?? [ 130.845770][ T1801] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 130.872504][ T1801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.131616][ T1801] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 131.131677][ T1801] usb 2-1: media controller created [ 131.256081][ T5832] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 131.443964][ T1801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.461926][ T5832] [drm:udl_init] *ERROR* Selecting channel failed [ 131.633625][ T5832] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 131.633642][ T5832] [drm] Initialized udl on minor 2 [ 131.677060][ T5832] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 131.743177][ T1801] DVB: Unable to find symbol tda10046_attach() [ 131.743188][ T1801] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 131.743195][ T1801] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 131.752009][ T5832] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 131.859775][ T5985] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 131.963642][ T1801] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 132.060438][ T5985] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 132.064722][ T5985] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 132.065602][ T5832] usb 4-1: USB disconnect, device number 5 [ 132.104131][ T1801] usb 2-1: USB disconnect, device number 3 [ 133.006753][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.010230][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.523962][ T6215] syzkaller0: entered promiscuous mode [ 144.523991][ T6215] syzkaller0: entered allmulticast mode [ 150.888303][ T6265] syzkaller0: entered promiscuous mode [ 150.888331][ T6265] syzkaller0: entered allmulticast mode [ 153.010097][ T5929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.251215][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 153.253863][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.253893][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.256925][ T5929] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.256950][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.256969][ T5929] usb 2-1: Product: syz [ 153.256982][ T5929] usb 2-1: Manufacturer: syz [ 153.256996][ T5929] usb 2-1: SerialNumber: syz [ 153.263843][ T5929] usb 2-1: config 0 descriptor?? [ 153.341833][ T5929] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.341856][ T5929] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 154.019656][ T5929] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 154.056786][ T5929] em28xx 2-1:0.0: Config register raw data: 0x00 [ 155.880386][ T1001] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.030079][ T1001] usb 4-1: Using ep0 maxpacket: 8 [ 156.035010][ T1001] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.035038][ T1001] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.035061][ T1001] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.035084][ T1001] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.035126][ T1001] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.035148][ T1001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.214077][ T5832] usb 2-1: USB disconnect, device number 4 [ 156.225666][ T5832] em28xx 2-1:0.0: Disconnecting em28xx [ 156.329718][ T1001] usb 4-1: GET_CAPABILITIES returned 0 [ 156.329747][ T1001] usbtmc 4-1:16.0: can't read capabilities [ 156.398727][ T5832] em28xx 2-1:0.0: Freeing device [ 157.779254][ T5832] usb 4-1: USB disconnect, device number 6 [ 163.150087][ T5929] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.635506][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.635523][ T5929] usb 5-1: config 0 has no interfaces? [ 163.635541][ T5929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.635552][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.638549][ T5929] usb 5-1: config 0 descriptor?? [ 164.532522][ T44] usb 5-1: USB disconnect, device number 3 [ 172.712510][ T6392] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.118'. [ 177.040892][ T6415] CUSE: info not properly terminated [ 177.067813][ T6422] block nbd0: Attempted send on invalid socket [ 177.067922][ T6422] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 181.430006][ T6444] Zero length message leads to an empty skb [ 189.110125][ T1801] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.110399][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 189.240099][ T1801] usb 2-1: device descriptor read/64, error -32 [ 189.836765][ T1801] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.838016][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 190.700131][ T1801] usb 2-1: device descriptor read/64, error -32 [ 190.816117][ T1801] usb usb2-port1: attempt power cycle [ 191.085626][ T6490] netlink: 128 bytes leftover after parsing attributes in process `syz.0.142'. [ 191.200215][ T1801] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.399773][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.399894][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.253923][ T1801] usb 2-1: device descriptor read/8, error -110 [ 197.180865][ T1801] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.210182][ T1801] usb 2-1: device descriptor read/8, error -32 [ 197.345195][ T1801] usb usb2-port1: unable to enumerate USB device [ 197.510063][ T5929] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.661763][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 197.667751][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 197.667771][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.669712][ T5929] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.669728][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.669738][ T5929] usb 5-1: Product: syz [ 197.669745][ T5929] usb 5-1: Manufacturer: syz [ 197.669752][ T5929] usb 5-1: SerialNumber: syz [ 197.736162][ T5929] usb 5-1: config 0 descriptor?? [ 197.764794][ T5929] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.764827][ T5929] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 199.340156][ T5929] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 199.409388][ T5929] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 199.633351][ T5929] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 199.633385][ T5929] em28xx 5-1:0.0: No AC97 audio processor [ 200.990842][ T5929] usb 5-1: USB disconnect, device number 4 [ 200.993243][ T5929] em28xx 5-1:0.0: Disconnecting em28xx [ 200.996586][ T5929] em28xx 5-1:0.0: Freeing device [ 206.654696][ T6562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.162'. [ 206.787081][ T6562] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 207.362072][ T6562] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 207.362248][ T6562] team0: Failed to send options change via netlink (err -105) [ 207.362264][ T6562] team0: Port device netdevsim0 added [ 209.287378][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.301871][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.340505][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.343357][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.344771][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.350861][ T1801] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 209.500083][ T1801] usb 3-1: Using ep0 maxpacket: 16 [ 209.504512][ T1801] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 209.504531][ T1801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.508432][ T1801] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.508451][ T1801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.508460][ T1801] usb 3-1: Product: syz [ 209.508468][ T1801] usb 3-1: Manufacturer: syz [ 209.508475][ T1801] usb 3-1: SerialNumber: syz [ 209.516839][ T1801] usb 3-1: config 0 descriptor?? [ 209.592647][ T1801] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 209.592680][ T1801] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 210.216960][ T1801] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 210.217770][ T1801] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 210.420220][ T1801] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 210.420235][ T1801] em28xx 3-1:0.0: No AC97 audio processor [ 211.424741][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.428549][ T1482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.431507][ T5849] Bluetooth: hci1: command tx timeout [ 211.625042][ T5849] Bluetooth: hci4: unexpected cc 0x042e length: 1 < 7 [ 211.832510][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 211.832625][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 211.871843][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.885650][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 212.542720][ T5985] usb 3-1: USB disconnect, device number 4 [ 212.545095][ T5985] em28xx 3-1:0.0: Disconnecting em28xx [ 212.609486][ T5985] em28xx 3-1:0.0: Freeing device [ 212.685557][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.904195][ T1482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.136840][ T6615] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 213.144413][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.395286][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.823489][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.894675][ T5847] Bluetooth: hci1: command tx timeout [ 213.993969][ T6617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.192068][ T6607] tipc: Started in network mode [ 214.192093][ T6607] tipc: Node identity 4, cluster identity 4711 [ 214.192104][ T6607] tipc: Node number set to 4 [ 214.481230][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.516917][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.802435][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.846976][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.937326][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.970288][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.009498][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.032146][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.574634][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.966523][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.968548][ T5847] Bluetooth: hci1: command tx timeout [ 216.137765][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 216.190004][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 216.199322][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.087743][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.095028][ T5847] Bluetooth: hci1: command tx timeout [ 218.406250][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.449341][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.518480][ T1482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.608135][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.947865][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.057710][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.242339][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.637490][ T1482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.029690][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.176873][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.339312][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 220.491936][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.193'. [ 221.221636][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.499424][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.931791][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.106288][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.247788][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.659891][ T6681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.198'. [ 222.720021][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.013362][ T6675] binder: 6674:6675 ioctl c0306201 200000000680 returned -14 [ 225.137217][ T6699] warning: `syz.2.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 225.863463][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 225.863514][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.863539][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.863552][ T5847] Workqueue: hci3 hci_rx_work [ 225.863592][ T5847] Call Trace: [ 225.863600][ T5847] [ 225.863610][ T5847] dump_stack_lvl+0x189/0x250 [ 225.863645][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.863675][ T5847] ? __pfx__printk+0x10/0x10 [ 225.863703][ T5847] ? kernfs_path_from_node+0x2c/0x280 [ 225.863723][ T5847] ? kernfs_path_from_node+0x243/0x280 [ 225.863742][ T5847] ? kernfs_path_from_node+0x2c/0x280 [ 225.863765][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 225.863784][ T5847] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 225.863811][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 225.863831][ T5847] ? rt_spin_unlock+0x65/0x80 [ 225.863868][ T5847] kobject_add_internal+0x5a5/0xb50 [ 225.863899][ T5847] kobject_add+0x155/0x220 [ 225.863925][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 225.863953][ T5847] ? get_device_parent+0x370/0x3a0 [ 225.863979][ T5847] device_add+0x408/0xb50 [ 225.864003][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 225.864029][ T5847] le_conn_complete_evt+0xc3a/0x1220 [ 225.864072][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 225.864102][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 225.864131][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.864166][ T5847] ? skb_pull_data+0xfb/0x200 [ 225.864194][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 225.864230][ T5847] hci_event_packet+0x78f/0x1200 [ 225.864257][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 225.864287][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 225.864310][ T5847] ? __pfx_migrate_enable+0x10/0x10 [ 225.864343][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 225.864376][ T5847] hci_rx_work+0x46a/0xe80 [ 225.864408][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 225.864435][ T5847] process_scheduled_works+0xade/0x17b0 [ 225.864491][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 225.864535][ T5847] worker_thread+0x8a0/0xda0 [ 225.864589][ T5847] kthread+0x70e/0x8a0 [ 225.864627][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 225.864651][ T5847] ? __pfx_kthread+0x10/0x10 [ 225.864686][ T5847] ? __pfx_kthread+0x10/0x10 [ 225.864716][ T5847] ret_from_fork+0x436/0x7d0 [ 225.864745][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 225.864777][ T5847] ? __switch_to_asm+0x39/0x70 [ 225.864795][ T5847] ? __switch_to_asm+0x33/0x70 [ 225.864812][ T5847] ? __pfx_kthread+0x10/0x10 [ 225.864843][ T5847] ret_from_fork_asm+0x1a/0x30 [ 225.864886][ T5847] [ 225.864917][ T5847] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 225.864957][ T5847] Bluetooth: hci3: failed to register connection device [ 225.927434][ T6706] tty tty3: ldisc open failed (-12), clearing slot 2 [ 226.335923][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 229.724737][ T1482] bridge_slave_1: left allmulticast mode [ 229.725143][ T1482] bridge_slave_1: left promiscuous mode [ 229.728527][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.000025][ T1482] bridge_slave_0: left allmulticast mode [ 230.011479][ T1482] bridge_slave_0: left promiscuous mode [ 230.013106][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.708367][ T6750] random: crng reseeded on system resumption [ 233.398228][ T6750] ------------[ cut here ]------------ [ 233.398243][ T6750] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 233.398831][ T6750] WARNING: CPU: 1 PID: 6750 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 233.398875][ T6750] Modules linked in: [ 233.398894][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.398917][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.398930][ T6750] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 233.398956][ T6750] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 e9 4f be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 10 da 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 233.398972][ T6750] RSP: 0018:ffffc90004a8fae0 EFLAGS: 00010246 [ 233.398990][ T6750] RAX: eedd2f41b643dd00 RBX: 1ffff110285e1c01 RCX: 0000000000080000 [ 233.399004][ T6750] RDX: ffffc90012250000 RSI: 00000000000006ea RDI: 00000000000006eb [ 233.399017][ T6750] RBP: ffffc90004a8fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 233.399030][ T6750] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888142bfb000 [ 233.399045][ T6750] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 233.399060][ T6750] FS: 00007f9ccde016c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 233.399077][ T6750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.399091][ T6750] CR2: 00007f6d05334d58 CR3: 000000003a6e2000 CR4: 00000000003526f0 [ 233.399108][ T6750] Call Trace: [ 233.399115][ T6750] [ 233.399129][ T6750] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 233.399155][ T6750] ? __pfx_autoremove_wake_function+0x10/0x10 [ 233.399182][ T6750] ? rt_spin_unlock+0x65/0x80 [ 233.399214][ T6750] ? drm_vblank_get+0x148/0x260 [ 233.399238][ T6750] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 233.399264][ T6750] drm_fb_helper_ioctl+0x116/0x140 [ 233.399293][ T6750] do_fb_ioctl+0x45c/0x750 [ 233.399321][ T6750] ? __pfx_do_fb_ioctl+0x10/0x10 [ 233.399360][ T6750] ? smk_tskacc+0x2fc/0x370 [ 233.399402][ T6750] ? __pfx_smack_file_ioctl+0x10/0x10 [ 233.399427][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.399443][ T6750] ? __fget_files+0x3a6/0x420 [ 233.399468][ T6750] ? __fget_files+0x2a/0x420 [ 233.399495][ T6750] ? bpf_lsm_file_ioctl+0x9/0x20 [ 233.399516][ T6750] ? __pfx_fb_ioctl+0x10/0x10 [ 233.399536][ T6750] __se_sys_ioctl+0xff/0x170 [ 233.399559][ T6750] do_syscall_64+0xfa/0x3b0 [ 233.399577][ T6750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.399594][ T6750] ? asm_sysvec_call_function_single+0x1a/0x20 [ 233.399612][ T6750] ? clear_bhb_loop+0x60/0xb0 [ 233.399635][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.399653][ T6750] RIP: 0033:0x7f9ccfffec29 [ 233.399676][ T6750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.399692][ T6750] RSP: 002b:00007f9ccde01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.399710][ T6750] RAX: ffffffffffffffda RBX: 00007f9cd0246270 RCX: 00007f9ccfffec29 [ 233.399725][ T6750] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000007 [ 233.399736][ T6750] RBP: 00007f9cd0081e41 R08: 0000000000000000 R09: 0000000000000000 [ 233.399749][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.399761][ T6750] R13: 00007f9cd0246308 R14: 00007f9cd0246270 R15: 00007ffe9b83bb48 [ 233.399788][ T6750] [ 233.399801][ T6750] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 233.399816][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.399838][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.399849][ T6750] Call Trace: [ 233.399857][ T6750] [ 233.399865][ T6750] dump_stack_lvl+0x99/0x250 [ 233.399896][ T6750] ? __asan_memcpy+0x40/0x70 [ 233.399919][ T6750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.399943][ T6750] ? __pfx__printk+0x10/0x10 [ 233.399978][ T6750] vpanic+0x281/0x750 [ 233.400006][ T6750] ? __pfx__printk+0x10/0x10 [ 233.400025][ T6750] ? __pfx_vpanic+0x10/0x10 [ 233.400052][ T6750] ? is_bpf_text_address+0x26/0x2b0 [ 233.400090][ T6750] panic+0xb9/0xc0 [ 233.400117][ T6750] ? __pfx_panic+0x10/0x10 [ 233.400160][ T6750] __warn+0x31b/0x4b0 [ 233.400185][ T6750] ? drm_wait_one_vblank+0x571/0x5b0 [ 233.400213][ T6750] ? drm_wait_one_vblank+0x571/0x5b0 [ 233.400237][ T6750] report_bug+0x2be/0x4f0 [ 233.400264][ T6750] ? drm_wait_one_vblank+0x571/0x5b0 [ 233.400289][ T6750] ? drm_wait_one_vblank+0x571/0x5b0 [ 233.400313][ T6750] ? drm_wait_one_vblank+0x573/0x5b0 [ 233.400338][ T6750] handle_bug+0x84/0x160 [ 233.400359][ T6750] exc_invalid_op+0x1a/0x50 [ 233.400380][ T6750] asm_exc_invalid_op+0x1a/0x20 [ 233.400397][ T6750] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 233.400429][ T6750] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 e9 4f be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 10 da 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 233.400445][ T6750] RSP: 0018:ffffc90004a8fae0 EFLAGS: 00010246 [ 233.400463][ T6750] RAX: eedd2f41b643dd00 RBX: 1ffff110285e1c01 RCX: 0000000000080000 [ 233.400478][ T6750] RDX: ffffc90012250000 RSI: 00000000000006ea RDI: 00000000000006eb [ 233.400491][ T6750] RBP: ffffc90004a8fbe0 R08: 0000000000000000 R09: 0000000000000000 [ 233.400505][ T6750] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff888142bfb000 [ 233.400520][ T6750] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 233.400557][ T6750] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 233.400583][ T6750] ? __pfx_autoremove_wake_function+0x10/0x10 [ 233.400609][ T6750] ? rt_spin_unlock+0x65/0x80 [ 233.400636][ T6750] ? drm_vblank_get+0x148/0x260 [ 233.400654][ T6750] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 233.400675][ T6750] drm_fb_helper_ioctl+0x116/0x140 [ 233.400697][ T6750] do_fb_ioctl+0x45c/0x750 [ 233.400719][ T6750] ? __pfx_do_fb_ioctl+0x10/0x10 [ 233.400753][ T6750] ? smk_tskacc+0x2fc/0x370 [ 233.400790][ T6750] ? __pfx_smack_file_ioctl+0x10/0x10 [ 233.400820][ T6750] ? __fget_files+0x3a6/0x420 [ 233.400843][ T6750] ? __fget_files+0x2a/0x420 [ 233.400870][ T6750] ? bpf_lsm_file_ioctl+0x9/0x20 [ 233.400892][ T6750] ? __pfx_fb_ioctl+0x10/0x10 [ 233.400912][ T6750] __se_sys_ioctl+0xff/0x170 [ 233.400936][ T6750] do_syscall_64+0xfa/0x3b0 [ 233.400953][ T6750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.400969][ T6750] ? asm_sysvec_call_function_single+0x1a/0x20 [ 233.400985][ T6750] ? clear_bhb_loop+0x60/0xb0 [ 233.401005][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.401021][ T6750] RIP: 0033:0x7f9ccfffec29 [ 233.401038][ T6750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.401054][ T6750] RSP: 002b:00007f9ccde01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.401074][ T6750] RAX: ffffffffffffffda RBX: 00007f9cd0246270 RCX: 00007f9ccfffec29 [ 233.401086][ T6750] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000007 [ 233.401098][ T6750] RBP: 00007f9cd0081e41 R08: 0000000000000000 R09: 0000000000000000 [ 233.401111][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.401124][ T6750] R13: 00007f9cd0246308 R14: 00007f9cd0246270 R15: 00007ffe9b83bb48 [ 233.401155][ T6750] [ 233.401887][ T6750] Kernel Offset: disabled