last executing test programs: 15m22.592396752s ago: executing program 0 (id=1): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$l2tp6(0xa, 0x2, 0x73) io_uring_setup(0x30a7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_STATX(r5, &(0x7f0000008100)={0x130, 0xfffffffffffffffe, 0x0, {0x100000000, 0x0, 0x0, '\x00', {0x400, 0x1, 0x8, 0x9, 0x0, 0x0, 0xa000, '\x00', 0x3, 0x57, 0x7, 0x6, {0x7fff, 0x5}, {0x3, 0x6}, {0x5, 0xcd4}, {0x32, 0x7}, 0x3, 0xfff, 0x10000, 0x8}}}, 0x130) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) setsockopt$inet6_tcp_int(r4, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x24}, 0xffffcdb0}}, @sadb_address={0x3, 0x5, 0x3c, 0x20, 0x0, @in={0x2, 0x4e23, @multicast2}}]}, 0x50}}, 0x0) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) sendmsg$nl_route_sched(r0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 15m22.369311959s ago: executing program 3 (id=4): openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000500)={'\x00', 0x7ef, 0x28, 0x9, 0xb, 0xc1ac}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x8004) syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x28c402) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x0, @pix_mp={0xfffffffc, 0x100, 0xb5315241, 0x4, 0x2, [{}, {0x800000}, {}, {0x5}, {}, {0xf73}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x7f, 0x0, 0x0, 0x5}}) socket(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 15m20.542216911s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000005c0)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000008000]}}) r11 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001280)={r9, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "280901dce108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_SET_DIRECT_IO(r11, 0x4c08, 0x5cd) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 15m18.384720323s ago: executing program 3 (id=16): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4004004) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f00000000c0)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) lstat(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./cgroup\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, r4, r5, r6, 0x13, 0x6}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xeb4f, 0xff, 0x4, 0x8, r2, r2}) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) capset(&(0x7f0000000040)={0x20071026}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000100), 0x4) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r10, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) 15m13.43730933s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001040)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0xa, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x2, 0x2b}}, &(0x7f0000000200)={0x2e, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 15m12.552614946s ago: executing program 3 (id=20): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x2400c804) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15m10.810278226s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) brk(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000340)={0x50, 0x0, 0x6, {0x7, 0x21, 0x85, 0x772542, 0xfbfd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007300)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x2b, 0x2, 0x240000, 0x96ed, 0x40, 0xff, 0x446, 0x0, 0x0, 0x4, 0xfffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0xbd08, @vifc_lcl_ifindex=r5, @multicast2}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'security.', '#}+\x19(/(^&&],\x00'}) 15m6.813469175s ago: executing program 3 (id=24): timerfd_create(0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x4}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)}], 0x1}}], 0x1, 0x8040) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) pause() umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 15m4.681492437s ago: executing program 3 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x54, 0x4, 0xf, 0x0, 0x18) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15m2.142895519s ago: executing program 3 (id=30): ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff, 0x7}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, 0x0, 0x0) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x80000000000000, {0x0, 0xf0, 0x2}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 14m52.838563295s ago: executing program 32 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18) brk(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000340)={0x50, 0x0, 0x6, {0x7, 0x21, 0x85, 0x772542, 0xfbfd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007300)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x2b, 0x2, 0x240000, 0x96ed, 0x40, 0xff, 0x446, 0x0, 0x0, 0x4, 0xfffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0xbd08, @vifc_lcl_ifindex=r5, @multicast2}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'security.', '#}+\x19(/(^&&],\x00'}) 14m46.612553556s ago: executing program 33 (id=30): ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff, 0x7}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, 0x0, 0x0) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x80000000000000, {0x0, 0xf0, 0x2}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 7m7.032892101s ago: executing program 1 (id=491): ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff, 0x7}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, 0x0, 0x0) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x80000000000000, {0x0, 0xf0, 0x2}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 7m5.531852472s ago: executing program 1 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0xe, @raw_data="02ca3c81462e38d9533ffce6e3f48d3a42583b334f479695af1f0baaa9121d5adf5f551b5b32416a781f2a7bee04ac730c2d4bd49aceb27e169ab830ae49d132dea21361dfb6de0098e37bd2d5bf4857cc86cb6366b5c467920fdafdffab927a7480a3e820d7faef90eb4176f40854002a98800be5253b0f7645aa8084878bf040820480e6feb2e8a801eddf3baf089a0a3f96d0786b2ca4d0229b3a44b09af97b75a7446bd32892c615c5b0534331140402a1c492ef46d90deb6b742dd28b7e7cd729955e77c905"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @func={0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x71, 0x5f, 0x61]}}, 0x0, 0x49}, 0x20) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x2, 0x5001) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e507646dcef67df33c9e9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r6, 0x1, 0x2b, 0x0, &(0x7f00000012c0)) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000480)={{@my=0x0}, 0x1, 0x2}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/core\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r8, 0xc08c5334, &(0x7f0000000380)={0x1000, 0x0, 0x1, 'queue0\x00', 0x4}) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f00000000c0)={0x2, 0x6ce5, 0x8, 0x800, 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f0000000180)={0x3, 0x2}) 6m49.716907986s ago: executing program 1 (id=504): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, r1, 0x2f126000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r2, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='msdos\x00', 0x5, 0x0) 6m40.147542831s ago: executing program 1 (id=501): ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r9 = fcntl$dupfd(r7, 0x406, r7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r8, 0x2, {0x0, 0xff, 0x7}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, 0x0, 0x0) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, 0x0, 0x80000000000000, {0x0, 0xf0, 0x2}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 6m37.747664428s ago: executing program 1 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000002180)='/dev/comedi0\x00', 0x88602, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0x0) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) 6m35.685226567s ago: executing program 1 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000ae04a875566896def68281f00000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 6m20.305254647s ago: executing program 34 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000ae04a875566896def68281f00000"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4m42.384847606s ago: executing program 4 (id=648): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x2400c804) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{}, @hci_rp_role_discovery={{0x1}, {0x0, 0xc9, 0x1}}}}, 0x4a) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 4m40.906204053s ago: executing program 4 (id=653): syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 4m38.274069801s ago: executing program 4 (id=658): syz_usb_connect(0x2, 0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000017c7d9105b044d0216270102030109022200010000000009046a0000aad1fc080424010300"], 0x0) 4m36.715116554s ago: executing program 4 (id=665): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x12, 0x20, 0x10, 0x40, 0x5ac, 0x8501, 0x9e4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xa0, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) 4m33.711858083s ago: executing program 4 (id=671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x4, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0x1, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x5, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x6, 0x3e5, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1008, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x20000009, 0xbb33, 0x9, 0xb, 0x5, 0x938, 0x6, 0x6, 0x7, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c17, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000740)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x2, 0x0, r7, 0x3, 0x200002, 0x3fff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x29a, 0x0, 0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="340000003800010326a67002fadbdf25b84ea828"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4040006) 4m31.432940323s ago: executing program 4 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r5, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 4m15.752856141s ago: executing program 35 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r5, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x4f27, 0x5, 0x10000, 0x2f, 0x66, 0xcc7, 0x5, 0x80007, 0xa, 0x100, 0x9, 0x1, 0x1db, 0x5, 0x0, 0x80000101, 0x5, 0x1a449, 0x3, 0x40020003, 0x208d, 0x2, 0xd27, 0xae, 0x7fff, 0x8, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) 2m31.89730797s ago: executing program 2 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/50, 0x32, 0x2, 0x1d}, @fda={0x66646185, 0x8, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x110a, 0x9}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2m30.170349791s ago: executing program 2 (id=941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2m28.433169629s ago: executing program 5 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001040)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/50, 0x32, 0x2, 0x1d}, @fda={0x66646185, 0x8, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x110a, 0x9}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fda={0x66646185, 0xa, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x2, 0x2b}}, &(0x7f0000000200)={0x2e, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m28.361906654s ago: executing program 2 (id=944): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0x5, {0x5, 0x1, "d0d8c9"}}, 0x0, 0x0, 0x0}, 0x0) 2m27.16441842s ago: executing program 5 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000009ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fe8000000000000000000000000000aa0300"/588], 0x310) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebd7627c020f01000000000081030000000000000095a078ac3442dfc47ab257f4e5bfa5d53ab69623a3ff05e2be169a4ebea729cc3b50779e84785d9649c4e2436e0e70c4ea42367668ce1574497b6b14de3312a882c3eb6a49378ab2aa7639fcf3a12f4bc1ae4603f046fcddab0ef38815f20000ab7bb70d796c9ac9c800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8000, 0x0, @mcast2}, {0xa, 0x4e21, 0x7, @local, 0xfffffff2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r8}}, 0x48) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48}) 2m27.00812985s ago: executing program 6 (id=946): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x80000101}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) 2m26.845789016s ago: executing program 6 (id=947): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00') read$FUSE(r0, &(0x7f0000008580)={0x2020}, 0xfffffef2) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/241, 0xf1}], 0x1, 0xffffbdea, 0x0) 2m26.585582221s ago: executing program 6 (id=948): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m25.187717207s ago: executing program 5 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/50, 0x32, 0x2, 0x1d}, @fda={0x66646185, 0x8, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x110a, 0x9}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2m23.672879392s ago: executing program 5 (id=950): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0xbad689febb22c699, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0xa, 0x7, 0x3, 0x15, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2m23.591688473s ago: executing program 2 (id=951): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)={0x0, 0xe, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m23.131149325s ago: executing program 6 (id=952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x7, 0x4, 0x3, 0x2f, 0x7, 0x2, 0xf, 0xffc, 0x2000001, 0x7, 0x1, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffb, 0x1ff, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x1, 0x5, 0x108, 0x7, 0x4, 0x7ff]}) 2m23.129446162s ago: executing program 5 (id=953): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m22.987975418s ago: executing program 6 (id=954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 2m22.803646811s ago: executing program 5 (id=955): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r0, &(0x7f0000000080)=""/94, 0x5e) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xb, @raw_data="9f4a96c5fe384616f1a9e9661829ad2f00d4f42b69f5352c110a8f9da8f8e51391fd07549b270a667430288b6eb25436a35c1749b5a2ea0e58d9d9cd467fc130b3234488546f00f60d34e302195d565a8f14c0ded549e28766cb1caaef9e2499b43f59e95392f654fcbe2cf59714f89e28fd4036bc62200da3cfadf1b5e24cd5de1d45ff67ace9ce3752812de38e2eccc5680ad93af92a66556ec63abe6abaab291e60c965a3488c2b58478d627414ca29c8bb79d56ae10cdce90dc9116d27adf8ff3b05b0c0d374"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfffffffc, 0x6c7d, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)=""/126, 0x7e}, {0x0}, {0x0}], 0x3, &(0x7f00000007c0)=""/199, 0xc7}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r4}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 2m21.744097619s ago: executing program 2 (id=956): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2m21.529192186s ago: executing program 2 (id=957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000009ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fe8000000000000000000000000000aa0300"/588], 0x310) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebd7627c020f01000000000081030000000000000095a078ac3442dfc47ab257f4e5bfa5d53ab69623a3ff05e2be169a4ebea729cc3b50779e84785d9649c4e2436e0e70c4ea42367668ce1574497b6b14de3312a882c3eb6a49378ab2aa7639fcf3a12f4bc1ae4603f046fcddab0ef38815f20000ab7bb70d796c9ac9c800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8000, 0x0, @mcast2}, {0xa, 0x4e21, 0x7, @local, 0xfffffff2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r8}}, 0x48) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48}) 2m21.188207243s ago: executing program 6 (id=958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000500)={0x20, 0x28, 0x12, {0x12, 0xb, "47a468c1fb56fd4a2625992afe97504b"}}, 0x0}, 0x0) 1m25.326460715s ago: executing program 36 (id=955): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r0, &(0x7f0000000080)=""/94, 0x5e) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xb, @raw_data="9f4a96c5fe384616f1a9e9661829ad2f00d4f42b69f5352c110a8f9da8f8e51391fd07549b270a667430288b6eb25436a35c1749b5a2ea0e58d9d9cd467fc130b3234488546f00f60d34e302195d565a8f14c0ded549e28766cb1caaef9e2499b43f59e95392f654fcbe2cf59714f89e28fd4036bc62200da3cfadf1b5e24cd5de1d45ff67ace9ce3752812de38e2eccc5680ad93af92a66556ec63abe6abaab291e60c965a3488c2b58478d627414ca29c8bb79d56ae10cdce90dc9116d27adf8ff3b05b0c0d374"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfffffffc, 0x6c7d, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x1, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)=""/126, 0x7e}, {0x0}, {0x0}], 0x3, &(0x7f00000007c0)=""/199, 0xc7}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x10, r4}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) 51.856347565s ago: executing program 37 (id=957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000a004e220000000400000000000000000000000000000001040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e210000000300000000000000000000ffff7f000001090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000000000000000000000000a004e240000026c00000000000000000000ffff0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000300000009ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fe8000000000000000000000000000aa0300"/588], 0x310) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r6, r5, 0xff, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ebd7627c020f01000000000081030000000000000095a078ac3442dfc47ab257f4e5bfa5d53ab69623a3ff05e2be169a4ebea729cc3b50779e84785d9649c4e2436e0e70c4ea42367668ce1574497b6b14de3312a882c3eb6a49378ab2aa7639fcf3a12f4bc1ae4603f046fcddab0ef38815f20000ab7bb70d796c9ac9c800000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8000, 0x0, @mcast2}, {0xa, 0x4e21, 0x7, @local, 0xfffffff2}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r8}}, 0x48) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48}) 0s ago: executing program 38 (id=958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000500)={0x20, 0x28, 0x12, {0x12, 0xb, "47a468c1fb56fd4a2625992afe97504b"}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): ] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 260.996615][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.273623][ T6626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.813205][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.815652][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.815737][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.978860][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.337795][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.274789][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.491812][ T6633] overlay: filesystem on ./bus not supported [ 263.679865][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.801852][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.000196][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.373741][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.363939][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.457411][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.476946][ T6112] bond0 (unregistering): Released all slaves [ 265.515417][ T6611] veth0: entered promiscuous mode [ 265.518796][ T6612] veth0: left promiscuous mode [ 267.194064][ T6653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.657047][ T6661] vivid-000: kernel_thread() failed [ 270.106506][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.715722][ T6678] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 270.722149][ T6678] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 271.230654][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.366543][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.522199][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.894680][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.519159][ T6688] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 272.521156][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.592606][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.795212][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.967405][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.540752][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.760639][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.801997][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.832385][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.840408][ T6700] sctp: [Deprecated]: syz.4.150 (pid 6700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.840408][ T6700] Use struct sctp_sack_info instead [ 275.156436][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.910276][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.384306][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.600542][ T6706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.643471][ T6716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.436158][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.510606][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.827225][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.333479][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.935128][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.929368][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.189130][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.205940][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.209055][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.210847][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.240860][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.144838][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.991307][ T6748] Invalid logical block size (8192) [ 284.248870][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.308659][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.457968][ T5839] Bluetooth: hci2: command tx timeout [ 284.707592][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.777037][ T6783] NILFS (nullb0): couldn't find nilfs on the device [ 285.784367][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.899726][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.582834][ T5839] Bluetooth: hci2: command tx timeout [ 286.794306][ T6780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.175225][ T6797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.453705][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.475421][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.180029][ T5155] Bluetooth: hci2: command tx timeout [ 289.198464][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.205643][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.206561][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.770840][ T6112] hsr_slave_0: left promiscuous mode [ 289.867648][ T6811] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 290.331331][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.686359][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.713286][ T6112] hsr_slave_1: left promiscuous mode [ 290.714592][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.714704][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.865188][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.865222][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.144142][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.334633][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.530405][ T5155] Bluetooth: hci4: command tx timeout [ 291.581406][ T5839] Bluetooth: hci2: command tx timeout [ 291.694958][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.286355][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.399106][ T6112] veth1_macvtap: left promiscuous mode [ 292.399429][ T6112] veth0_macvtap: left promiscuous mode [ 292.401589][ T6112] veth1_vlan: left promiscuous mode [ 292.423552][ T6112] veth0_vlan: left promiscuous mode [ 293.290286][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.653695][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.962389][ T5155] Bluetooth: hci4: command tx timeout [ 294.207282][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.643808][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.837900][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.928023][ T6831] erofs (device nbd1): cannot find valid erofs superblock [ 294.948902][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.178261][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.042583][ T5155] Bluetooth: hci4: command tx timeout [ 296.084781][ T6841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.350826][ T6847] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 298.192528][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.278390][ T5155] Bluetooth: hci4: command tx timeout [ 298.673545][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.115797][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.865981][ T6860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.884767][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.937790][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.564181][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.901266][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.283812][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.345336][ T6866] tmpfs: Bad value for 'mpol' [ 302.234813][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.312308][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.460706][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.663638][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.733640][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.662693][ T6904] binder: BINDER_SET_CONTEXT_MGR already set [ 307.662710][ T6904] binder: 6898:6904 ioctl 4018620d 200000004a80 returned -16 [ 308.283861][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.456052][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.724332][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.877055][ T6908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.225328][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.371962][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.738130][ T5839] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 313.739951][ T5839] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 313.804821][ T6921] capability: warning: `syz.2.192' uses 32-bit capabilities (legacy support in use) [ 317.446682][ T6058] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 318.795053][ T5155] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 318.799505][ T5155] Bluetooth: hci1: Injecting HCI hardware error event [ 318.803187][ T6423] Bluetooth: hci1: hardware error 0x00 [ 320.098757][ T6947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.877563][ T6950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.722410][ T6423] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 323.132471][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.132555][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.140143][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.207'. [ 326.769355][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 327.450523][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.645473][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 329.957860][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.968504][ T6989] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 330.040353][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.388086][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.389846][ T6095] IPVS: starting estimator thread 0... [ 330.813225][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.819470][ T6990] IPVS: using max 7 ests per chain, 16800 per kthread [ 331.012740][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.186702][ T6995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.549048][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.957374][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.135988][ T37] audit: type=1326 audit(1757023816.844:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.138708][ T37] audit: type=1326 audit(1757023816.864:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.144492][ T37] audit: type=1326 audit(1757023816.874:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.144553][ T37] audit: type=1326 audit(1757023816.874:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.144602][ T37] audit: type=1326 audit(1757023816.874:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.144651][ T37] audit: type=1326 audit(1757023816.874:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.144700][ T37] audit: type=1326 audit(1757023816.874:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.149179][ T37] audit: type=1326 audit(1757023816.874:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.149319][ T37] audit: type=1326 audit(1757023816.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 333.149381][ T37] audit: type=1326 audit(1757023816.874:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7004 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 337.616103][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.819236][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.963516][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.055950][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.067874][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.395865][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.420642][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.441901][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.490951][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.640926][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.795942][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.381530][ T7037] netlink: 'syz.4.221': attribute type 2 has an invalid length. [ 340.972090][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.214796][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.251546][ T5839] Bluetooth: hci5: command tx timeout [ 345.322909][ T6423] Bluetooth: hci5: command tx timeout [ 345.559904][ T7051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.427636][ T6423] Bluetooth: hci5: command tx timeout [ 347.650622][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 348.288412][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.304368][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.306776][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.308266][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.312007][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.512833][ T6423] Bluetooth: hci5: command tx timeout [ 350.363894][ T6423] Bluetooth: hci6: command tx timeout [ 350.978336][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.085814][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.206448][ T7087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.442406][ T6423] Bluetooth: hci6: command tx timeout [ 352.981884][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.354305][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.233'. [ 353.982058][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.394646][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.423125][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.483688][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.604633][ T6423] Bluetooth: hci6: command tx timeout [ 354.604660][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.360802][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.603319][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.682731][ T6423] Bluetooth: hci6: command tx timeout [ 358.472648][ T7106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.890078][ T7113] cramfs: Unknown parameter 'discard' [ 359.973803][ T7112] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 360.028653][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 360.028673][ T37] audit: type=1326 audit(1757023843.744:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.2.240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd43520ebe9 code=0x0 [ 362.262341][ T5915] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 362.472555][ T5915] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 362.472586][ T5915] usb 2-1: config 0 has no interface number 0 [ 362.479452][ T5915] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 362.479484][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.479513][ T5915] usb 2-1: Product: syz [ 362.479528][ T5915] usb 2-1: Manufacturer: syz [ 362.479543][ T5915] usb 2-1: SerialNumber: syz [ 362.545663][ T5915] usb 2-1: config 0 descriptor?? [ 362.922957][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.062941][ T5915] usb 2-1: Firmware version (0.0) predates our first public release. [ 363.062968][ T5915] usb 2-1: Please update to version 0.2 or newer [ 364.174386][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.289011][ T7130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.026634][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.995025][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.241552][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.333031][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.565564][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.809224][ T7148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.011633][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.179096][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.410642][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.430972][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.090523][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.885034][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.097542][ T7154] cramfs: Unknown parameter 'discard' [ 372.734226][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.335339][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.495272][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.582707][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.266727][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.365462][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.466266][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.572745][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.771962][ T7179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.815455][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.878380][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.035602][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.195790][ T5915] usb 2-1: USB disconnect, device number 3 [ 375.435349][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.865532][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.145950][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.233016][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.479043][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.515149][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.866240][ T7192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.334422][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.271315][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.290468][ T7197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.660519][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.265036][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.461695][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.892495][ T7206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.935228][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.263812][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.427060][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.121546][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 384.708245][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.710089][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.503538][ T7255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.017828][ T7263] random: crng reseeded on system resumption [ 390.513420][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.513572][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.513860][ T7024] bridge_slave_0: entered allmulticast mode [ 390.517034][ T7024] bridge_slave_0: entered promiscuous mode [ 391.978742][ T7281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.325069][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.325220][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.325513][ T7024] bridge_slave_1: entered allmulticast mode [ 392.345903][ T7024] bridge_slave_1: entered promiscuous mode [ 395.504829][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.632084][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.646788][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 397.195149][ T7313] binder: BINDER_SET_CONTEXT_MGR already set [ 397.195166][ T7313] binder: 7307:7313 ioctl 4018620d 200000004a80 returned -16 [ 400.063867][ T7323] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 400.063933][ T7323] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 400.064045][ T7323] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 400.064146][ T7323] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 400.064200][ T7323] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 400.064254][ T7323] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 400.064308][ T7323] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 400.064389][ T7323] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 400.064488][ T7323] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 400.064542][ T7323] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 400.064595][ T7323] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 401.877213][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.883803][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.898860][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.912537][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.921816][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.232524][ T6423] Bluetooth: hci2: command tx timeout [ 404.383979][ T7065] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 405.556329][ T7366] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 406.282524][ T6423] Bluetooth: hci2: command tx timeout [ 406.721907][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.747066][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.926996][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.968611][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.995262][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.604314][ T7376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.678940][ T6112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.903182][ T6423] Bluetooth: hci2: command tx timeout [ 409.332453][ T5839] Bluetooth: hci4: command tx timeout [ 410.116916][ T7387] fuse: Unknown parameter 'fd' [ 410.962029][ T5839] Bluetooth: hci2: command tx timeout [ 412.333408][ T5839] Bluetooth: hci4: command tx timeout [ 413.470985][ T6112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.123285][ T5839] Bluetooth: hci4: command tx timeout [ 417.168840][ T6423] Bluetooth: hci4: command tx timeout [ 417.380325][ T6112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.425489][ T7419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.119921][ T7423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.742066][ T7437] binder: BINDER_SET_CONTEXT_MGR already set [ 420.742082][ T7437] binder: 7435:7437 ioctl 4018620d 200000004a80 returned -16 [ 420.827578][ T6112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.102226][ T6282] IPVS: starting estimator thread 0... [ 422.202916][ T7455] IPVS: using max 6 ests per chain, 14400 per kthread [ 424.407027][ T7471] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 427.655368][ T7370] chnl_net:caif_netlink_parms(): no params data found [ 428.733331][ T6112] bridge_slave_1: left allmulticast mode [ 428.733369][ T6112] bridge_slave_1: left promiscuous mode [ 428.736657][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.827231][ T6112] bridge_slave_0: left allmulticast mode [ 428.827266][ T6112] bridge_slave_0: left promiscuous mode [ 428.827566][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.146502][ T7494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.247150][ T6112] bridge_slave_1: left allmulticast mode [ 430.247188][ T6112] bridge_slave_1: left promiscuous mode [ 430.247508][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.598263][ T7501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.974381][ T6112] bridge_slave_0: left allmulticast mode [ 430.974416][ T6112] bridge_slave_0: left promiscuous mode [ 430.974683][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.684081][ T7515] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 436.117308][ T6112] bond0 (unregistering): Released all slaves [ 439.595343][ T7543] netlink: 780 bytes leftover after parsing attributes in process `syz.2.325'. [ 439.964436][ T6112] bond0 (unregistering): Released all slaves [ 440.026984][ T7540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.579349][ T7549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.863988][ T7554] sctp: failed to load transform for md5: -2 [ 443.307729][ T7566] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 444.073066][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.638027][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.897632][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.897883][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.565568][ T7583] tmpfs: Bad value for 'mpol' [ 448.259374][ T6112] bond0 (unregistering): Released all slaves [ 448.600276][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 448.782801][ T7591] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 453.586577][ T7606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.565876][ T7610] vivid-003: disconnect [ 454.590993][ T7610] Bluetooth: MGMT ver 1.23 [ 456.014763][ T7600] vivid-003: reconnect [ 457.689982][ T7633] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 458.714059][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 458.739386][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 458.741989][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.763246][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.764832][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.006648][ T6423] Bluetooth: hci5: command tx timeout [ 461.990137][ T7661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.195169][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 462.195218][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 463.849568][ T6423] Bluetooth: hci5: command tx timeout [ 465.656932][ T7678] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 465.894961][ T5839] Bluetooth: hci5: command tx timeout [ 468.345419][ T5839] Bluetooth: hci5: command tx timeout [ 468.906147][ T7699] binder: BINDER_SET_CONTEXT_MGR already set [ 468.906163][ T7699] binder: 7694:7699 ioctl 4018620d 200000004a80 returned -16 [ 469.151964][ T6423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 469.186661][ T6423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 469.189191][ T6423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 469.208957][ T6423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 469.210445][ T6423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 470.316551][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.961831][ T7712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.159143][ T7715] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 471.239974][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.319351][ T6112] bond0 (unregistering): Released all slaves [ 471.322645][ T6423] Bluetooth: hci6: command tx timeout [ 472.202005][ T7723] binder: BINDER_SET_CONTEXT_MGR already set [ 472.202075][ T7723] binder: 7719:7723 ioctl 4018620d 200000004a80 returned -16 [ 473.402354][ T6423] Bluetooth: hci6: command tx timeout [ 474.641506][ T7737] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 475.684616][ T6423] Bluetooth: hci6: command tx timeout [ 475.847639][ T7742] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 477.723955][ T6423] Bluetooth: hci6: command tx timeout [ 483.790884][ T7778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.054815][ T7789] binder: BINDER_SET_CONTEXT_MGR already set [ 485.054883][ T7789] binder: 7785:7789 ioctl 4018620d 200000004a80 returned -16 [ 490.220532][ T7812] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 492.050822][ T7824] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 492.106716][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 492.953220][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 493.654921][ T7819] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 493.654947][ T7819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.377'. [ 494.243514][ T7833] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 498.470403][ T44] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 498.814457][ T7860] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 499.551808][ T44] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.551829][ T44] usb 2-1: config 0 has no interface number 0 [ 499.551878][ T44] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 499.551895][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.589861][ T44] usb 2-1: config 0 descriptor?? [ 499.670024][ T7636] chnl_net:caif_netlink_parms(): no params data found [ 499.740843][ T44] usb 2-1: selecting invalid altsetting 1 [ 499.755712][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 499.756084][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 501.608225][ T44] DVB: Unable to find symbol cx22700_attach() [ 501.802683][ T44] DVB: Unable to find symbol tda10046_attach() [ 501.802700][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 501.812059][ T44] usb 2-1: USB disconnect, device number 4 [ 504.499780][ T7702] chnl_net:caif_netlink_parms(): no params data found [ 507.879600][ T7906] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 508.457970][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.458059][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.776810][ T6112] hsr_slave_0: left promiscuous mode [ 508.824549][ T6112] hsr_slave_1: left promiscuous mode [ 508.825643][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.825694][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.866917][ T7910] erofs (device nbd4): cannot find valid erofs superblock [ 509.911910][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.911943][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.220611][ T7917] block nbd2: Attempted send on invalid socket [ 510.220790][ T7917] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 510.225705][ T7917] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 519.609284][ T6112] veth1_macvtap: left promiscuous mode [ 519.609417][ T6112] veth0_macvtap: left promiscuous mode [ 519.609741][ T6112] veth1_vlan: left promiscuous mode [ 519.609966][ T6112] veth0_vlan: left promiscuous mode [ 521.633855][ T7937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.079618][ T7943] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 524.094388][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 524.605740][ T7950] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 526.812891][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 528.059298][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.070936][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.078532][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.093381][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.124196][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.474363][ T5839] Bluetooth: hci2: command tx timeout [ 534.001884][ T6423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.011528][ T6423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.024678][ T6423] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.052653][ T6423] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.056985][ T6423] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 535.792828][ T6423] Bluetooth: hci2: command tx timeout [ 536.202467][ T6423] Bluetooth: hci4: command tx timeout [ 536.310888][ T8003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.925956][ T6423] Bluetooth: hci2: command tx timeout [ 539.206237][ T8011] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 539.209464][ T6423] Bluetooth: hci4: command tx timeout [ 540.918034][ T5839] Bluetooth: hci2: command tx timeout [ 541.260408][ T5839] Bluetooth: hci4: command tx timeout [ 543.322655][ T5839] Bluetooth: hci4: command tx timeout [ 545.869562][ T8040] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 546.281908][ T8047] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 546.544046][ T37] audit: type=1326 audit(1757024040.064:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544089][ T37] audit: type=1326 audit(1757024040.064:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544130][ T37] audit: type=1326 audit(1757024040.064:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544189][ T37] audit: type=1326 audit(1757024040.064:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544249][ T37] audit: type=1326 audit(1757024040.064:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544287][ T37] audit: type=1326 audit(1757024040.064:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544319][ T37] audit: type=1326 audit(1757024040.064:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544350][ T37] audit: type=1326 audit(1757024040.074:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544381][ T37] audit: type=1326 audit(1757024040.074:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.544412][ T37] audit: type=1326 audit(1757024040.074:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd4bfdeebe9 code=0x7ffc0000 [ 546.665116][ T6095] libceph: connect (1)[c::]:6789 error -101 [ 546.675230][ T6095] libceph: mon0 (1)[c::]:6789 connect error [ 546.683745][ T8048] ceph: No mds server is up or the cluster is laggy [ 546.939797][ T10] libceph: connect (1)[c::]:6789 error -101 [ 546.940254][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 548.904267][ T8057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.557807][ T8064] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 549.919265][ T8063] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 553.389386][ T8063] orangefs_mount: mount request failed with -4 [ 555.511427][ T8084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.351390][ T8095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.075326][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 561.945075][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 562.858129][ T8130] binder: 8123:8130 ioctl c018620c 200000000000 returned -22 [ 566.512370][ T8143] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 566.779885][ T8146] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 568.042370][ T8154] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 569.473292][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.473392][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.907788][ T8187] binder: BINDER_SET_CONTEXT_MGR already set [ 574.907806][ T8187] binder: 8183:8187 ioctl 4018620d 200000004a80 returned -16 [ 581.016161][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 582.689774][ T8193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.083899][ T8206] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 586.402150][ T8207] loop2: detected capacity change from 0 to 7 [ 586.858233][ T8207] Dev loop2: unable to read RDB block 7 [ 586.858277][ T8207] loop2: AHDI p2 p3 [ 586.858783][ T8207] loop2: partition table partially beyond EOD, truncated [ 586.859109][ T8207] loop2: p2 size 150995456 extends beyond EOD, truncated [ 587.394665][ T8213] udevd[8213]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 588.811976][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 588.829005][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 588.830537][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 588.896392][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 588.897341][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 588.982332][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 589.142338][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 589.144575][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.144608][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.144651][ T31] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 589.144674][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.164743][ T31] usb 3-1: config 0 descriptor?? [ 591.084018][ T6423] Bluetooth: hci7: command tx timeout [ 591.173913][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 591.174069][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 591.216387][ T31] usb 3-1: USB disconnect, device number 3 [ 593.364022][ T6423] Bluetooth: hci7: command tx timeout [ 594.136449][ T8250] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 594.739445][ T6423] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 594.822794][ T6423] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 594.825927][ T6423] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 594.834433][ T6423] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 594.858844][ T6423] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 595.128869][ T8252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.592197][ T5839] Bluetooth: hci7: command tx timeout [ 597.155282][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.279512][ T5839] Bluetooth: hci8: command tx timeout [ 597.655299][ T5839] Bluetooth: hci7: command tx timeout [ 598.268937][ T8267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.324359][ T5839] Bluetooth: hci8: command tx timeout [ 601.734068][ T5839] Bluetooth: hci8: command tx timeout [ 603.050912][ T8299] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 604.138397][ T5839] Bluetooth: hci8: command tx timeout [ 604.737547][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.737736][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.738131][ T7636] bridge_slave_0: entered allmulticast mode [ 604.748877][ T7636] bridge_slave_0: entered promiscuous mode [ 604.857212][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 610.528968][ T8332] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 610.529019][ T8332] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 610.529065][ T8332] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 610.529065][ T8332] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 610.529111][ T8332] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 610.529151][ T8332] CUSE: DEVNAME unspecified [ 611.080659][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 611.080681][ T37] audit: type=1326 audit(1757024557.261:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.4.484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a1f0ebe9 code=0x0 [ 613.562664][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 613.766364][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 613.824165][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 613.824198][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.824219][ T9] usb 3-1: Product: syz [ 613.824235][ T9] usb 3-1: Manufacturer: syz [ 613.824250][ T9] usb 3-1: SerialNumber: syz [ 615.907458][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 616.373196][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.633020][ T6095] usb 3-1: USB disconnect, device number 4 [ 617.711019][ T6095] usblp0: removed [ 618.897192][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 619.334614][ T8386] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 621.952439][ T8400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.147993][ T8408] netlink: 76 bytes leftover after parsing attributes in process `syz.4.495'. [ 623.371386][ T8248] chnl_net:caif_netlink_parms(): no params data found [ 623.967507][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.968011][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.968262][ T8218] bridge_slave_0: entered allmulticast mode [ 623.971272][ T8218] bridge_slave_0: entered promiscuous mode [ 624.024970][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.025177][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.025430][ T8218] bridge_slave_1: entered allmulticast mode [ 624.028431][ T8218] bridge_slave_1: entered promiscuous mode [ 624.526537][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.526947][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.527234][ T8248] bridge_slave_0: entered allmulticast mode [ 624.555025][ T8248] bridge_slave_0: entered promiscuous mode [ 624.577556][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.606086][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.606259][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.609484][ T8248] bridge_slave_1: entered allmulticast mode [ 624.615455][ T8248] bridge_slave_1: entered promiscuous mode [ 624.621706][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.136745][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.139204][ T8218] team0: Port device team_slave_0 added [ 625.166257][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.177860][ T8218] team0: Port device team_slave_1 added [ 625.794954][ T8248] team0: Port device team_slave_0 added [ 625.797684][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.797700][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.797746][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.857080][ T8248] team0: Port device team_slave_1 added [ 625.858539][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.858554][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.858582][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.188045][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.188063][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.188090][ T8248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.207118][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.207138][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.207172][ T8248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.519257][ T6112] bridge_slave_0: left allmulticast mode [ 626.519295][ T6112] bridge_slave_0: left promiscuous mode [ 626.519591][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.586381][ T6112] bridge_slave_1: left allmulticast mode [ 626.586418][ T6112] bridge_slave_1: left promiscuous mode [ 626.586729][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.663873][ T6112] bridge_slave_0: left allmulticast mode [ 626.663909][ T6112] bridge_slave_0: left promiscuous mode [ 626.664267][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.981514][ T6112] bond0 (unregistering): Released all slaves [ 627.178772][ T6112] bond0 (unregistering): Released all slaves [ 627.389749][ T6112] bond0 (unregistering): Released all slaves [ 627.617793][ T6112] bond0 (unregistering): Released all slaves [ 627.856808][ T6112] bond0 (unregistering): Released all slaves [ 628.083726][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.163166][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.226331][ T6112] bond0 (unregistering): Released all slaves [ 628.464580][ T8218] hsr_slave_0: entered promiscuous mode [ 628.466002][ T8218] hsr_slave_1: entered promiscuous mode [ 628.466954][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 628.466980][ T8218] Cannot create hsr debugfs directory [ 628.936080][ T8248] hsr_slave_0: entered promiscuous mode [ 628.937613][ T8248] hsr_slave_1: entered promiscuous mode [ 628.938623][ T8248] debugfs: 'hsr0' already exists in 'hsr' [ 628.938649][ T8248] Cannot create hsr debugfs directory [ 630.147610][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.147690][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.596272][ T8218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.692543][ T8218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.743589][ T8218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.882633][ T8218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 632.144725][ T8248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 632.239742][ T8248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 632.305007][ T8248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 632.361118][ T8248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 632.571696][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.671256][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.741986][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.742343][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.790908][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.791068][ T6166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.845393][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.963907][ T8248] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.995595][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.996013][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.097778][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.097950][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.764772][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.132010][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.608257][ T8218] veth0_vlan: entered promiscuous mode [ 634.638235][ T8218] veth1_vlan: entered promiscuous mode [ 634.770283][ T8218] veth0_macvtap: entered promiscuous mode [ 634.797881][ T8218] veth1_macvtap: entered promiscuous mode [ 634.825097][ T8248] veth0_vlan: entered promiscuous mode [ 634.865698][ T8248] veth1_vlan: entered promiscuous mode [ 634.871339][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.904074][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.934611][ T1471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.944587][ T1471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.971310][ T1471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.988158][ T1471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.249445][ T8248] veth0_macvtap: entered promiscuous mode [ 635.314713][ T8248] veth1_macvtap: entered promiscuous mode [ 635.383714][ T2241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.383756][ T2241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.471580][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.520289][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.521331][ T2241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.521352][ T2241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.584832][ T6112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.598664][ T6112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.599052][ T6112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.599317][ T6112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.731201][ T8517] /dev/nullb0: Can't open blockdev [ 643.424153][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.424172][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.259769][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.259792][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.703267][ T8540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.903063][ T8546] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 650.094565][ T8569] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 651.264087][ T8578] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 651.264149][ T8578] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 651.264252][ T8578] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 651.264396][ T8578] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 651.264450][ T8578] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 651.264503][ T8578] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 651.264649][ T8578] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 651.264702][ T8578] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 651.264753][ T8578] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 651.388302][ T8578] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 651.388368][ T8578] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 651.388418][ T8578] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 651.388548][ T8578] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 651.388623][ T8578] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 653.658389][ T8580] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 660.000078][ T8593] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 661.728266][ T8602] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 663.289212][ T8614] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 664.117322][ T8618] binder: BINDER_SET_CONTEXT_MGR already set [ 664.117334][ T8618] binder: 8615:8618 ioctl 4018620d 200000004a80 returned -16 [ 667.196676][ T8631] ucma_write: process 34 (syz.5.518) changed security contexts after opening file descriptor, this is not allowed. [ 669.881573][ T8652] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 671.442948][ T8662] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 672.843361][ T37] audit: type=1326 audit(1757024619.401:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.2.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x0 [ 676.630846][ T8684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.046816][ T8691] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 677.655115][ T8693] virtio-fs: tag not found [ 678.379723][ T8684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 678.486729][ T8684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 678.518640][ T8684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 678.519586][ T8684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.857257][ T8698] binder: BINDER_SET_CONTEXT_MGR already set [ 678.857274][ T8698] binder: 8688:8698 ioctl 4018620d 200000004a80 returned -16 [ 680.679325][ T5839] Bluetooth: hci0: command tx timeout [ 680.850699][ T8711] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 684.098807][ T5839] Bluetooth: hci0: command tx timeout [ 686.209890][ T5839] Bluetooth: hci0: command tx timeout [ 688.292112][ T5839] Bluetooth: hci0: command tx timeout [ 691.628297][ T8763] binder: BINDER_SET_CONTEXT_MGR already set [ 691.628315][ T8763] binder: 8758:8763 ioctl 4018620d 200000004a80 returned -16 [ 691.740483][ T5839] Bluetooth: hci8: unexpected cc 0x0809 length: 68 > 4 [ 691.990482][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.990567][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.219575][ T8770] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 692.317891][ T8770] cramfs: wrong magic [ 693.610726][ T8777] (syz.2.546,8777,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 693.610763][ T8777] (syz.2.546,8777,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 694.537987][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.502098][ T8783] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 695.502176][ T8783] CIFS mount error: No usable UNC path provided in device string! [ 695.502176][ T8783] [ 695.502529][ T8783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 698.246645][ T8795] binder: BINDER_SET_CONTEXT_MGR already set [ 698.246692][ T8795] binder: 8791:8795 ioctl 4018620d 200000004a80 returned -16 [ 701.932277][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 702.192710][ T8812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 703.532322][ T8827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.571391][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.185560][ T8835] Bluetooth: MGMT ver 1.23 [ 705.630883][ T8822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.557'. [ 708.026424][ T8684] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 708.026467][ T8684] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 708.716503][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 708.716525][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 709.729873][ T8864] binder: BINDER_SET_CONTEXT_MGR already set [ 709.729917][ T8864] binder: 8857:8864 ioctl 4018620d 200000004a80 returned -16 [ 710.631085][ T37] audit: type=1326 audit(1757024657.201:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631147][ T37] audit: type=1326 audit(1757024657.281:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631196][ T37] audit: type=1326 audit(1757024657.281:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631243][ T37] audit: type=1326 audit(1757024657.281:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631290][ T37] audit: type=1326 audit(1757024657.281:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631337][ T37] audit: type=1326 audit(1757024657.291:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631385][ T37] audit: type=1326 audit(1757024657.291:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631432][ T37] audit: type=1326 audit(1757024657.291:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631478][ T37] audit: type=1326 audit(1757024657.291:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 710.631525][ T37] audit: type=1326 audit(1757024657.301:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8868 comm="syz.4.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5a1f0ebe9 code=0x7ffc0000 [ 712.620854][ T8878] sctp: failed to load transform for md5: -2 [ 712.940240][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.424714][ T8893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.650150][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'. [ 714.682329][ T8684] Bluetooth: hci7: command 0x0406 tx timeout [ 714.879051][ T8676] chnl_net:caif_netlink_parms(): no params data found [ 715.463773][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 719.330781][ T5839] Bluetooth: hci8: command 0x0406 tx timeout [ 720.728051][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.988437][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 724.988457][ T37] audit: type=1326 audit(1757024671.711:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.030772][ T37] audit: type=1326 audit(1757024671.721:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.030829][ T37] audit: type=1326 audit(1757024671.751:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.030876][ T37] audit: type=1326 audit(1757024671.751:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.030922][ T37] audit: type=1326 audit(1757024671.751:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.030967][ T37] audit: type=1326 audit(1757024671.751:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.031012][ T37] audit: type=1326 audit(1757024671.751:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.031057][ T37] audit: type=1326 audit(1757024671.751:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.031601][ T37] audit: type=1326 audit(1757024671.751:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 725.033958][ T37] audit: type=1326 audit(1757024671.751:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8955 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43520ebe9 code=0x7ffc0000 [ 730.286827][ T5922] kernel write not supported for file /786/attr/sockcreate (pid: 5922 comm: kworker/0:4) [ 731.682870][ T8985] binder: BINDER_SET_CONTEXT_MGR already set [ 731.682888][ T8985] binder: 8980:8985 ioctl 4018620d 200000004a80 returned -16 [ 733.489049][ T8684] Bluetooth: hci7: unexpected cc 0x0809 length: 68 > 4 [ 733.489088][ T8684] Bluetooth: hci7: unexpected event for opcode 0x0809 [ 733.828504][ T67] bridge_slave_1: left allmulticast mode [ 733.828543][ T67] bridge_slave_1: left promiscuous mode [ 733.828854][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.422376][ T6283] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 734.579533][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 734.579566][ T6283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 734.579593][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 734.579615][ T6283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 734.644017][ T6283] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 734.644051][ T6283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.644186][ T6283] usb 5-1: Product: syz [ 734.644203][ T6283] usb 5-1: Manufacturer: syz [ 734.644218][ T6283] usb 5-1: SerialNumber: syz [ 734.756328][ T6283] usb 5-1: config 0 descriptor?? [ 734.770753][ T6283] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 734.841941][ T67] bridge_slave_0: left allmulticast mode [ 734.841976][ T67] bridge_slave_0: left promiscuous mode [ 734.862623][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.057514][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 735.104921][ T6283] scsi host1: usb-storage 5-1:0.0 [ 735.176632][ T6283] usb 5-1: USB disconnect, device number 5 [ 735.523196][ T6095] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 735.732761][ T6095] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 735.732795][ T6095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.732818][ T6095] usb 6-1: Product: syz [ 735.732834][ T6095] usb 6-1: Manufacturer: syz [ 735.732849][ T6095] usb 6-1: SerialNumber: syz [ 735.789537][ T6095] usb 6-1: config 0 descriptor?? [ 735.851992][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.856953][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.858908][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.865872][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.873770][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.940859][ T9039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.250989][ T6095] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 736.509632][ T6095] usb 6-1: USB disconnect, device number 2 [ 736.697218][ T9049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.920192][ T9052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.366114][ T5839] Bluetooth: hci2: command tx timeout [ 741.383045][ T5839] Bluetooth: hci8: unexpected cc 0x0809 length: 68 > 4 [ 741.383087][ T5839] Bluetooth: hci8: unexpected event for opcode 0x0809 [ 741.578245][ T9080] random: crng reseeded on system resumption [ 742.577895][ T5839] Bluetooth: hci2: command tx timeout [ 743.409229][ T9085] binder: BINDER_SET_CONTEXT_MGR already set [ 743.409247][ T9085] binder: 9078:9085 ioctl 4018620d 200000000040 returned -16 [ 743.842363][ T8492] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 743.846742][ T9094] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 744.017273][ T8492] usb 7-1: Using ep0 maxpacket: 8 [ 744.029410][ T8492] usb 7-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 744.029441][ T8492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.062614][ T8492] usb 7-1: config 0 descriptor?? [ 744.082739][ T8492] usblcd 7-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 744.289240][ T8492] usb 7-1: USB disconnect, device number 2 [ 744.701276][ T9102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.762421][ T5839] Bluetooth: hci2: command tx timeout [ 745.160173][ T9109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.931549][ T9117] binder: BINDER_SET_CONTEXT_MGR already set [ 746.931566][ T9117] binder: 9113:9117 ioctl 4018620d 200000004a80 returned -16 [ 747.265192][ T5839] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 747.265233][ T5839] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 747.265331][ T5839] Bluetooth: hci2: command tx timeout [ 750.470752][ T8684] Bluetooth: hci7: unexpected event for opcode 0x200f [ 750.940308][ T9141] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 751.450065][ T5839] Bluetooth: hci8: unexpected event for opcode 0x0c24 [ 751.799299][ T8636] Process accounting resumed [ 752.597409][ T9159] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 752.605716][ T9160] binder: BINDER_SET_CONTEXT_MGR already set [ 752.605733][ T9160] binder: 9155:9160 ioctl 4018620d 200000004a80 returned -16 [ 752.956542][ T9158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.012385][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.012469][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.173074][ T6283] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 753.355169][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.355203][ T6283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.355244][ T6283] usb 5-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00 [ 753.355267][ T6283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.398041][ T6283] usb 5-1: config 0 descriptor?? [ 753.492187][ T8636] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 753.650241][ T8636] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.650270][ T8636] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 753.655801][ T6283] usb 5-1: USB disconnect, device number 6 [ 753.693150][ T8636] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 753.693182][ T8636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.693202][ T8636] usb 7-1: Product: syz [ 753.693218][ T8636] usb 7-1: Manufacturer: syz [ 753.693233][ T8636] usb 7-1: SerialNumber: syz [ 753.753135][ T8636] usb 7-1: config 0 descriptor?? [ 753.792978][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.881145][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.929737][ T67] bond0 (unregistering): Released all slaves [ 753.976289][ T5821] usb 7-1: USB disconnect, device number 3 [ 754.610088][ T5839] Bluetooth: hci8: unexpected event for opcode 0x0804 [ 754.710784][ T9176] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 754.728953][ T9177] binder: BINDER_SET_CONTEXT_MGR already set [ 754.728995][ T9177] binder: 9167:9177 ioctl 4018620d 200000004a80 returned -16 [ 755.614017][ T9185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.462274][ T5821] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 756.627237][ T5821] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 756.627266][ T5821] usb 3-1: config 0 has no interface number 0 [ 756.627316][ T5821] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 756.627343][ T5821] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 756.627366][ T5821] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 756.627393][ T5821] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 756.630705][ T5821] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 756.630735][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.630756][ T5821] usb 3-1: Product: syz [ 756.630770][ T5821] usb 3-1: Manufacturer: syz [ 756.630785][ T5821] usb 3-1: SerialNumber: syz [ 756.743895][ T5821] usb 3-1: config 0 descriptor?? [ 756.785702][ T5821] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 756.790265][ T5821] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input9 [ 757.022895][ T5821] usb 3-1: USB disconnect, device number 5 [ 758.612356][ T6058] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 759.235991][ T5821] Process accounting resumed [ 760.855817][ T6058] usb 7-1: Using ep0 maxpacket: 8 [ 760.872496][ T6058] usb 7-1: config 0 has an invalid interface number: 130 but max is 0 [ 760.872529][ T6058] usb 7-1: config 0 has no interface number 0 [ 760.876007][ T6058] usb 7-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 760.876038][ T6058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.876060][ T6058] usb 7-1: Product: syz [ 760.876075][ T6058] usb 7-1: Manufacturer: syz [ 760.876090][ T6058] usb 7-1: SerialNumber: syz [ 760.949365][ T9221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.957958][ T6058] usb 7-1: config 0 descriptor?? [ 761.059847][ T9217] Process accounting resumed [ 761.061525][ T6058] as10x_usb: device has been detected [ 761.062827][ T6058] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 761.233046][ T5839] Bluetooth: hci7: unexpected event for opcode 0x2011 [ 761.233393][ T6058] usb 7-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 761.393088][ T6058] as10x_usb: error during firmware upload part1 [ 761.393903][ T6058] Registered device PCTV Systems picoStick (74e) [ 761.599819][ T6058] usb 7-1: USB disconnect, device number 4 [ 761.820929][ T6058] Unregistered device PCTV Systems picoStick (74e) [ 761.845858][ T6058] as10x_usb: device has been disconnected [ 761.984989][ T5839] Bluetooth: hci8: unexpected event for opcode 0x0403 [ 762.320770][ T9235] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 762.541624][ T9236] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 763.684562][ T5839] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 763.684602][ T5839] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 763.792262][ T8492] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 763.954914][ T8492] usb 7-1: Using ep0 maxpacket: 8 [ 763.960173][ T8492] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.960219][ T8492] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 763.960266][ T8492] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 764.032520][ T8492] usb 7-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 764.032560][ T8492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.032579][ T8492] usb 7-1: Product: syz [ 764.032592][ T8492] usb 7-1: Manufacturer: syz [ 764.032609][ T8492] usb 7-1: SerialNumber: syz [ 764.105102][ T5839] Bluetooth: hci7: Unable to find connection for big 0x00 [ 764.125527][ T67] hsr_slave_0: left promiscuous mode [ 764.136553][ T8492] usb 7-1: config 0 descriptor?? [ 764.230629][ T67] hsr_slave_1: left promiscuous mode [ 764.231667][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.231698][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.296706][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.296741][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.428285][ T6283] usb 7-1: USB disconnect, device number 5 [ 764.699422][ T67] veth1_macvtap: left promiscuous mode [ 764.699555][ T67] veth0_macvtap: left promiscuous mode [ 764.699888][ T67] veth1_vlan: left promiscuous mode [ 764.700109][ T67] veth0_vlan: left promiscuous mode [ 764.822366][ T5922] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 764.871507][ T9267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.045698][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 765.045736][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 765.045763][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 765.045789][ T5922] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 765.048520][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 765.048552][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 765.048572][ T5922] usb 5-1: SerialNumber: syz [ 765.081444][ T9263] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 765.086819][ T9263] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 765.117321][ T5922] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 765.413006][ T5922] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 765.450275][ T5922] usb 5-1: USB disconnect, device number 7 [ 767.069736][ T5821] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 767.150948][ T9284] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 767.272240][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 767.277836][ T5821] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 767.277870][ T5821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 767.277906][ T5821] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 767.277929][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.326532][ T5821] usb 7-1: config 0 descriptor?? [ 767.432328][ T44] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 767.574096][ T5821] usbhid 7-1:0.0: can't add hid device: -71 [ 767.574257][ T5821] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 767.625760][ T44] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 767.625792][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.625812][ T44] usb 5-1: config 0 has no interface number 0 [ 767.630724][ T44] usb 5-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16 [ 767.630756][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.630777][ T44] usb 5-1: Product: syz [ 767.630792][ T44] usb 5-1: Manufacturer: syz [ 767.630807][ T44] usb 5-1: SerialNumber: syz [ 767.646058][ T5839] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 767.646265][ T5839] Bluetooth: hci7: Injecting HCI hardware error event [ 767.648982][ T5839] Bluetooth: hci7: hardware error 0x00 [ 767.726823][ T5821] usb 7-1: USB disconnect, device number 6 [ 767.815119][ T44] usb 5-1: config 0 descriptor?? [ 768.128673][ T44] usb 5-1: USB disconnect, device number 8 [ 768.202252][ T8636] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 768.357143][ T8636] usb 3-1: Using ep0 maxpacket: 32 [ 768.359606][ T8636] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 768.359635][ T8636] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.359725][ T8636] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 768.359753][ T8636] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 768.370433][ T8636] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.370467][ T8636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.370492][ T8636] usb 3-1: Product: syz [ 768.370510][ T8636] usb 3-1: Manufacturer: syz [ 768.370528][ T8636] usb 3-1: SerialNumber: syz [ 768.842808][ T9307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.084888][ T5852] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 769.115734][ T8636] usb 3-1: USB disconnect, device number 6 [ 769.245152][ T5852] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 769.245181][ T5852] usb 5-1: config 0 has no interface number 0 [ 769.245243][ T5852] usb 5-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 769.251759][ T5852] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 769.251791][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.251812][ T5852] usb 5-1: Product: syz [ 769.251827][ T5852] usb 5-1: Manufacturer: syz [ 769.251841][ T5852] usb 5-1: SerialNumber: syz [ 769.486648][ T5852] usb 5-1: config 0 descriptor?? [ 769.514994][ T5852] usb 5-1: Found UVC 0.00 device syz (05ac:8501) [ 769.515041][ T5852] usb 5-1: No valid video chain found. [ 770.122313][ T5839] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 770.492803][ T5821] usb 5-1: USB disconnect, device number 9 [ 770.837653][ T9316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.170025][ T8648] udevd[8648]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.852162][ T8492] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 774.012281][ T8492] usb 6-1: Using ep0 maxpacket: 16 [ 774.014972][ T8492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.015007][ T8492] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.015049][ T8492] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 774.015074][ T8492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.185311][ T8492] usb 6-1: config 0 descriptor?? [ 775.338079][ T9346] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 776.076656][ T8492] usbhid 6-1:0.0: can't add hid device: -71 [ 776.076794][ T8492] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 776.118747][ T8492] usb 6-1: USB disconnect, device number 3 [ 776.492721][ T9363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.235252][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.683'. [ 778.488830][ T9381] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 779.247705][ T67] team0 (unregistering): Port device team_slave_1 removed [ 779.526057][ T5852] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 780.451346][ T5852] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 780.451379][ T5852] usb 6-1: config 0 has no interface number 0 [ 780.451437][ T5852] usb 6-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 780.485815][ T5852] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6 [ 780.485849][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.485880][ T5852] usb 6-1: Product: syz [ 780.485894][ T5852] usb 6-1: Manufacturer: syz [ 780.485910][ T5852] usb 6-1: SerialNumber: syz [ 780.554489][ T5852] usb 6-1: config 0 descriptor?? [ 780.569759][ T9390] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 780.704453][ T67] team0 (unregistering): Port device team_slave_0 removed [ 780.836623][ T5821] usb 6-1: USB disconnect, device number 4 [ 781.131685][ T5839] Bluetooth: hci8: unexpected event for opcode 0x0404 [ 781.599475][ T9407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.908087][ T9440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.339707][ T9445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.224372][ T9451] netlink: 9280 bytes leftover after parsing attributes in process `syz.5.704'. [ 788.333201][ T9449] can: request_module (can-proto-4) failed. [ 788.533011][ T8684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 788.617472][ T8684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 788.622793][ T8684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 788.624156][ T8684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 788.625081][ T8684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 790.192183][ T8492] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 790.386729][ T8492] usb 6-1: Using ep0 maxpacket: 32 [ 790.389833][ T8492] usb 6-1: unable to get BOS descriptor or descriptor too short [ 790.391790][ T8492] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 790.391817][ T8492] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 790.391836][ T8492] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 790.391857][ T8492] usb 6-1: config 7 has no interface number 0 [ 790.391906][ T8492] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 790.391934][ T8492] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 790.391960][ T8492] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 790.392153][ T8492] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 790.392182][ T8492] usb 6-1: config 7 interface 128 has no altsetting 0 [ 790.443661][ T8492] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 790.443694][ T8492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.443714][ T8492] usb 6-1: Product: syz [ 790.443729][ T8492] usb 6-1: Manufacturer: syz [ 790.443744][ T8492] usb 6-1: SerialNumber: syz [ 790.541853][ T9464] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 790.712265][ T8684] Bluetooth: hci0: command tx timeout [ 790.793836][ T8492] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 790.793908][ T8492] usb 6-1: MIDIStreaming interface descriptor not found [ 790.846934][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 790.902500][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 790.909562][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 790.927759][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 790.930340][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 791.114153][ T9435] netlink: 168 bytes leftover after parsing attributes in process `syz.2.699'. [ 791.122966][ T9435] netlink: 31 bytes leftover after parsing attributes in process `syz.2.699'. [ 791.123119][ T9435] netlink: 31 bytes leftover after parsing attributes in process `syz.2.699'. [ 791.235074][ T8492] usb 6-1: USB disconnect, device number 5 [ 792.005324][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.714'. [ 792.659617][ T9006] udevd[9006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.790071][ T8684] Bluetooth: hci0: command tx timeout [ 792.790226][ T6058] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 792.830406][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 792.967706][ T6058] usb 3-1: Using ep0 maxpacket: 16 [ 792.983780][ T6058] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 792.983815][ T6058] usb 3-1: config 0 has no interface number 0 [ 792.983876][ T6058] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 792.983908][ T6058] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 792.983937][ T6058] usb 3-1: config 0 interface 41 has no altsetting 0 [ 792.990467][ T6058] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 792.990499][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.990522][ T6058] usb 3-1: Product: syz [ 792.990547][ T6058] usb 3-1: Manufacturer: syz [ 792.990561][ T6058] usb 3-1: SerialNumber: syz [ 793.046137][ T6058] usb 3-1: config 0 descriptor?? [ 793.047672][ T9487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 793.050846][ T9487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 793.086576][ T8684] Bluetooth: hci4: command tx timeout [ 793.349689][ T6058] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 793.724663][ T6058] usb 3-1: USB disconnect, device number 7 [ 795.124890][ T8684] Bluetooth: hci0: command tx timeout [ 795.178906][ T8684] Bluetooth: hci4: command tx timeout [ 796.916884][ T9532] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 797.549101][ T8684] Bluetooth: hci0: command tx timeout [ 797.549153][ T8684] Bluetooth: hci4: command tx timeout [ 797.608952][ T8492] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 797.682832][ T9454] chnl_net:caif_netlink_parms(): no params data found [ 797.752194][ T8492] usb 7-1: Using ep0 maxpacket: 16 [ 797.754962][ T8492] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.754990][ T8492] usb 7-1: config 0 has no interface number 0 [ 797.787773][ T8492] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 797.787806][ T8492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.787828][ T8492] usb 7-1: Product: syz [ 797.787843][ T8492] usb 7-1: Manufacturer: syz [ 797.787859][ T8492] usb 7-1: SerialNumber: syz [ 797.871544][ T8492] usb 7-1: config 0 descriptor?? [ 797.896092][ T8492] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 797.906043][ T67] IPVS: stop unused estimator thread 0... [ 798.354705][ T9471] chnl_net:caif_netlink_parms(): no params data found [ 798.449113][ T9547] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 798.744668][ T8492] gspca_spca1528: reg_w err -110 [ 798.763328][ T8492] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 798.790399][ T8492] usb 7-1: USB disconnect, device number 7 [ 799.765727][ T5839] Bluetooth: hci4: command tx timeout [ 800.149106][ T9581] random: crng reseeded on system resumption [ 800.385569][ T9578] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 801.080975][ T9594] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 802.035757][ T9598] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 802.035924][ T9598] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 802.251299][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.251449][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.251729][ T9454] bridge_slave_0: entered allmulticast mode [ 802.276831][ T9454] bridge_slave_0: entered promiscuous mode [ 802.932600][ T9608] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 803.806034][ T9612] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 804.911590][ T9616] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 805.232843][ T9625] random: crng reseeded on system resumption [ 805.786808][ T67] bond0 (unregistering): Released all slaves [ 806.177512][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.177671][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.177935][ T9454] bridge_slave_1: entered allmulticast mode [ 806.198442][ T9454] bridge_slave_1: entered promiscuous mode [ 806.210703][ T9471] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.210848][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.211103][ T9471] bridge_slave_0: entered allmulticast mode [ 806.220624][ T9637] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 806.248691][ T9471] bridge_slave_0: entered promiscuous mode [ 806.486587][ T9471] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.486739][ T9471] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.486987][ T9471] bridge_slave_1: entered allmulticast mode [ 806.490125][ T9471] bridge_slave_1: entered promiscuous mode [ 806.892177][ T5852] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 807.018009][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.062138][ T5852] usb 6-1: Using ep0 maxpacket: 32 [ 807.066072][ T5852] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.067689][ T5852] usb 6-1: config 1 has an invalid interface number: 24 but max is 0 [ 807.067715][ T5852] usb 6-1: config 1 has no interface number 0 [ 807.067765][ T5852] usb 6-1: config 1 interface 24 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 608 [ 807.067789][ T5852] usb 6-1: config 1 interface 24 has no altsetting 0 [ 807.078474][ T5852] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=24.72 [ 807.078513][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.078538][ T5852] usb 6-1: Product: syz [ 807.078557][ T5852] usb 6-1: Manufacturer: syz [ 807.078576][ T5852] usb 6-1: SerialNumber: syz [ 807.160011][ T9639] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 807.635867][ T9645] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 808.433701][ T5852] ims_pcu 6-1:1.24: Zero length descriptor [ 808.433771][ T5852] ims_pcu 6-1:1.24: probe with driver ims_pcu failed with error -22 [ 808.498090][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.506631][ T5852] usb 6-1: USB disconnect, device number 6 [ 808.909835][ T9652] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 809.192487][ T9471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.357719][ T9471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.296876][ T9674] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 810.889056][ T9676] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 811.284951][ T9680] binder: BINDER_SET_CONTEXT_MGR already set [ 811.284970][ T9680] binder: 9661:9680 ioctl 4018620d 200000004a80 returned -16 [ 811.938887][ T9454] team0: Port device team_slave_0 added [ 812.136411][ T9454] team0: Port device team_slave_1 added [ 812.155884][ T9471] team0: Port device team_slave_0 added [ 812.587848][ T9684] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 813.724984][ T9471] team0: Port device team_slave_1 added [ 814.158977][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.158997][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.159028][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.449275][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.449368][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.199605][ T9700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.673304][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.673324][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.673355][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.734508][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.734529][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.734559][ T9471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.903096][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.903116][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.903146][ T9471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.975463][ T9722] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 817.093533][ T9726] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 817.763599][ T9454] hsr_slave_0: entered promiscuous mode [ 817.765089][ T9454] hsr_slave_1: entered promiscuous mode [ 819.310671][ T9745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.837466][ T9471] hsr_slave_0: entered promiscuous mode [ 819.849235][ T9471] hsr_slave_1: entered promiscuous mode [ 819.854955][ T9471] debugfs: 'hsr0' already exists in 'hsr' [ 819.854991][ T9471] Cannot create hsr debugfs directory [ 820.241353][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.794'. [ 820.892182][ T9763] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 823.069842][ T9780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.222863][ T9779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.393786][ T5839] Bluetooth: hci8: unexpected event for opcode 0x0c23 [ 824.915819][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.6.806'. [ 825.212799][ T9797] binder: BINDER_SET_CONTEXT_MGR already set [ 825.212816][ T9797] binder: 9782:9797 ioctl 4018620d 200000004a80 returned -16 [ 825.290212][ T9799] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 826.023333][ T5839] Bluetooth: hci8: Malformed LE Event: 0x1d [ 826.116598][ T9454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 826.183141][ T9454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 826.530711][ T9454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 826.571652][ T9808] netlink: 108 bytes leftover after parsing attributes in process `syz.6.808'. [ 826.597920][ T9454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 826.834663][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 826.834684][ T37] audit: type=1326 audit(1757024773.561:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.834736][ T37] audit: type=1326 audit(1757024773.561:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.869932][ T37] audit: type=1326 audit(1757024773.591:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.869994][ T37] audit: type=1326 audit(1757024773.591:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.870045][ T37] audit: type=1326 audit(1757024773.591:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.870093][ T37] audit: type=1326 audit(1757024773.591:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.870151][ T37] audit: type=1326 audit(1757024773.591:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.870200][ T37] audit: type=1326 audit(1757024773.591:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.870249][ T37] audit: type=1326 audit(1757024773.591:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 826.870298][ T37] audit: type=1326 audit(1757024773.591:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.6.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227336ebe9 code=0x7ffc0000 [ 828.295616][ T9471] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 828.423715][ T9471] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 828.509887][ T9471] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 828.788995][ T9471] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 829.348094][ T9837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.230949][ T9850] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 830.933314][ T9851] netlink: 'syz.5.814': attribute type 1 has an invalid length. [ 831.034345][ T9852] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 831.884038][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.070830][ T9454] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.129547][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.132284][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.214893][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.216310][ T8700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.535055][ T9471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.354907][ T9875] binder: BINDER_SET_CONTEXT_MGR already set [ 833.354975][ T9875] binder: 9867:9875 ioctl 4018620d 200000004a80 returned -16 [ 833.956342][ T9877] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 834.070040][ T9471] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.223143][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.223318][ T8700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.264921][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.270198][ T8700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.688700][ T9906] binder: BINDER_SET_CONTEXT_MGR already set [ 835.688718][ T9906] binder: 9881:9906 ioctl 4018620d 200000004a80 returned -16 [ 835.694366][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.6.825'. [ 836.863882][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.304576][ T9454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.877868][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.983952][ T9471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.581001][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.620296][ T9941] binder: BINDER_SET_CONTEXT_MGR already set [ 839.620315][ T9941] binder: 9938:9941 ioctl 4018620d 200000004a80 returned -16 [ 840.055756][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.845722][ T9454] veth0_vlan: entered promiscuous mode [ 841.318440][ T9454] veth1_vlan: entered promiscuous mode [ 841.840880][ T9958] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 842.182972][ T9955] netlink: 'syz.6.835': attribute type 1 has an invalid length. [ 842.182996][ T9955] netlink: 224 bytes leftover after parsing attributes in process `syz.6.835'. [ 842.624503][ T9454] veth0_macvtap: entered promiscuous mode [ 842.843932][ T9454] veth1_macvtap: entered promiscuous mode [ 842.889662][ T57] bridge_slave_1: left allmulticast mode [ 842.889699][ T57] bridge_slave_1: left promiscuous mode [ 842.890966][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.004398][ T57] bridge_slave_0: left allmulticast mode [ 843.004436][ T57] bridge_slave_0: left promiscuous mode [ 843.004745][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.230535][ T9979] binder: BINDER_SET_CONTEXT_MGR already set [ 844.230609][ T9979] binder: 9976:9979 ioctl 4018620d 200000004a80 returned -16 [ 846.260490][ T9993] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 846.569948][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.6.843'. [ 847.006152][T10002] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 847.541395][ T5839] Bluetooth: hci4: link tx timeout [ 847.545761][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 847.599948][ T8684] Bluetooth: hci4: link tx timeout [ 847.599973][ T8684] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 849.499542][T10011] binder: BINDER_SET_CONTEXT_MGR already set [ 849.499559][T10011] binder: 10010:10011 ioctl 4018620d 200000000040 returned -16 [ 849.652561][ T8684] Bluetooth: hci4: command 0x0406 tx timeout [ 849.705384][ T8882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.725018][ T8882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.733517][ T8882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.759683][ T8882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.774335][ T8882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 850.099551][T10020] comedi comedi2: dmm32at: I/O port conflict (0x3,16) [ 851.080719][T10031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.384579][T10032] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 851.892130][ T8882] Bluetooth: hci2: command tx timeout [ 852.040291][ T8684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 852.075750][ T8684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 852.077864][ T8684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 852.079006][ T8684] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 852.079767][ T8684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 852.332277][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.402765][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.449142][ T57] bond0 (unregistering): Released all slaves [ 852.663795][T10002] veth0_vlan: left promiscuous mode [ 852.666936][T10002] veth0_vlan: entered promiscuous mode [ 852.740048][T10002] team0: Device veth0_vlan failed to register rx_handler [ 853.962960][ T8882] Bluetooth: hci2: command tx timeout [ 854.056990][T10045] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 854.202721][ T8882] Bluetooth: hci3: command tx timeout [ 855.622346][T10057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.042108][ T8882] Bluetooth: hci2: command tx timeout [ 856.285183][ T8882] Bluetooth: hci3: command tx timeout [ 856.371616][T10059] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 856.890413][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.863'. [ 857.533379][T10059] team0: Cannot enslave team device to itself [ 858.149775][ T8882] Bluetooth: hci2: command tx timeout [ 858.374230][ T8882] Bluetooth: hci3: command tx timeout [ 860.443822][ T8882] Bluetooth: hci3: command tx timeout [ 861.187015][T10091] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 861.187015][T10091] program syz.6.873 not setting count and/or reply_len properly [ 861.250636][ T57] hsr_slave_0: left promiscuous mode [ 862.233505][ T57] hsr_slave_1: left promiscuous mode [ 862.234512][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.234544][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.367566][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.367601][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.415349][T10097] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 863.538000][ T57] veth1_macvtap: left promiscuous mode [ 863.538135][ T57] veth0_macvtap: left promiscuous mode [ 863.538444][ T57] veth1_vlan: left promiscuous mode [ 863.538669][ T57] veth0_vlan: left promiscuous mode [ 869.694775][ T57] team0 (unregistering): Port device team_slave_1 removed [ 869.993003][ T57] team0 (unregistering): Port device team_slave_0 removed [ 873.383342][T10132] netlink: 'syz.2.888': attribute type 2 has an invalid length. [ 875.902650][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.902734][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.029427][T10153] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 878.818258][T10033] chnl_net:caif_netlink_parms(): no params data found [ 879.252302][ T5852] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 879.431572][ T5852] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 879.431607][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.431629][ T5852] usb 3-1: Product: syz [ 879.431707][ T5852] usb 3-1: Manufacturer: syz [ 879.431724][ T5852] usb 3-1: SerialNumber: syz [ 879.468243][T10017] chnl_net:caif_netlink_parms(): no params data found [ 879.572556][ T44] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 879.733837][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 879.739827][ T44] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 879.739886][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.739910][ T44] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.739935][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.739957][ T44] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 879.739982][ T44] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 879.811627][ T44] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.811659][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 879.811680][ T44] usb 6-1: SerialNumber: syz [ 879.935515][ T5852] rtl8150 3-1:1.0: couldn't reset the device [ 879.935937][ T5852] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 879.969092][ T44] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 879.969351][ T44] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 880.015522][ T5852] usb 3-1: USB disconnect, device number 8 [ 880.161020][ T5922] usb 6-1: USB disconnect, device number 7 [ 880.633184][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.633332][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.633602][T10033] bridge_slave_0: entered allmulticast mode [ 880.689085][T10033] bridge_slave_0: entered promiscuous mode [ 880.744220][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.744447][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.744730][T10033] bridge_slave_1: entered allmulticast mode [ 880.747751][T10033] bridge_slave_1: entered promiscuous mode [ 880.782147][ T5852] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 880.948078][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.948115][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.948156][ T5852] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.948180][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.028702][ T5852] usb 3-1: config 0 descriptor?? [ 881.102194][ T5922] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 881.257460][ T5922] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 881.257491][ T5922] usb 7-1: config 0 has no interface number 0 [ 881.257543][ T5922] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 881.257568][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.267551][ T5922] usb 7-1: config 0 descriptor?? [ 881.309836][ T5922] usb 7-1: selecting invalid altsetting 1 [ 881.310060][ T5922] dvb_ttusb_budget: ttusb_init_controller: error [ 881.310076][ T5922] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 881.595895][ T5852] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 881.699006][ T5852] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input10 [ 881.785331][ T5922] DVB: Unable to find symbol cx22700_attach() [ 881.889352][ T5922] DVB: Unable to find symbol tda10046_attach() [ 881.889369][ T5922] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 881.903634][ T5922] usb 7-1: USB disconnect, device number 8 [ 882.004269][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.080680][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.080847][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.081115][T10017] bridge_slave_0: entered allmulticast mode [ 882.140257][T10017] bridge_slave_0: entered promiscuous mode [ 882.196605][ T5852] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 882.229455][ T5852] usb 3-1: USB disconnect, device number 9 [ 882.499333][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.519851][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.520011][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.520290][T10017] bridge_slave_1: entered allmulticast mode [ 882.888353][T10017] bridge_slave_1: entered promiscuous mode [ 883.039144][T10227] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 883.208567][T10223] fido_id[10223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 883.954161][T10225] netlink: 'syz.5.912': attribute type 4 has an invalid length. [ 884.579981][T10237] binder: BINDER_SET_CONTEXT_MGR already set [ 884.579999][T10237] binder: 10232:10237 ioctl 4018620d 200000004a80 returned -16 [ 885.077636][T10033] team0: Port device team_slave_0 added [ 885.078186][T10235] warning: `syz.5.914' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 885.131358][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.760666][T10246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.274851][T10033] team0: Port device team_slave_1 added [ 886.298277][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.439077][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.920'. [ 886.852303][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 887.542744][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.542781][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.542807][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.542855][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.542880][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.619676][ T44] usb 6-1: config 0 descriptor?? [ 888.416684][ T44] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 888.417486][ T44] plantronics 0003:047F:FFFF.0002: parse failed [ 888.417587][ T44] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 888.549601][T10262] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 888.641112][ T5821] usb 6-1: USB disconnect, device number 8 [ 888.819534][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.819553][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.819582][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.884696][T10017] team0: Port device team_slave_0 added [ 888.896452][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.896475][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.896513][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.969573][T10017] team0: Port device team_slave_1 added [ 890.025503][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.025522][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.025553][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.062250][ T6095] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 890.083747][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.083767][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.083802][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.213251][ T6095] usb 6-1: Using ep0 maxpacket: 8 [ 890.219627][ T6095] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 890.219659][ T6095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.219681][ T6095] usb 6-1: Product: syz [ 890.219697][ T6095] usb 6-1: Manufacturer: syz [ 890.219713][ T6095] usb 6-1: SerialNumber: syz [ 890.285813][ T6095] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 890.286768][ T6095] dvb-usb: bulk message failed: -22 (2/0) [ 890.333105][ T6095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 890.336752][ T6095] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 890.336841][ T6095] usb 6-1: media controller created [ 890.507544][T10269] dvb-usb: bulk message failed: -22 (3/0) [ 890.529134][ T6095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 890.744376][ T6095] usb 6-1: selecting invalid altsetting 1 [ 890.744399][ T6095] cxusb: set interface failed [ 890.744413][ T6095] dvb-usb: bulk message failed: -22 (1/0) [ 890.744438][ T6095] dvb-usb: bulk message failed: -22 (3/0) [ 890.744456][ T6095] usb 6-1: bluebird_gpio_write failed. [ 890.762225][ T6095] dvb-usb: bulk message failed: -22 (3/0) [ 890.762255][ T6095] usb 6-1: bluebird_gpio_write failed. [ 890.843621][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.928'. [ 890.919749][ T6095] DVB: Unable to find symbol dib7000p_attach() [ 890.919781][ T6095] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 890.930780][T10033] hsr_slave_0: entered promiscuous mode [ 890.954777][T10033] hsr_slave_1: entered promiscuous mode [ 890.955784][T10033] debugfs: 'hsr0' already exists in 'hsr' [ 890.955824][T10033] Cannot create hsr debugfs directory [ 891.182398][ T6095] rc_core: IR keymap rc-dvico-mce not found [ 891.182422][ T6095] Registered IR keymap rc-empty [ 891.186214][ T6095] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 891.189822][ T6095] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input11 [ 891.303280][ T6095] dvb-usb: schedule remote query interval to 100 msecs. [ 891.303307][ T6095] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 891.442337][ T6095] usb 6-1: USB disconnect, device number 9 [ 891.692173][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 891.833450][T10284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.863892][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 891.867061][ T44] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 891.867088][ T44] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 891.867123][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 891.867145][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.591572][ T5821] usb 3-1: USB disconnect, device number 10 [ 892.705992][ T6095] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 893.014047][T10017] hsr_slave_0: entered promiscuous mode [ 893.038905][T10017] hsr_slave_1: entered promiscuous mode [ 893.039949][T10017] debugfs: 'hsr0' already exists in 'hsr' [ 893.039976][T10017] Cannot create hsr debugfs directory [ 895.012138][ T5821] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 895.197006][ T5821] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 895.197038][ T5821] usb 6-1: config 0 has no interface number 0 [ 895.197094][ T5821] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 895.197119][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.271603][ T5821] usb 6-1: config 0 descriptor?? [ 895.297019][ T5821] usb 6-1: selecting invalid altsetting 1 [ 895.297209][ T5821] dvb_ttusb_budget: ttusb_init_controller: error [ 895.297225][ T5821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 895.874304][T10329] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 896.778092][T10325] netlink: 204 bytes leftover after parsing attributes in process `syz.2.941'. [ 896.797575][ T5821] DVB: Unable to find symbol cx22700_attach() [ 897.167880][ T5821] DVB: Unable to find symbol tda10046_attach() [ 897.167900][ T5821] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 897.207211][ T5821] usb 6-1: USB disconnect, device number 10 [ 897.616871][T10341] binder: BINDER_SET_CONTEXT_MGR already set [ 897.616888][T10341] binder: 10334:10341 ioctl 4018620d 200000004a80 returned -16 [ 897.657039][T10342] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 898.472421][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 898.642399][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 898.663482][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 898.663515][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.565407][ T44] usb 3-1: config 0 descriptor?? [ 899.667157][T10351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.797420][ T5821] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 899.962548][ T5821] usb 7-1: Using ep0 maxpacket: 32 [ 899.978869][ T5821] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 899.978898][ T5821] usb 7-1: config 0 has no interface number 0 [ 899.978963][ T5821] usb 7-1: config 0 interface 12 has no altsetting 0 [ 900.005448][ T5821] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 900.005481][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.005513][ T5821] usb 7-1: Product: syz [ 900.005541][ T5821] usb 7-1: Manufacturer: syz [ 900.005556][ T5821] usb 7-1: SerialNumber: syz [ 900.081216][ T5821] usb 7-1: config 0 descriptor?? [ 900.256199][ T44] magicmouse 0003:05AC:0269.0003: reserved main item tag 0xd [ 900.256246][ T44] magicmouse 0003:05AC:0269.0003: item fetching failed at offset 4/5 [ 900.257166][ T44] magicmouse 0003:05AC:0269.0003: magicmouse hid parse failed [ 900.257277][ T44] magicmouse 0003:05AC:0269.0003: probe with driver magicmouse failed with error -22 [ 900.296946][ T44] usb 3-1: USB disconnect, device number 11 [ 901.631156][ T5821] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 901.631225][ T5821] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 901.631244][ T5821] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 901.631347][ T5821] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 901.699446][ T5821] usb 7-1: USB disconnect, device number 9 [ 902.172249][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 902.374599][T10366] comedi comedi0: Minor 7 could not be opened [ 902.380039][ T5922] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 902.380074][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.380096][ T5922] usb 3-1: Product: syz [ 902.380112][ T5922] usb 3-1: Manufacturer: syz [ 902.380127][ T5922] usb 3-1: SerialNumber: syz [ 902.464484][ T5922] usb 3-1: config 0 descriptor?? [ 902.481894][ T5922] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 903.082305][ T5922] gspca_sunplus: reg_r err -71 [ 903.082415][ T5922] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 903.102845][ T5922] usb 3-1: USB disconnect, device number 12 [ 913.385088][ T6283] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 931.581968][ C0] sched: DL replenish lagged too much [ 957.416131][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.426671][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.939759][ T8882] Bluetooth: hci2: command 0x0406 tx timeout [ 979.056860][ T8882] Bluetooth: hci3: command 0x0406 tx timeout [ 1002.030960][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.041462][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.836728][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.846180][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.702129][ T38] INFO: task syz-executor:10017 blocked for more than 144 seconds. [ 1063.702164][ T38] Not tainted syzkaller #0 [ 1063.702176][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1063.702190][ T38] task:syz-executor state:D stack:21032 pid:10017 tgid:10017 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1063.702258][ T38] Call Trace: [ 1063.702267][ T38] [ 1063.702284][ T38] __schedule+0x16f3/0x4c20 [ 1063.702334][ T38] ? __lock_acquire+0xab9/0xd20 [ 1063.702379][ T38] ? __pfx___schedule+0x10/0x10 [ 1063.702435][ T38] rt_mutex_schedule+0x77/0xf0 [ 1063.702459][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1063.702498][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1063.702527][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1063.702554][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1063.702579][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1063.702601][ T38] ? __lock_acquire+0xab9/0xd20 [ 1063.702643][ T38] ? del_device_store+0xd1/0x360 [ 1063.702672][ T38] ? __pfx_sscanf+0x10/0x10 [ 1063.702702][ T38] ? del_device_store+0xd1/0x360 [ 1063.702721][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1063.702750][ T38] del_device_store+0xd1/0x360 [ 1063.702771][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1063.702807][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1063.702828][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1063.702861][ T38] ? sysfs_kf_write+0x166/0x260 [ 1063.702897][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1063.702928][ T38] kernfs_fop_write_iter+0x379/0x4f0 [ 1063.702967][ T38] vfs_write+0x5d2/0xb40 [ 1063.703002][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1063.703033][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1063.703072][ T38] ? do_sys_openat2+0x154/0x1c0 [ 1063.703093][ T38] ? kmem_cache_free+0x195/0x510 [ 1063.703142][ T38] ksys_write+0x14b/0x260 [ 1063.703174][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1063.703199][ T38] ? rcu_is_watching+0x15/0xb0 [ 1063.703240][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1063.703276][ T38] do_syscall_64+0xfa/0x3b0 [ 1063.703309][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.703331][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1063.703354][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1063.703382][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.703410][ T38] RIP: 0033:0x7f821c5ad69f [ 1063.703434][ T38] RSP: 002b:00007ffe602087a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1063.703457][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f821c5ad69f [ 1063.703473][ T38] RDX: 0000000000000001 RSI: 00007ffe602087f0 RDI: 0000000000000005 [ 1063.703488][ T38] RBP: 00007f821c6330c1 R08: 0000000000000000 R09: 00007ffe602085f7 [ 1063.703504][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1063.703517][ T38] R13: 00007ffe602087f0 R14: 00007f821d314620 R15: 0000000000000003 [ 1063.703553][ T38] [ 1063.703562][ T38] INFO: task syz-executor:10033 blocked for more than 144 seconds. [ 1063.703578][ T38] Not tainted syzkaller #0 [ 1063.703589][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1063.703599][ T38] task:syz-executor state:D stack:22200 pid:10033 tgid:10033 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1063.703657][ T38] Call Trace: [ 1063.703664][ T38] [ 1063.703678][ T38] __schedule+0x16f3/0x4c20 [ 1063.703720][ T38] ? __lock_acquire+0xab9/0xd20 [ 1063.703763][ T38] ? __pfx___schedule+0x10/0x10 [ 1063.703819][ T38] rt_mutex_schedule+0x77/0xf0 [ 1063.703841][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1063.703880][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1063.703910][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1063.703936][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1063.703962][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1063.703984][ T38] ? __lock_acquire+0xab9/0xd20 [ 1063.704026][ T38] ? device_del+0xa9/0x8e0 [ 1063.704068][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 1063.704103][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 1063.704137][ T38] ? device_del+0xa9/0x8e0 [ 1063.704166][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1063.704196][ T38] device_del+0xa9/0x8e0 [ 1063.704228][ T38] ? ida_free+0x295/0x2f0 [ 1063.704258][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1063.704288][ T38] ? __pfx_ida_free+0x10/0x10 [ 1063.704317][ T38] ? __pfx_device_del+0x10/0x10 [ 1063.704362][ T38] device_unregister+0x20/0xc0 [ 1063.704395][ T38] del_device_store+0x2aa/0x360 [ 1063.704421][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1063.704442][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1063.704475][ T38] ? sysfs_kf_write+0x166/0x260 [ 1063.704512][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1063.704540][ T38] kernfs_fop_write_iter+0x379/0x4f0 [ 1063.704578][ T38] vfs_write+0x5d2/0xb40 [ 1063.704612][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1063.704643][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1063.704674][ T38] ? do_sys_openat2+0x154/0x1c0 [ 1063.704695][ T38] ? kmem_cache_free+0x195/0x510 [ 1063.704743][ T38] ksys_write+0x14b/0x260 [ 1063.704774][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1063.704808][ T38] ? do_syscall_64+0xbe/0x3b0 [ 1063.704844][ T38] do_syscall_64+0xfa/0x3b0 [ 1063.704873][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1063.704902][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.704924][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1063.704952][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.704974][ T38] RIP: 0033:0x7f08b30cd69f [ 1063.704992][ T38] RSP: 002b:00007ffde30e3590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1063.705014][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f08b30cd69f [ 1063.705030][ T38] RDX: 0000000000000001 RSI: 00007ffde30e35e0 RDI: 0000000000000005 [ 1063.705044][ T38] RBP: 00007f08b31530c1 R08: 0000000000000000 R09: 00007ffde30e33e7 [ 1063.705068][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1063.705081][ T38] R13: 00007ffde30e35e0 R14: 00007f08b3e34620 R15: 0000000000000003 [ 1063.705116][ T38] [ 1063.705147][ T38] [ 1063.705147][ T38] Showing all locks held in the system: [ 1063.705156][ T38] 2 locks held by kthreadd/2: [ 1063.705169][ T38] #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.705225][ T38] #1: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 1063.705279][ T38] 4 locks held by kworker/0:0/9: [ 1063.705291][ T38] #0: ffff8880599c9d38 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.705354][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.705432][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.705489][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.705545][ T38] 4 locks held by kworker/0:1/10: [ 1063.705558][ T38] #0: ffff88805b9bf138 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.705619][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.705696][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.705751][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.705807][ T38] 4 locks held by kworker/u8:0/12: [ 1063.705820][ T38] #0: ffff888031b98138 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.705882][ T38] #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.705940][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.705995][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.706059][ T38] 4 locks held by kworker/u8:1/13: [ 1063.706072][ T38] #0: ffff88805994c938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.706129][ T38] #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.706187][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.706242][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.706298][ T38] 2 locks held by ksoftirqd/0/15: [ 1063.706312][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.706367][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.706424][ T38] 2 locks held by rcuc/0/20: [ 1063.706436][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.706491][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.706548][ T38] 2 locks held by ktimers/1/29: [ 1063.706560][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.706615][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.706677][ T38] 2 locks held by ksoftirqd/1/30: [ 1063.706691][ T38] 1 lock held by khungtaskd/38: [ 1063.706703][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1063.706755][ T38] 4 locks held by kworker/1:1/44: [ 1063.706766][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.706825][ T38] #1: ffffc90000b57bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.706882][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.706937][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.706995][ T38] 6 locks held by kworker/u8:3/57: [ 1063.707007][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.707069][ T38] #1: ffffc9000123fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.707126][ T38] #2: ffffffff8ecc5a20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1063.707183][ T38] #3: ffff88803a81e0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1063.707245][ T38] #4: ffff888032cd3300 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1063.707309][ T38] #5: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 1063.707378][ T38] 7 locks held by kworker/u8:7/1305: [ 1063.707391][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.707449][ T38] #1: ffffc900052cfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.707507][ T38] #2: ffff88803a7eb300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1063.707567][ T38] #3: ffff88805b645920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1063.707626][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1063.707676][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.707732][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.707788][ T38] 7 locks held by kworker/u8:8/1362: [ 1063.707801][ T38] 8 locks held by kworker/u8:9/1471: [ 1063.707814][ T38] 4 locks held by kworker/1:2/2009: [ 1063.707828][ T38] 5 locks held by kworker/u8:10/2241: [ 1063.707840][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.707897][ T38] #1: ffffc90006427bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.707954][ T38] #2: ffff88805c900898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1063.708034][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.708097][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.708160][ T38] 10 locks held by kworker/u8:11/2724: [ 1063.708181][ T38] 2 locks held by udevd/5206: [ 1063.708194][ T38] 2 locks held by getty/5593: [ 1063.708206][ T38] #0: ffff88823bf8e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1063.708266][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1063.708322][ T38] 2 locks held by syz-executor/5825: [ 1063.708335][ T38] 4 locks held by kworker/u9:2/5839: [ 1063.708347][ T38] #0: ffff888036b48138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.708404][ T38] #1: ffffc9000499fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.708461][ T38] #2: ffff88803959ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1063.708511][ T38] #3: ffff88803959c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1063.708567][ T38] 2 locks held by kworker/1:3/5852: [ 1063.708580][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.708637][ T38] #1: ffffc90004b0fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.708694][ T38] 4 locks held by kworker/R-wg-cr/5880: [ 1063.708707][ T38] #0: ffff8880599ca138 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.708763][ T38] #1: ffffc90004c6fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.708821][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.708876][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.708933][ T38] 5 locks held by kworker/1:4/5915: [ 1063.708946][ T38] #0: ffff88805b9bf138 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.709008][ T38] #1: ffffc90004e4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.709093][ T38] #2: ffff88802340c388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 1063.709147][ T38] #3: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.709198][ T38] #4: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0 [ 1063.709248][ T38] 4 locks held by kworker/0:4/5922: [ 1063.709260][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.709317][ T38] #1: ffffc90004ebfbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.709374][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.709430][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.709487][ T38] 5 locks held by kworker/u8:13/5994: [ 1063.709500][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.709556][ T38] #1: ffffc9000526fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.709612][ T38] #2: ffff888056230898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1063.709669][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.709724][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.709781][ T38] 2 locks held by kworker/u8:14/6009: [ 1063.709793][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.709850][ T38] #1: ffffc9000529fbc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.709906][ T38] 4 locks held by kworker/1:6/6058: [ 1063.709918][ T38] #0: ffff888034898d38 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.709981][ T38] #1: ffffc900053efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.710073][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.710128][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.710185][ T38] 5 locks held by kworker/0:7/6095: [ 1063.710197][ T38] #0: ffff88805acc4138 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.710258][ T38] #1: ffffc900046e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.710335][ T38] #2: ffff88805fe18e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 1063.710388][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.710443][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.710499][ T38] 7 locks held by kworker/u8:16/6166: [ 1063.710512][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.710568][ T38] #1: ffffc90003f77bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.710627][ T38] #2: ffff88806d8ad300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1063.710692][ T38] #3: ffff888036683d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1063.710751][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1063.710802][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.710856][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.710913][ T38] 7 locks held by kworker/u8:17/6271: [ 1063.710925][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.710982][ T38] #1: ffffc9000532fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.711041][ T38] #2: ffff888021b11300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1063.711112][ T38] #3: ffff88805c6fd120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1063.711171][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1063.711221][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.711274][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.711332][ T38] 5 locks held by kworker/u8:19/6286: [ 1063.711344][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.711401][ T38] #1: ffffc90003fb7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.711457][ T38] #2: ffff888028a50898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1063.711513][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.711568][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.711626][ T38] 5 locks held by kworker/0:9/6390: [ 1063.711639][ T38] #0: ffff88805c592138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.711701][ T38] #1: ffffc9000545fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.711778][ T38] #2: ffff88802340d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 1063.711831][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.711966][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.712024][ T38] 5 locks held by kworker/u8:21/6800: [ 1063.712038][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.712103][ T38] #1: ffffc9000503fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.712159][ T38] #2: ffff8880516a0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1063.712216][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.712271][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.712329][ T38] 1 lock held by syz.2.263/7234: [ 1063.712343][ T38] 4 locks held by syz-executor/8248: [ 1063.712356][ T38] #0: ffff888059f58e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1063.712410][ T38] #1: ffff888059f580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1063.712466][ T38] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1063.712529][ T38] #3: ffff888037cc1358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1063.712595][ T38] 4 locks held by kworker/R-wg-cr/8419: [ 1063.712609][ T38] #0: ffff88803da5d538 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.712670][ T38] #1: ffffc90004adfba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.712749][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.712805][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.712862][ T38] 4 locks held by kworker/R-wg-cr/8420: [ 1063.712874][ T38] #0: ffff88805dfcb938 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.712937][ T38] #1: ffffc90004d9fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.712995][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.713057][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.713116][ T38] 2 locks held by napi/wg2-0/8459: [ 1063.713128][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.713182][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.713240][ T38] 4 locks held by kworker/0:2/8492: [ 1063.713253][ T38] #0: ffff888059b12138 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.713310][ T38] #1: ffffc9000410fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.713367][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.713423][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.713480][ T38] 4 locks held by kworker/0:5/8512: [ 1063.713492][ T38] #0: ffff888034898d38 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.713554][ T38] #1: ffffc90004177bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.713632][ T38] #2: ffff88805367d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 1063.713686][ T38] #3: ffff888021f1d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 1063.713739][ T38] 3 locks held by kworker/0:6/8514: [ 1063.713751][ T38] #0: ffff88805bbb2d38 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.713812][ T38] #1: ffffc900040ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.713891][ T38] #2: ffff88802340f880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 1063.713944][ T38] 5 locks held by kworker/0:8/8636: [ 1063.713957][ T38] #0: ffff8880599a7538 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.714019][ T38] #1: ffffc90003c77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.714104][ T38] #2: ffff888035e555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 1063.714158][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.714212][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.714269][ T38] 4 locks held by kworker/u9:0/8684: [ 1063.714281][ T38] #0: ffff888030d99938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.714337][ T38] #1: ffffc90003ca7bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.714395][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.714450][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.714507][ T38] 5 locks held by kworker/u8:2/8700: [ 1063.714520][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.714576][ T38] #1: ffffc9000509fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.714633][ T38] #2: ffff88805c970898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 1063.714688][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.714744][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.714801][ T38] 1 lock held by syz.5.616/9131: [ 1063.714813][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1063.714874][ T38] 4 locks held by syz-executor/10017: [ 1063.714886][ T38] #0: ffff888034562488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1063.714946][ T38] #1: ffff88805c648078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 1063.715005][ T38] #2: ffff888144feac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 1063.715075][ T38] #3: ffffffff8e542278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1063.715126][ T38] 5 locks held by syz-executor/10033: [ 1063.715138][ T38] #0: ffff888034562488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1063.715196][ T38] #1: ffff88802789b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 1063.715251][ T38] #2: ffff888144feac38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 1063.715313][ T38] #3: ffffffff8e542278 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1063.715363][ T38] #4: ffff88803a81e0d8 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x8e0 [ 1063.715426][ T38] 6 locks held by kworker/u8:20/10393: [ 1063.715439][ T38] #0: ffff88803db6f138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.715502][ T38] #1: ffffc90004067bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.715560][ T38] #2: ffff88805367d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1063.715613][ T38] #3: ffff888021f1e350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1063.715665][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.715720][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.715776][ T38] 7 locks held by kworker/u8:22/10394: [ 1063.715788][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.715845][ T38] #1: ffffc90003ad7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.715904][ T38] #2: ffff88805b91c300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1063.715968][ T38] #3: ffff88805a3a3520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1063.716027][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1063.716085][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.716141][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.716197][ T38] 6 locks held by kworker/u8:23/10395: [ 1063.716210][ T38] #0: ffff88803db6f138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.716272][ T38] #1: ffffc900015dfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.716331][ T38] #2: ffff88805367d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 1063.716383][ T38] #3: ffff888021f1d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 1063.716435][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.716490][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.716547][ T38] 2 locks held by kworker/u8:24/10396: [ 1063.716559][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.716617][ T38] #1: ffffc90003fa7bc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.716681][ T38] 4 locks held by kworker/0:10/10398: [ 1063.716694][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.716750][ T38] #1: ffffc90003b87bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.716808][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.716863][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.716921][ T38] 2 locks held by syz-executor/10404: [ 1063.716934][ T38] #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.716987][ T38] #1: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 1063.717039][ T38] 4 locks held by kworker/1:10/10406: [ 1063.717058][ T38] #0: ffff888059b11d38 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.717120][ T38] #1: ffffc90003d57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.717197][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.717252][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.717308][ T38] 5 locks held by kworker/u8:25/10407: [ 1063.717320][ T38] #0: ffff888030eda138 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.717376][ T38] #1: ffffc90004637bc0 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.717434][ T38] #2: ffff88803d014050 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1063.717489][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.717544][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.717601][ T38] 2 locks held by syz-executor/10409: [ 1063.717614][ T38] #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.717666][ T38] #1: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 1063.717718][ T38] 2 locks held by syz-executor/10411: [ 1063.717731][ T38] #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.717783][ T38] #1: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 1063.717836][ T38] 7 locks held by kworker/u8:27/10415: [ 1063.717848][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.717905][ T38] #1: ffffc900051ffbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.717964][ T38] #2: ffff888038821300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 1063.718029][ T38] #3: ffff88805acab920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 1063.718096][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1063.718147][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.718201][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.718258][ T38] 5 locks held by kworker/u8:28/10416: [ 1063.718271][ T38] 4 locks held by kworker/0:12/10418: [ 1063.718284][ T38] #0: ffff88805c407d38 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1063.718348][ T38] #1: ffffc90000a6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1063.718425][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1063.718481][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1063.718538][ T38] 4 locks held by syz-executor/10419: [ 1063.718551][ T38] #0: ffff888058ae56c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x19f/0x3d0 [ 1063.718601][ T38] #1: ffff8880360caf50 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x80 [ 1063.718655][ T38] #2: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.718708][ T38] #3: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 1063.718759][ T38] 2 locks held by dhcpcd-run-hook/10420: [ 1063.718772][ T38] #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1063.718825][ T38] #1: ffff88801dad9858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0 [ 1063.718875][ T38] [ 1063.718881][ T38] ============================================= [ 1063.718881][ T38] [ 1063.718905][ T38] NMI backtrace for cpu 1 [ 1063.718930][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1063.718954][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1063.718967][ T38] Call Trace: [ 1063.718975][ T38] [ 1063.718986][ T38] dump_stack_lvl+0x189/0x250 [ 1063.719022][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1063.719061][ T38] ? __pfx__printk+0x10/0x10 [ 1063.719101][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1063.719130][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1063.719158][ T38] ? __pfx__printk+0x10/0x10 [ 1063.719187][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1063.719235][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1063.719263][ T38] watchdog+0xf93/0xfe0 [ 1063.719297][ T38] ? watchdog+0x1de/0xfe0 [ 1063.719332][ T38] kthread+0x70e/0x8a0 [ 1063.719368][ T38] ? __pfx_watchdog+0x10/0x10 [ 1063.719395][ T38] ? __pfx_kthread+0x10/0x10 [ 1063.719434][ T38] ? __pfx_kthread+0x10/0x10 [ 1063.719468][ T38] ret_from_fork+0x3f9/0x770 [ 1063.719500][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.719535][ T38] ? __switch_to_asm+0x39/0x70 [ 1063.719555][ T38] ? __switch_to_asm+0x33/0x70 [ 1063.719574][ T38] ? __pfx_kthread+0x10/0x10 [ 1063.719609][ T38] ret_from_fork_asm+0x1a/0x30 [ 1063.719648][ T38] [ 1063.719655][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1063.719685][ C0] NMI backtrace for cpu 0 [ 1063.719700][ C0] CPU: 0 UID: 0 PID: 1471 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1063.719721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1063.719735][ C0] Workqueue: bat_events batadv_tt_purge [ 1063.719759][ C0] RIP: 0010:__dev_queue_xmit+0x7e4/0x3b70 [ 1063.719779][ C0] Code: 83 e3 20 75 37 e8 4c df de f8 48 8b 7c 24 08 e8 22 e3 ff ff 4d 85 ff 0f 85 bb 00 00 00 e8 34 df de f8 4c 89 e7 48 8b 74 24 08 <48> 8b 54 24 78 e8 b2 f4 ff ff 49 89 c7 e9 a1 00 00 00 4d 89 fd 48 [ 1063.719796][ C0] RSP: 0018:ffffc9000575e4e0 EFLAGS: 00000246 [ 1063.719811][ C0] RAX: ffffffff88df7fdc RBX: 0000000000000000 RCX: ffff8880277a1dc0 [ 1063.719824][ C0] RDX: 0000000000000100 RSI: ffff88806a990500 RDI: ffff888032926000 [ 1063.719837][ C0] RBP: ffffc9000575e7f0 R08: 0000000000000000 R09: 0000000000000100 [ 1063.719849][ C0] R10: 0aaaaaaaaaaa0000 R11: dd860aaaaaaaaaaa R12: ffff888032926000 [ 1063.719863][ C0] R13: ffff88806a990581 R14: ffff88806a990584 R15: 0000000000000000 [ 1063.719877][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 1063.719892][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1063.719905][ C0] CR2: 00007fffe494b168 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 1063.719921][ C0] Call Trace: [ 1063.719927][ C0] [ 1063.719940][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 1063.719957][ C0] ? synproxy_pernet+0x23/0x240 [ 1063.719985][ C0] ? synproxy_pernet+0x23/0x240 [ 1063.720008][ C0] ? synproxy_pernet+0x23/0x240 [ 1063.720030][ C0] ? synproxy_pernet+0x23/0x240 [ 1063.720054][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1063.720071][ C0] ? __asan_memset+0x22/0x50 [ 1063.720089][ C0] ? ipv6_synproxy_hook+0x297/0xda0 [ 1063.720121][ C0] ? __lock_acquire+0xab9/0xd20 [ 1063.720152][ C0] ? synproxy_send_tcp_ipv6+0x4c1/0x680 [ 1063.720181][ C0] ? ip6_finish_output2+0x1079/0x1720 [ 1063.720205][ C0] ? ip6_finish_output2+0x710/0x1720 [ 1063.720225][ C0] ip6_finish_output2+0x122a/0x1720 [ 1063.720250][ C0] ? ip6_finish_output2+0x710/0x1720 [ 1063.720275][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1063.720296][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1063.720323][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 1063.720343][ C0] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 1063.720372][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 1063.720397][ C0] ? rcu_is_watching+0x15/0xb0 [ 1063.720432][ C0] ? __build_skb_around+0x257/0x3e0 [ 1063.720458][ C0] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 1063.720484][ C0] ? skb_put+0x11b/0x210 [ 1063.720509][ C0] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 1063.720543][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 1063.720570][ C0] ? nft_sock_get_eval_cgroupv2+0x84/0x270 [ 1063.720598][ C0] ? synproxy_pernet+0x45/0x270 [ 1063.720618][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 1063.720638][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1063.720656][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1063.720687][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 1063.720719][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1063.720748][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1063.720773][ C0] nft_do_chain+0x40c/0x1920 [ 1063.720809][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1063.720836][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 1063.720862][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 1063.720893][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 1063.720913][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 1063.720936][ C0] nft_do_chain_inet+0x25d/0x340 [ 1063.720964][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1063.720999][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1063.721020][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1063.721048][ C0] nf_hook_slow+0xc2/0x220 [ 1063.721075][ C0] NF_HOOK+0x206/0x3a0 [ 1063.721097][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1063.721118][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1063.721138][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1063.721160][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1063.721189][ C0] ip6_input+0x16a/0x270 [ 1063.721209][ C0] ? ip6_input+0x23/0x270 [ 1063.721232][ C0] NF_HOOK+0x309/0x3a0 [ 1063.721252][ C0] ? skb_orphan+0xaf/0xd0 [ 1063.721273][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1063.721293][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1063.721319][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1063.721341][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1063.721369][ C0] __netif_receive_skb+0xd3/0x380 [ 1063.721389][ C0] ? rt_spin_unlock+0x65/0x80 [ 1063.721410][ C0] ? process_backlog+0x27b/0x900 [ 1063.721431][ C0] process_backlog+0x31e/0x900 [ 1063.721459][ C0] __napi_poll+0xb3/0x540 [ 1063.721482][ C0] net_rx_action+0x707/0xe00 [ 1063.721514][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1063.721538][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1063.721567][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1063.721594][ C0] handle_softirqs+0x22f/0x710 [ 1063.721622][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1063.721651][ C0] __local_bh_enable_ip+0x179/0x270 [ 1063.721674][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1063.721696][ C0] ? rt_spin_lock+0x1bb/0x2c0 [ 1063.721714][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1063.721738][ C0] ? rt_spin_unlock+0x65/0x80 [ 1063.721759][ C0] ? batadv_tt_purge+0x97/0xa10 [ 1063.721780][ C0] batadv_tt_purge+0x475/0xa10 [ 1063.721805][ C0] ? batadv_tt_purge+0x97/0xa10 [ 1063.721827][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1063.721851][ C0] process_scheduled_works+0xade/0x17b0 [ 1063.721895][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1063.721930][ C0] worker_thread+0x8a0/0xda0 [ 1063.721955][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1063.721985][ C0] ? __kthread_parkme+0x7b/0x200 [ 1063.722015][ C0] kthread+0x70e/0x8a0 [ 1063.722044][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1063.722067][ C0] ? __pfx_kthread+0x10/0x10 [ 1063.722097][ C0] ? __pfx_kthread+0x10/0x10 [ 1063.722125][ C0] ret_from_fork+0x3f9/0x770 [ 1063.722149][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.722176][ C0] ? __switch_to_asm+0x39/0x70 [ 1063.722192][ C0] ? __switch_to_asm+0x33/0x70 [ 1063.722208][ C0] ? __pfx_kthread+0x10/0x10 [ 1063.722236][ C0] ret_from_fork_asm+0x1a/0x30 [ 1063.722262][ C0] [ 1063.742470][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1063.742498][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1063.742527][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1063.742542][ T38] Call Trace: [ 1063.742551][ T38] [ 1063.742561][ T38] dump_stack_lvl+0x99/0x250 [ 1063.742601][ T38] ? __asan_memcpy+0x40/0x70 [ 1063.742627][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1063.742661][ T38] ? __pfx__printk+0x10/0x10 [ 1063.742701][ T38] vpanic+0x281/0x750 [ 1063.742739][ T38] ? __pfx_vpanic+0x10/0x10 [ 1063.742769][ T38] ? irqentry_exit+0x74/0x90 [ 1063.742801][ T38] ? preempt_schedule+0xae/0xc0 [ 1063.742832][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1063.742869][ T38] panic+0xb9/0xc0 [ 1063.742901][ T38] ? __pfx_panic+0x10/0x10 [ 1063.742937][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1063.742972][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1063.743002][ T38] watchdog+0xfd2/0xfe0 [ 1063.743038][ T38] ? watchdog+0x1de/0xfe0 [ 1063.743085][ T38] kthread+0x70e/0x8a0 [ 1063.743124][ T38] ? __pfx_watchdog+0x10/0x10 [ 1063.743152][ T38] ? __pfx_kthread+0x10/0x10 [ 1063.743193][ T38] ? __pfx_kthread+0x10/0x10 [ 1063.743228][ T38] ret_from_fork+0x3f9/0x770 [ 1063.743263][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.743299][ T38] ? __switch_to_asm+0x39/0x70 [ 1063.743322][ T38] ? __switch_to_asm+0x33/0x70 [ 1063.743343][ T38] ? __pfx_kthread+0x10/0x10 [ 1063.743378][ T38] ret_from_fork_asm+0x1a/0x30 [ 1063.743420][ T38] [ 1063.743882][ T38] Kernel Offset: disabled