last executing test programs: 14.765721288s ago: executing program 3 (id=3506): open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x4000000e) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002700)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x8700, 0x0}, &(0x7f0000002680)="a0cea1791a1a", 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x6) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r5, r6, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) r8 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f042}) readv(r8, &(0x7f0000002240)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) 14.580101318s ago: executing program 3 (id=3509): capget(&(0x7f0000002f00)={0x20071026}, 0x0) 14.357640483s ago: executing program 3 (id=3511): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x109000) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000040)={0x10000, 0x0, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x5, r1}) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @private2, 0x2}, 0x1c) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000140)={0x200, 0x1, 0x7fff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x2}, 0x1c) io_setup(0xfffffffe, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) io_getevents(r4, 0x7, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f00000002c0)={r5, r6+60000000}) r7 = socket$inet6(0xa, 0x6, 0x5) clock_settime(0x6, &(0x7f0000000300)={0x77359400}) r8 = fsopen(&(0x7f0000000340)='esdfs\x00', 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000780)={0x10000, 0x300, 0x3c0, &(0x7f0000000380)=[0x9, 0x5, 0x1, 0x5, 0xffffffff, 0x80000001, 0xd9c5, 0x4, 0x5e, 0x0, 0x3, 0x7, 0x7, 0x7fffffffffffffff, 0x6, 0x7f, 0x5, 0x8a72, 0x4, 0x9e9, 0x200, 0xff, 0x1c0, 0x3, 0x24, 0x4, 0x6, 0x2, 0xd61, 0x5, 0xed12, 0x40, 0x465, 0x4, 0xae1, 0x8000000000000000, 0xb, 0x2, 0x1de, 0x1, 0x4, 0xfffffffeffffffff, 0x5, 0x3, 0x6, 0x8563, 0x9, 0x6, 0x80, 0x6, 0x40, 0xfff, 0x3, 0x7, 0x7, 0x2, 0x3, 0x7fffffff, 0x2, 0x0, 0x9, 0x8, 0x8, 0x6, 0xc20c, 0xd, 0xcea9, 0x65, 0x134, 0x40, 0x5, 0x4, 0x200, 0x9, 0x4, 0x8, 0x4, 0xc, 0x9, 0x8, 0x1, 0xffffffff00000000, 0xfff, 0x0, 0x1, 0x1ff, 0x7, 0x229, 0x0, 0x5b60, 0x3, 0x0, 0x1, 0x9, 0x9, 0x3, 0x1, 0x6, 0x5, 0x6, 0x1, 0x1ff, 0x7, 0x2, 0x5, 0x6, 0x8, 0x0, 0x3, 0x9, 0x5f, 0xdd03, 0x2, 0xfffffffffffffffc, 0x3, 0x8, 0xfffffffffffffffa, 0x9, 0x0, 0x5, 0x800, 0x8, 0x1, 0x8, 0xa, 0x2, 0x5, 0x3]}) sendmmsg$inet(r9, &(0x7f0000001c40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000800)="9d0339b388c2b8c81af0a44cab28849bb5579b8ec735ec96c4d55b1135d061b1600c0b0fe7c343437f2140e311561c6a5cfbe96d506d791a5cf33aa4d02efda2", 0x40}, {&(0x7f0000000840)="5c576e22a374c8c4ae982ab05630c1204f7aece696f0e634eed4a4aa6d7dc9dda4e3adf8332cab0a28fb60625481e65329a347d88bdc2ffcd130ff8eb3b14d71e78df16e00d8fca6cd3b354864c210e6668c53347df3fc890a7960ed25e541f243c3cdbfb3f92629a8b8065d1fabd695cc36fecb80a4e6cb3bbbd8ea1de6e81335542876025366e7963c799edad5fdf884336bfff47096950414852b9ba1b47d75b7b29832862d7719cc2db11b5a37f15e224d1ae0804be0b4549e878111190f86d6578c63b9697a8cb826d5b28405c82e7d8db8", 0xd4}, {&(0x7f0000000940)="702614268e67af5bd9d5c58b818a1c824ba49512cdbb707c961dd01a0a2e29e617bc77feed4ac3d3c445d9bb9add48babd2a74b2ed", 0x35}, {&(0x7f0000000980)="95ba8534c26b0e3a575da9d24ab5c0f8c4d7c2c178122a02d27718721263ec979c86a582c635f7b09d6d49a6fa8ceea5bb8fc137f8ad525476d02417c290143e572cc84a15ecbf1a69b7dee6bdb65a4d9c76d333a8736e756512addbf1615cb7eaa4d706836b1ac9787613f3d8c338547bae337788a1528419f51a191d8449fd559247a10f984d64e2da10624b6117c102404851ad8403fd8f2c275b3bf3884b9afd02c8f98950b13c1f1f0ada0ccdea698b236423dae49f37e2747b52bb803d518d29e76eb6a4b16e0141049dc684add88dff", 0xd3}, {&(0x7f0000000a80)="4e55d2a4adcdd5d9bfcaa144df7cc3dfc59b5c7b932a", 0x16}, {&(0x7f0000000ac0)="72e4173e6f1db4dd458960f61c558ce45f8417990b803ee7db444b661bf38b5cf9871d7d3dfcdc5cb28702862e6d000d5b878b0dae573de8851407487a24726ff8a68349e9c545563793afc466105787d7120cfc3a5255a08df846ff22bacacfe99aaf9beaee8ab484c902e28e3dee787b9d1762baca985aa36439b757486f2b395bcd51d03aaf1625f173d7764759a98b7d1ef60c0364d04f554af5a8cdced2bbe5e383b5a1e895f3311e0f59c60d71fd278e947dcea181", 0xb8}, {&(0x7f0000000b80)="8d148121347a8e5dcb", 0x9}, {&(0x7f0000000bc0)="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", 0xffc}], 0x8, &(0x7f0000001c00)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xd9}}], 0x10}}], 0x1, 0x20000014) r10 = syz_clone(0x30000000, &(0x7f0000001c80)="c9b9a1142488237db5a07771a8c4b11e2eb51b67ae5efc85918ba6a054f6c56620e3a51f6c9acdf95f699df4d3502cd66d41d3d96328c1ae22bd9d0592912120b50a4594252b1de06ee5d37c387368df66bff792af292476a533ce0b1a49c6195cfeecb90b9b7539524eede0db3eaf569670b97f25ffe1f027f836b0d45497266ef0d403b4ed56995637209c3bb661976b3356e80f4b8c7a3c042cb45f6c3f0de46e829480a540a76d66e21286d34a4adf0382b4bc105c6121ddbaf1fca8f32c549a67e84fd44d0d", 0xc8, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)="50d4d3e2aac135d863405932b1407e36a88687259b885b90bbc580307867236ee8b69bfa4b00eda85e549287967dc8cfdb54ff0852bb60933fa999bd13ddbb6d1d9bd5c28f09c374542039bcb96a1b8bcf68e71c79f055f1caa493b312166b8769f87235b008c799c0949794adaa7dc5657de842d0d7a0bdb6fe0bc659032f9d2a3e336b8ad574ac00ddf6383d309279c3e53fb3b0134cd1b195c0ced35947cd2088c64531b68b1c30d4866877a2b4bca5f06e277e2a19c278eba18372bb6e8adf97c729cdb26b475a78615bfbe804945179502c4fa16307bebbbbf72eb1e466264f") clock_gettime(0x0, &(0x7f0000001f00)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000001f40)={{r11, r12+10000000}, {0x77359400}}, &(0x7f0000001f80)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000001fc0)={@my=0x0}) r13 = geteuid() read$FUSE(r8, &(0x7f00000023c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000004400)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) r16 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) sendmsg$unix(r2, &(0x7f00000044c0)={&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002080)="d2c38adce7abbb9cf9dbf1998007ba6ca127b2b242acc5ca74eaf72d8d559ac330eadfab328fe6ad6fbd17cff8f5f3b8b27ffff712a2cde83cb15605a99516ebcf9354af0b67442c29ac179af2e7c45b5462d64dc9cd05bb97c7433a4d27a6f308ec0d9efafcd07e9296afaed8572ae213f5cf17c1abce36264c7473ae3e9386a9a9ea512226e92a33f0056b7605e87b5eb0fa578d4184260e5e21774e00acff4cd16f62d897653be7462f772077fd30e01023e1518c2b3461", 0xb9}, {&(0x7f0000002140)="cb2d2d3fac2e5d8854ac2f1d9d3eff4145130b865eb87e261baa0969df1613706bc1b7b50c0edd294cb1662eeef5cf71ef81d96c9e6752d99240", 0x3a}, {&(0x7f0000002180)="cd1630c1bf3da54d5e6af34d24dae04268ae38dce577d898d5453e98f7071cbed795e29629fbe6c13b8f9b0116fad36119ca5010de2a6da5daac158396cf3fdf21fe9605a07c7bdd4e085b88ce684e18b5197a74924bb2e61b9441", 0x5b}, {&(0x7f0000002200)="d6b3c029e06acd3bc363a61e37e008769e79aaa4fea86ac37cb597f6d1124e1d093b4c01ca3aa8bf12fe8de525088c4f62ea3862e0fb173606bc59b2b1eae2ba81bee19b8331db82d1be2e889b15433f90ed67615115793edf6bd6a7e40ed8745b732476c2f1e35d3ce4902370b30321ec0334480d08ebb6f485dee4e8a48481b68514e1b4fdea037aaedce397e99396aaed51d282fb4a587edfdac04971a62ac78aeaddd40540fb2a99ed09b5e050fc2ff58a7efa97e70f6c151ca8", 0xbc}, {&(0x7f00000022c0)="70caf2a3d383940dadbf9d3fcbef6612af24f97f6e020125c719f0e7d252ab96aeb78136cd95c8e5115f69965da1fd07b4", 0x31}, {&(0x7f0000002300)="8351939d096c633c1a88f5c1a36a193e0b2ba6024b1e7570f77bed1306b6b2a459aae8243addea165960e4a6d2eb8971d83254422ef36694422860f9fb8dc7531bf9c02d607292fe85f8c8d6748c13413e0b7512030699", 0x57}], 0x6, &(0x7f0000004440)=[@cred={{0x18, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x30, 0x1, 0x1, [r9, r15, r3, r16, r8, r8, r8, r9, r8]}}, @rights={{0x20, 0x1, 0x1, [r8, r7, r3, r2, r7]}}], 0x68, 0x8090}, 0x4008804) 11.288982818s ago: executing program 1 (id=3522): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x200000}) syz_io_uring_setup(0x5a6, &(0x7f0000000300)={0x0, 0xfffffffd}, &(0x7f00000001c0), &(0x7f0000000180)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000240)='6', 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 10.820071017s ago: executing program 4 (id=3523): socket$packet(0x11, 0x3, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x801, 0x0) r2 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x280}, 0x1}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8.113924618s ago: executing program 1 (id=3528): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x48) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='4', 0x1, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000008000300000000", @ANYBLOB="040046001c0051801800008011000100a7fd4531296b6353d1f3e088470000000a00340002020202020200000800260094090000"], 0x50}}, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0xf4, 0x54485746, 0x0, @stepwise}) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r7 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r0, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x7c6, 0x12) 7.843902745s ago: executing program 1 (id=3530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c0002800800024000000a00080003400000000d08000140800000010900010073797a300000"], 0xc8}}, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile64(r0, r1, &(0x7f0000000040)=0xfffffffffffffe01, 0x1) mmap(&(0x7f00006fb000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 7.657738853s ago: executing program 1 (id=3531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x7, 0xac, "45df3e"}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x104) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000140)=0xe1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r7 = getpid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r9 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x2012, r9, 0x0) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa07, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) r11 = syz_pidfd_open(r7, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r11], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "46f9"}}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='batadv0\x00'}) setns(r11, 0x24020000) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000180)={'ip_vti0\x00', {0x2, 0x0, @multicast1}}) syz_clone(0x120e4000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.148223234s ago: executing program 4 (id=3532): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x1f, 0x0, 0x5c) 7.062500696s ago: executing program 4 (id=3533): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x282000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) 6.970479398s ago: executing program 4 (id=3534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000140009050000000040000000020100ff", @ANYRES32=r2, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1e000114000300766c616e300000000000000000000000080004007f00000108000200e000"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000051126081d3e4cd682092d7fa9c19620000000a20000000000a01030000b2fbef4a000001000000090001005d797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000005c00000006ac050400000000000000000100000008000b4000000000096284038ffa5d00010073797a3000000000340004802000018007000100727400001400028008000140000000150800024000000003100001800c000100636f756e746572"], 0xd0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000001c00), &(0x7f0000001c40)=0x8) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) syz_usb_connect(0x2, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x10, 0xf8, 0x7}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x42f}}, {0xda, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"]}, {0x7c, &(0x7f0000000080)=ANY=[@ANYBLOB="7c033811bc12d18883b1fb8b67956c91724a914f88005e319f651b8cb5ab74a79152125c7fbbc53ab3dcdd2fcf8758137ae2a4753ce428319680f90c41fa15cc385d289b971e3aa6b1b24de8f9be776339cdc473614f91d82a729700693f027a5d2ba1cfdee20a8e4b5a72a22fc99f21b3f33c15cf6c0d7a626756f5"]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x412}}, {0xe8, &(0x7f0000000180)=@string={0xe8, 0x3, "c3fa25d304f0d54ad0dbb93e4cdbf7b4b41396c5f4007516a7ace3288f9ec20929785d17e4b7b9fff184fbab23b2b92103cb7d8f6c70f5466bd86b3749f9560e6c9ed30fa75bd7e75fb7e75de4cbd4c1afabc8282e5c104c2f3d77aaeb732387f22a57f6c39ae9086569be3af12aa97469c72cb5c95c01f339f8ff2d61fa08cb123af901ff5dd0c3d70df00253049c6a846b5716ebb255824e523184cc3faf7ab695e11ae33c93f47b4a5392b8ae8c3a9f9efa374e3cb187f2eb93b95ac9d65bcce66329edbb71ae4539f981cc59e8d51db509c0492fcda02043b7de7498656736209e3f75e2"}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000019c0)={&(0x7f0000001980)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001a00)={0x1, 0x4, 0x1, 0x2000, &(0x7f0000002000/0x2000)=nil}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r7, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00"], 0x70}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = getgid() syz_mount_image$fuse(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x40, &(0x7f00000007c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@allow_other}, {@allow_other}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_user}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f00000008c0)="7edbc4971ec66d5b402a1580b00422bf3abf5624e65adf2bc5598f22e6f91029d5919032fae6d2bccb9ecc9943d2f3b97af435312bcad05898eeb603c5eef501a28490332ac5c2dd81fb518f61b05399fe31011c77e54fb4889e87916245bec0f82eb9560f477804519f59610a344c424f87d94e15e32e8bc35238310b6800d0") r11 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f00000002c0)={'syz1\x00', {0xd30, 0x6, 0x400, 0x3}, 0x44, [0xfffffffe, 0xf, 0x558, 0xff, 0xfffff801, 0x6, 0xf, 0x8, 0xfffffff3, 0x0, 0xf0, 0x8, 0x3, 0x8, 0x4, 0x10, 0xb, 0x7, 0x1, 0x2, 0x3, 0x7453, 0x400, 0x4, 0x5, 0x80000001, 0x800, 0xffffff0b, 0x0, 0x6, 0x3, 0x8, 0x800, 0x10000, 0x4, 0x2, 0x10000, 0x1, 0xfffffffa, 0x0, 0x10001, 0xb44, 0x7fff, 0x8, 0x5, 0x8, 0x2, 0x5, 0x7, 0x4, 0xfffffffc, 0x3d, 0x739, 0x1ff, 0x0, 0x7f, 0xfffffffe, 0x8001, 0x2, 0xc, 0x5, 0x2, 0x2, 0x400], [0x8, 0xfff, 0x0, 0x6, 0x5, 0xc, 0x78b, 0x2, 0x2, 0xb, 0x80000001, 0x10001, 0x1, 0x9, 0x7, 0x7, 0xfffffffa, 0x6, 0x0, 0xfffffffc, 0xfff, 0x2, 0x5a5a, 0x5, 0x8, 0x0, 0xe, 0x3, 0xffffffff, 0x200, 0x9, 0xfffffff8, 0x3ff, 0x1, 0xf, 0xfe7, 0x6, 0x0, 0x1000, 0xd, 0x8, 0x2, 0x80000001, 0x7ff, 0x9, 0x1ff, 0xa3, 0x7, 0x1, 0x0, 0x6, 0x3, 0x77a0, 0x7, 0x0, 0x57, 0x7, 0xb22, 0x2, 0xb632, 0x1, 0x3, 0xcc, 0xef], [0x1da, 0x1, 0xd660, 0xaabe, 0x5, 0x10001, 0x6, 0x40, 0xd197, 0x8, 0xffffff80, 0x7, 0x3, 0x6, 0xffffacd9, 0xfffffffd, 0x6e1b, 0x10000, 0x400, 0x1, 0x6, 0x7cf, 0x548e, 0x2, 0xd23, 0x3, 0x4, 0x9, 0x0, 0x8, 0x0, 0x8, 0x1, 0x400, 0x7, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x3, 0x1ff, 0x3, 0x3, 0x81, 0xfffffffc, 0x5, 0xfffffde1, 0xffffaa0c, 0xfffffff8, 0x4, 0x28f, 0x7, 0xfffffff8, 0x95, 0xffffffbb, 0x8, 0x5, 0x1, 0xb352, 0x100], [0x2, 0xb, 0x6, 0x0, 0x1, 0x1, 0x3, 0x4, 0x8, 0xf45, 0x1, 0x3, 0x1, 0x1, 0x4, 0x3, 0x7, 0x2, 0x2, 0x9, 0x13, 0x5f2, 0x9, 0xfffffffb, 0xfffffffd, 0x0, 0x5, 0xdf9, 0x1, 0xc000000, 0x81, 0x5, 0x1, 0x3ff, 0x3ff, 0x8001, 0x36, 0x4, 0x2, 0x10, 0x10, 0x0, 0xffffff06, 0x2, 0x80000001, 0x7fffffff, 0x0, 0xc4, 0x1, 0x7, 0x8, 0x3, 0x7, 0x8, 0xfffffffb, 0x0, 0x9, 0x7f, 0x1, 0x9, 0x0, 0x2, 0x3, 0x80]}, 0x45c) write$FUSE_INIT(r8, &(0x7f0000001b40)={0x50, 0x0, 0x0, {0x7, 0x28, 0x6, 0x200000, 0x2, 0x0, 0x6, 0xeef4e70}}, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577000000000100000020757365723a73797a20303030303030303030303030303030303430393300"], 0x2a, 0x0) r12 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) keyctl$read(0xb, r12, &(0x7f0000000240)=""/112, 0x349b7f55) bind$inet6(r8, &(0x7f0000001bc0)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) 6.395638216s ago: executing program 0 (id=3537): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305720, 0x0) syz_io_uring_setup(0x5a6, &(0x7f0000000300)={0x0, 0xfffffffd}, &(0x7f00000001c0), &(0x7f0000000180)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000240)='6', 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4.892909006s ago: executing program 4 (id=3542): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = dup(r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x40ec, &(0x7f0000001040)={0x0, 0xb50f, 0x400, 0x0, 0x38b, 0x0, r3}, &(0x7f00000010c0), &(0x7f0000001100)) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f0000001ec0)='f'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 4.579332552s ago: executing program 2 (id=3543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)={0x38, r5, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x8, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x4}]}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {0xa}, {0x1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x400a0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) getsockname(r7, 0x0, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3b0, 0x0, 0xe4, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, 0xff000000, 0xff000000, 0xc, 0xf, {@mac=@remote, {[0x0, 0x0, 0x3cf5fa2eb65c3f7b, 0x0, 0xff]}}, {}, 0x80, 0x5, 0xe, 0xd, 0xd, 0x80, 'macvlan0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x20}, 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xf000, 0x1}}}, {{@arp={@rand_addr=0x64010101, @broadcast, 0xff, 0xffffffff, 0x3, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7f, 0x3, 0xb, 0x3a, 0x1, 0x400, 'team_slave_1\x00', 'lo\x00', {}, {}, 0x0, 0x1c4}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@local, @loopback, 0xffffffff, 0xff, 0xb, 0xf, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x7, 0x4, 0x5, 0x5, 0x2, 'rose0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @mac=@multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x1cd) sendmsg$nl_route(r6, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, 0x0, 0x0) connect$unix(r10, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x48000000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x2000, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 4.265012641s ago: executing program 1 (id=3544): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="208588e01455bc18", @ANYBLOB="588c90aadaedde6a2e64f465b00fbdb8b6449c2f317140214a9be29c9e467325a38e1b43cddd210783f3dc083935e3b9dbfc09a3e0"], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x100000000, 0x0, 0xff}, 0x3}, 0x20, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="800200009287e90da3ef5d6ce82b957d8feaa5bd0f17858b01b6d9bd08cfb0ed31440771a16c383b32e9d5307be1eeb8e0293733c76e37d600be1b4756da479a8bba7e364da786f7bda386a71b6964b917525985bccd6420586afa4570914e3dccb26c07f45d7003357a04bedaa5c5acd2441942bd", @ANYRES16=0x0, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x40804}, 0x40011) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="ffffff7f000000000000000000000000000000001d991b4fce8c908ea50200000000000000f4173c89d528ffffffffa4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r4, &(0x7f00000004c0)="9ced049995f4b1bbec9f591968bc21c6a3e4da9921f65ae933d49394db5ad35f5a7fcdfa41bce83ea964d83e749f0161cc84b7a084607f53a59749f5d82286b84451d15eae60421beaf6c862a6ec0d40b33ae6637116e1c65d282249a303ff180d920cb7223e7e19bf4b96ce785f77a9aceec3140814ede29b16bd803bb26916588fdec0d929b604536380"}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44010000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000002400030000000000000000000000000000000000020000000000000000000000000000000800050000000000060006000000000008000100", @ANYRES32=r12, @ANYBLOB="f4000880f0"], 0x144}}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r14, 0x84, 0x80, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000000), 0x4) sendto$packet(r13, &(0x7f00000000c0)="3f050e007028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_fuse_handle_req(r6, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26}}, 0x50) write$FUSE_IOCTL(r5, &(0x7f0000000400)={0x20, 0x0, r7, {0x197, 0x4, 0x863}}, 0x20) 3.512478231s ago: executing program 2 (id=3545): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000300)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000380)="62b933e6f793788d4313077bc531dc5862c0b1ebf2ba2f485427", 0x1a}, {&(0x7f00000003c0)="efe3d930fd10d00fd083de5788f3e79184581853bae2a41d08acbb2375821df23630bfd581a46bb4d8259667a8c3db3618323e646c1ad73be14ca313eddc89", 0x3f}, {0x0}, {0x0}], 0x4, &(0x7f000001bac0)=ANY=[@ANYBLOB="0c0000001001000009000000cc0f00003a000000030000000184aeb4c56160933bf2c2a0299960ccd5e2a45c79392c0b943f3f1810d27363d27dbcb6b67f52630648c09b14994c73016951b30f414c3565e1196e7a4960564d15efee75adaea34daa3f95653c9b9cd66363a8b967c32903837ee6f6ac7129f13a7013b2572b4cc5cdb09f9f210952dcdbe8b259d43aeb6a54a98831cac6795757334eb25381eec3d0a243b4f8050fda887be73252b813e1261d8bdabcca046868da391f73dd4e98ef9b7f04d12afad823eb4599cd8044d1493baed6aa4ad27efe52838ae3c21fecd93607743a3e3beecf40124432090d79df8681fcd645272caa5b25e8ff6e90a6d0b74bdeef853c72c4fd6a455e805d09b20f535d2b92d1a923fd73ce17cd19887ee4221d8e2e75d3ee4d0e995dfddcee37a8e2239b04ad86d0cec7f0b57c43285f845166b90d70be2075df66e8f7b3b2a68fe73cb5e54c66200ef2dd07f562734bb70a3b3f38e1ca3fb3114f6240a4ab8631931c129df02ae0a2a5db295c4a8bb85d54bce2cf34ef24ee63a3f912ccb6355fa5741172dd8397c22324fd031d54d88f141efb6e76ee3f2d868d2e5c07ad2379e72f7bc088db5caf60188a846452b953a9b63d63065ae4f8812f57d2df9f952351c24a75d8b67cbae9b516601acd918aca83d4ef2c459a2572db90e12a8167943d42d238b07c2b12b3075ec196a41c8a893a20bfa2ca90226b83e17b171476079803f5db5e31045bd882af8f50d5ce35906999c196edb6b8d9781e3c0ff6368ac0b121a60fd8265d4358e1d0f9ff41d32250c708fbd33d8d141de0831969f293737a7aef9d1e1b1712f2fbb2fd7626aef3110c05a3af54b66344fcca8584b5d30880aeb03a6579f47872b0f67c976e275a2c7cdf73d3ce3d1bde0835f189cad06e262f45a2b2abdaa4e2f65c191476d1733fc1857446d44ad164713269ff6d47095e7e52bb8cdd2da2333cd1aab2edb9df24cb1897ec3f0568c8dcb488e7d1a04a5528675441cbf8abd95ba497ac4f34c273cc9d52b39f2e14bef002cb6e7719bb944a4d478478e8d8c65c7ea4fa23aa493547e21239f7134505c071a2bcc2a765450525270aa5ca41df60301307aff60b692ef0b4811c4af5a603f4619a117d0b3ab46c40943f3942bc3b3e28e82d3efffaef5c95df1839a27662ee49d985c2cff896ef34a62f6375138c712ae9213d7263ffb761611c865c707258bcaf85790b1ea4deafc6acc8857b1216520368d8f197af238328b3878dd66f8ce5b43f514bf631296643a1952dd15b4b5e500d1c372834a004c2278a418ddaa90ec0a35e0d29240deb9455c727d859d3a6b4b7778248965f1cfb3fee7c0573e17d30e380d5f2c2bb42778ee4e19225263f4045255c2c255c56782f2f9ca4eb285acd0bf5a9d4e6a920ea76c35311c10e56a3fe8c38b702c03b86b2fe750622632cc8740bdac5f6d0bd6fe8582cd08924c45c0f6b5ea3a80b800c0327f999b13fd0a92a01b856df06a7303c06000c071dc2f225db01df2ae1b1dabab115d39e65bf8f7d6a81d232a0d9c1f1cb410037f89266640ffdf0b838bac5c89be6578fa386a1f0b941673f5ee866bdf5080c00c32e8ae516e3a5e03acb657f8641a3b7210c898d288a123ebffbaa86f7e06ea6698b278762a213fe2cfda4d0b5b20e5574b550e48197b117d1bf20d9397c3d40d720346f966f1a2ec7bc404bb80c24a3df575c88bff831f9d0c596efb8612dfcf078eb583eac52d1358f10b4aac3e9c716af0a11b34c8c72c70e0152d4129200053cd19e7f356a5a5bf0f5344727c4442a0dc3ea08eab609be4d18b35432b2d8cd1519825330a5dd8ebcfd7551210884110b95fd59c1860afc4c4c04af00553d49ec20dded7584f332ba465e50c4f00ed28c390be06f4b2d71662ac292787152425fe33ac6a0c8b445d9d0d437d00172dab4550dca540216df435f8f097b4788a3ab3697fc226f57f3df05b1b39b0c01615e3f07f051971220cf0b9ec2437ce2df0a39c88c237a6fd39e14e3286d425cf04311e9575a380233d22d0746c93e807f5ed68e56e497687933dba636aaef96fd87a6ae7ab514f9dd8e6908d0331e3af6e2c0357a57a8547cf9781e7d8ed0bae1a4b83da334dd7b387930a5e27b1f352667bd2649db802c7689368c9462ec3c0fc5e030aca95a7745ef45bd5c208197eadfc43b6d51811626b98c07305aa69355fef9995745f26120054ae156e3462fc45250ba5986e6e361757c7ba053ec7d9816f81587c25c2d141c3009b16286fe65758ac54498720c68f7182938999ad57e0bd3ef148c979971b5c22901075a253637c4c16b6dfd0e96eb478689a32d86584cd5374f520275fe231b0bb1bfa229c353831a08d07b79c3fa89bdb395e1e1a16f87a4495f551a489490df2529a43bef56a820e7471270bdf99ac9ed9d59e206204e8fcfbe23f551e0f1d0af43aab3c4876cbd9120954ec4430def4a74eb40477f70e9bf8c956750267f6ffeeb353a45082b1adfb6330979dc49e658f0d194eb764b3fbdfbf352ec97636f09d1a3c45d443477a0c7d82133863afdc981c360ef466884349e4a51dcbca945685d56960c41563745a91728f030baf5a540ab5cdfce640406e5f8adf163c8508e3354f1ba6ab5784bf11cb71d0950773176a6b10c296093b0faa1315981ab6d5bea7168eb978d271fba6a25556e2a134a0a8c6b31cb341e82f278fa5ae2f0f687dfe07673782ac3add445342f45826cd0a1cd75b5fd5f638a54fdecdfeebc1b3525e7244185aa4e4512139bf41969c7b0269b7fef45647275ea5df2b41d89a4443425fc8e3cb74ab23e1616d45691a46cbb450b11038f5d0e2932b51dcfe1d032c656cb4a8148fd0c39fc6805640aa7dd4148267e57f2837517b966dba6e38fb0977050f2c104a22454636c85c73d9a19f967a04b04f2af2cb4c0b6b09c8f0b31e8bcb943af7be2dcdcf3c64b55da26d33917383ac47efa6c22254fa121d69d71c476d1c49cf5addf87126f3728f05cb37a7064b79a9a6121a56862a763c6ad98b20d9091d164cee43111c8eae688dbc7017ec766e530e56c121b8a2ba05080f6913950be81868da469d5d96fd65e904a735d798c6b8eb185090259505f4f34ce57a033eb40c2a3fcfc6065e4f717f5b5d0fb662f1574bfdadcac8550b6436acf0a4cd1b6b406d0df73f8f4ddfba4124771bb7e486474079db5b3153af06242630fe4095f951d982d89a2f6b0a78c956513a8f73bd225925c615445fd95442fd0827c377c2678daca88887660766fd12d097a76704151d461474ab54d7698eddec4ac2b27b8c184d0c20285f9be8cd97f1c290339b4983b6f714344edcac5d91209735d4166df5eb19f2c9e2beb082e8d425861480fdcb3a8d2d9fe069a97f92d563fcda8ec113a29f9c69ce8e161902e5b13fdd7fa55986d2e82ed85942bf1391e978a08bd1d758f843a0bbae695f5c1a2ee181e22868d739d17c73d3727ecc49e6517e341e4d9a2a2c12063a1d781aa7508ad5c4bd3729e9e2ebae78f6472e02638e7fdbd3c9379440101f47aca8d745b757d9dead289c2576d53d7cdf12bf228e72ff6722721dce2e9e35bbc5c33e431849a06bff9a7ec2b7681e46dc3c2ba4d37ea7ce5206aa56ffd485e665df4566c016c7de198eec5287a3c94e91ab405520508b2288c0312775e1e0cde1b05a823d0be2fb715cfad02772055da8ebea0d5e8748482b2a4756bda49a9f772a21b5a2ff1b534e954766a0608450f7ab8c6fe924a224db200080c3f5ec64335b1f295f78ad19b9b3eeeeab0773978ec9279eb1557ac53dd317561f5ce4260baff2a5157d14e87b78998b5d3db2d918306b93773b2b513d06514860c4eef2d94db6734021cb27ea3057e0b0568832a4f6f33b8069a7ec01ab8a3b06619a0706b2c745eee9ecc2da3a9a594ce2da144fbc01eaeab33ff237877f39831dd2a355e3b9f4fa1749b8423ad2bde3c3a43aaf12a8a84646fdbc963f5a44d915a78fc627892b5b36700f1a4fb4751f44dffa2d12cfea23db72083b17761be1d583838fc6226c1d04d6c263029b8c68d990e6f207e148d2c30534d4f43584ff928c7e26ff3d149cd2346aa140e06c9b1d7dfed2743249892ac182d0eb4dcfee1667eb5e0a7c14075038b7421144852c28dd55f3013769fc11f42931f6b00f16fa935c5526cafa2ee4f0b448f4ca3b9a5e398083acc089eaf98372de56928c453ffc635c011481298bcc292c67838ed8512e98726c131a602ab09c4b8ccff45a8ee49e4bb7ecb47b5dd94d45987e7269debadcc61a54b0be9f65ce9a3332ddfa08913373abc630cc7ca5685b0eb140a5f6e15512223da046785b57f5ec650ecffa0dc1a2b9ba09332c0bbaf3c0193d20878eadd6e429eca9cb1243d841e404953e8c7c92f4588741fdaa2f30d74cfcf11f4262963ee8b0ef0c7c093480c0ca2a9e8566ba204b0982833ef4cf43c6eced1de958aa42a4109334a086715ba7e03120f3e3ce17daf26050f8db01bd3dd573b754f996ae6fac748282b1878338ba770ce6bf064d937475ef0d65862cc6e7811c484c384f242971773d1bde904b87e024eda0baa5527388f64cc21825cd42ecc990e41ee860fdb5cbb097492ce85784c4b561e3919572931d446a403a7b6afbce26636773469e09f61317106cee9dcf5e04b67cb8bf6a2dd387e14723ce801bbcd1b963df3f3d6bf7cde26ebc47220584e9ba92c8a57dd2119035884ddd2555483ca2b895f54a62db081d568e0b1f9eba9e85609e2a18c6969dfc8e62ab20f76f52dc28a4ef434a81ffe1a6a000c01ac3b2a8565033d2d828b4ce44173eb48ddec9247962c89140804fc5242998aff2949daf80336e0f570333bad635c0b735111b10f69e01fedde26933f287d91faaf74ad4bfb90a7ca15b44f5c4130fa19407f3d8b6f78676377b23d259bbb1c68a1d9a6f3b7563b0fba5e1ee6ccf0cd6955e23c024ecfeeb9e4a792dbd55e5ab5954b4eeee9afc685dee82f2a89db21470522aa8732afb918487367651003982558f2a7b8a327d75730aaa6c0bea9878fbf8de88534d429a53a1566647d9b003c008203dba786068c92810fa59f24b2f73342d6c26b5e305a882adebc2584227a439e6885aa55a70983c284db5d4f074fe5997549fb55ee8a83c55283fb140a53998a2c677eed5bbbfffea4ae057f0a6c6fc28d4da84008a4b2380baaab9160ebe8ba07bee336c0bcd5c3b43854d56c92781327493ba2007ca79570c0cca3a55e5c18dae155f2543fc88019a0b3f74ca3efd59d1139879e9892d54897694dd3a30197ebe0901f118f9666ff32620a89ed4736644a1ef95f6f5ac3c533a14af4df79941e1d7ffef6f3c97258aeafb2b5962be4e4b8d4e3770fad0a00a75e1482911670130f616af618081eccc9327f7caaeaddb52cabe5bfeecb026890c477278ade9a9993db5c0db90a0736e8c051cacdd50fc4f161b76162479cf6a174259cfe4389610fdcc287622ececfe163db33df5ca9d5dfba1335466bb5338ba9462bfc30300141d4f2f7ccc202dac4bfe315c520b4206a5b72c41b38dd25907378a063bb0b6bbad7001d29beb6918f877de6b46eb3e6911e37dced6c57981c1806cf583b606a312cdc2f6ae6865d57ea7eb21c5389db65304926fd5ec69a84a0c0f9f9df1a5a031577b42124deba8a0b5596b19093de81240000000c010000e20000008491d16d82e7f57a4ceae8348192e07d6c1a9de763c916002c00000015010000080000003f4b77c77f7c956ca220ee1194bf95dad0d69533e0e4fc018cd1046278070000fc75eede251ae3963a725de18fcaf63c2f819a8bad4c32dbd59672c378c90c6f6c3477b304dd33a5fa3f78"], 0x1028}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) syz_usb_connect(0x5, 0x35, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16, @ANYRESHEX=r0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000280)=0x4c822503, 0x4) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x0, 0xb5, 0x9, 0xa}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000000000000000008e000000000000000000001db9f0ed1d304be17c9de3584437f7fe514f5256eac7ac4bce4738ab6ffb342891e43ed727b2f971c6e0ada3447690d827034f70dd2149438db5d156080a7a9f01ace70311d22f725724f1bbb39a7da37b88df6d1b88d416b8260b02de032347879ac85dfaf888c8e09bb23239e654c63de1f2eb0166e10c1a0cdc6040951c9362e427b78afd4ac2d27b010b6288b936"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x4, @loopback, 0xd}, 0x1c) sysfs$3(0x3) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.349281868s ago: executing program 3 (id=3512): connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$kvm(0xffffff9c, &(0x7f00000005c0), 0x200240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf69d}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0xc0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000080a010300000000000000000300000108000940000000010c0003400000000000000003240005800800014000000001080001400000666a0800014000000084080001400000600414000000050a030000000000000000000200000270000000180a010100000000000000000a00000900010073797a31000000000900020073797a31000000000900010073797a31000000000900010073797a31000000000900020073077a320000000008000740000000030900020073797a31000000000900010073797a3000000000140000001100010000000000000000000000000a00"], 0xf8}, 0x1, 0x0, 0x0, 0xecfb5f5a5bdaff66}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='attr/fscreate\x00') connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0xfffffff9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe], 0x0, 0x100000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@exit_looper], 0x1000, 0x0, &(0x7f0000000940)="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"}) fcntl$setsig(r1, 0xa, 0x16) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x7, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x1c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0xc8, 0x4, 0x3, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x4eaa, 0x2, 0xfffffffffffffffc, 0x0, 0x3fffffff8000]}) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @private=0xa010102}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) move_mount(r2, &(0x7f0000000640)='./file0\x00', r4, &(0x7f0000000680)='./file0\x00', 0x4) syz_clone3(&(0x7f00000008c0)={0x8000000, 0x0, 0x0, 0x0, {0x20}, &(0x7f0000000340)=""/239, 0xef, 0x0, 0x0}, 0x58) 3.159891053s ago: executing program 0 (id=3546): socket(0x11, 0xa, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x8009, 0x8803]}, &(0x7f0000000140), &(0x7f0000000080)={0x77359400}, 0x8) 3.071939304s ago: executing program 4 (id=3547): unshare(0x22020400) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x63) r0 = inotify_init() r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) open$dir(&(0x7f0000000080)='./file0\x00', 0x5d50d87a29558e62, 0x88) r2 = socket$inet(0x2, 0x3, 0x6) recvmmsg(r2, &(0x7f000000a780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/56, 0x38}}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r6 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r5, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@tipc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f00000005c0)=""/229, 0xe5}], 0x2}, 0x0, 0x10, 0x0, {0x3}}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0) preadv(r9, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 2.793504205s ago: executing program 3 (id=3548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x121}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000002340)=""/31, 0x1f}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000008c0)=""/54, 0x36}], 0xb}, 0x0) 1.713727486s ago: executing program 0 (id=3549): setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x48) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='4', 0x1, r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000008000300000000", @ANYBLOB="040046001c0051801800008011000100a7fd4531296b6353d1f3e088470000000a00340002020202020200000800260094090000"], 0x50}}, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0xf4, 0x54485746, 0x0, @stepwise}) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r7 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r0, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x7c6, 0x12) 1.631381037s ago: executing program 3 (id=3550): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000340)={{0x1}, 0x0, [0x0, 0x0, 0x34fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf756, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38a, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) r2 = add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "4eb030e197b14041305e7ece685d2e87e476039a971c1abd3e3af22b9fd1b614237c5b922b8036065d894a4880ed7255498f9c855c69da36a1f2e34bac669518"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x1022000) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/4096) socket$inet6_sctp(0xa, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) keyctl$read(0xb, r2, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x3, 0x8000, 0x3}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400020100350400"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defau'], 0x2a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x3, {}, 0xfe}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000003c0)={0x1d, r3}, 0x18) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xcf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0x7f, 0x2}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x201, 0x0, 0x3, 0x5a, 0x8, 0x4}, 0x5, &(0x7f0000001080)={0x5, 0xf, 0x5}}) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r5, 0x0) keyctl$link(0x8, r2, r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, 0x0) 1.608716451s ago: executing program 0 (id=3551): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000100), 0xd0000, 0x0) write$snapshot(r3, &(0x7f00000001c0)="5c075a21ac3956a0d576666655695de2c3389b954e5a88ed54313a30ef661f98b76b228b457587f9eaa35009b2c01b1096fd817354bd3c0167e252abadbe43931b1299ad87f1864272e421e621786eaa9bac6c95bdb0f2304074dc9429542f07ef889d179f35a410b830d0efda01e1598dceca72aa74549b9787d5ef7f47c977898de547a3d9356b3cb863a3a867cd335e678a4d785576c9cedbfb184f342f7758b25fc1aaf6e98f41e5322eb3bd87af7e4a12ccf741cfbc6765562784c11966ccbd4663ec4bbab502809297dd33793e08899b7cd0015d3bd30eced948d4e8c89b23939b4ac1350503d36879", 0xec) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) close(0xffffffffffffffff) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000002c0)={'caif0\x00', {0x2, 0x4e23, @empty}}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001740)={0x80, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @device_b, @device_b, @random="6e84f399c9b4"}, 0x0, @default, 0x0, @val, @val={0x1, 0x2, [{0xc}, {0xb, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x0, 0x5}}, @void, @void, @void, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "b348fec9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) 1.460489036s ago: executing program 2 (id=3552): syz_open_procfs(0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x84180, 0x0) write$vhost_msg(r2, &(0x7f0000000180)={0x1, {&(0x7f00000002c0)=""/202, 0xca, &(0x7f00000003c0)=""/179, 0x3, 0x6}}, 0x44) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) (rerun: 64) 1.273781752s ago: executing program 0 (id=3553): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wg1\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wlan0\x00'}}, 0x1e) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x14b040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0xd0001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_unlink(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="080026007f1700000800270001"], 0x2c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x7f}) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x341e82, 0x6) fcntl$getown(r4, 0x9) sendfile(r12, r12, &(0x7f0000000000)=0x1, 0x4) 1.121466932s ago: executing program 2 (id=3554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = io_uring_setup(0x4cb, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, 0x3, 0x0, r0}) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24800}, 0x4000040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x2) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 988.630632ms ago: executing program 2 (id=3555): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/173, 0xad}], 0x1, 0x2, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f0000000040)="4850ec75c68f38b158cf238c2a3a2916792a0200aa", 0xfffffffffffffe8b, 0x4040000, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002000000000000000000000f9ffffffffffffff0000000000"], 0x48) ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0), 0x8) 697.669635ms ago: executing program 1 (id=3556): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101a03) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000600)="7d350326", 0x4}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={0x0}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x50, r0, 0x13b20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x4002) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x81, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r10, 0x2b8ee6cf79dab3f}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xcc, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x757b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x9d30}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0, 0x0, 0xa}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001e000100000000000000fd00fc00a400000000000000000000000000000000000000000000fc0200df0a0000000000000000000010000a000000008431712306a06690000000000000000000bd96e7bfce7385d107519084c79fcb6f4f726d4da3f7b81a9049a177f648fbe49d9e4bc1bb9ee88e1227a1f0825254ee0546ff964586e853416e3baa2c6378598a13565bf187f566086ddac343d127fae18eac88397c206957ff2dc322f05928d1fb5d8f256454af265cb6005d78a3fd4fa1a77afab97d2adfed"], 0x50}}, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000040)) 248.543516ms ago: executing program 0 (id=3557): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f000000d000)=""/102400, 0x19000}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f00000020c0)=""/4092, 0xffc}], 0x3, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x8, 0x1, 0x3, 0x3, 0x2000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16=r4, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES32, @ANYRES64=r4, @ANYRES64=r5], 0xc8) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) splice(r4, 0x0, r6, 0x0, 0x8003, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8400, 0x118) write$dsp(r5, &(0x7f0000000440)="58d12c8ac1b02dcd7ce12105b7402549a41789c71ad339998e219adeaec6c138de06bd5a152076b64eeac44ebf1e7b7b58fdb0a6b8b595e31682739776347bf99e419540eb35ea389e1c838b16bec7f1916227ec9494969fb06b5362890f068906a8d6bebaa8b57ef9e5f6e6d3041dac9e00008d3cc6e2f8c849564736a77e4069560e075b27", 0x86) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x40, 0x3137}) socket$igmp(0x2, 0x3, 0x2) 0s ago: executing program 2 (id=3558): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f000000d000)=""/102400, 0x19000}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f00000020c0)=""/4092, 0xffc}], 0x3, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x8, 0x1, 0x3, 0x3, 0x2000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRES16=r4, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRES32, @ANYRES64=r4, @ANYRES64=r5], 0xc8) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) splice(r4, 0x0, r6, 0x0, 0x8003, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)) open$dir(&(0x7f00000001c0)='./file0\x00', 0x8400, 0x118) write$dsp(r5, &(0x7f0000000440)="58d12c8ac1b02dcd7ce12105b7402549a41789c71ad339998e219adeaec6c138de06bd5a152076b64eeac44ebf1e7b7b58fdb0a6b8b595e31682739776347bf99e419540eb35ea389e1c838b16bec7f1916227ec9494969fb06b5362890f068906a8d6bebaa8b57ef9e5f6e6d3041dac9e00008d3cc6e2f8c849564736a77e4069560e075b27", 0x86) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0401273, &(0x7f0000000000)={'\x00', 0x0, 0x40, 0x3137}) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): OS Google 08/06/2024 [ 874.803254][T20697] Call Trace: [ 874.806550][T20697] [ 874.809498][T20697] dump_stack_lvl+0x241/0x360 [ 874.814200][T20697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.819417][T20697] ? __pfx__printk+0x10/0x10 [ 874.824010][T20697] should_fail_ex+0x3b0/0x4e0 [ 874.828701][T20697] ? skb_clone+0x20c/0x390 [ 874.833134][T20697] should_failslab+0xac/0x100 [ 874.837861][T20697] ? skb_clone+0x20c/0x390 [ 874.842308][T20697] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 874.847746][T20697] skb_clone+0x20c/0x390 [ 874.852033][T20697] ? dev_queue_xmit_nit+0x220/0xc10 [ 874.857279][T20697] dev_queue_xmit_nit+0x419/0xc10 [ 874.862448][T20697] ? dev_queue_xmit_nit+0x2b/0xc10 [ 874.867672][T20697] ? validate_xmit_skb+0x9f9/0x1120 [ 874.872897][T20697] dev_hard_start_xmit+0x15f/0x7e0 [ 874.878198][T20697] ? __pfx_validate_xmit_skb+0x10/0x10 [ 874.883674][T20697] __dev_queue_xmit+0x1b58/0x3e80 [ 874.888708][T20697] ? kasan_save_track+0x51/0x80 [ 874.893582][T20697] ? __do_fast_syscall_32+0xb4/0x110 [ 874.898885][T20697] ? __dev_queue_xmit+0x2da/0x3e80 [ 874.903999][T20697] ? __pfx___dev_queue_xmit+0x10/0x10 [ 874.909384][T20697] ? __copy_skb_header+0x437/0x5b0 [ 874.914504][T20697] ? __asan_memcpy+0x40/0x70 [ 874.919103][T20697] ? __copy_skb_header+0x437/0x5b0 [ 874.924342][T20697] ? __skb_clone+0x454/0x6c0 [ 874.928941][T20697] ? skb_clone+0x240/0x390 [ 874.933376][T20697] __netlink_deliver_tap+0x54d/0x7c0 [ 874.938714][T20697] ? netlink_deliver_tap+0x2e/0x1b0 [ 874.943941][T20697] netlink_deliver_tap+0x19d/0x1b0 [ 874.949062][T20697] netlink_unicast+0x7c4/0x990 [ 874.953838][T20697] ? __pfx_netlink_unicast+0x10/0x10 [ 874.959137][T20697] ? __virt_addr_valid+0x183/0x530 [ 874.964252][T20697] ? __check_object_size+0x49c/0x900 [ 874.969547][T20697] netlink_sendmsg+0x8e4/0xcb0 [ 874.974357][T20697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.979668][T20697] ? __pfx_lock_release+0x10/0x10 [ 874.984709][T20697] ? aa_sock_msg_perm+0x91/0x160 [ 874.989672][T20697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.995085][T20697] __sock_sendmsg+0x221/0x270 [ 874.999791][T20697] ____sys_sendmsg+0x52a/0x7e0 [ 875.004581][T20697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.009890][T20697] __sys_sendmsg+0x2aa/0x390 [ 875.014493][T20697] ? __pfx___sys_sendmsg+0x10/0x10 [ 875.019613][T20697] ? vfs_write+0x7bf/0xc90 [ 875.024074][T20697] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 875.030678][T20697] ? lockdep_hardirqs_on+0x99/0x150 [ 875.035888][T20697] __do_fast_syscall_32+0xb4/0x110 [ 875.041024][T20697] ? exc_page_fault+0x590/0x8c0 [ 875.045947][T20697] do_fast_syscall_32+0x34/0x80 [ 875.050833][T20697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 875.057181][T20697] RIP: 0023:0xf7f33579 [ 875.061254][T20697] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 875.080868][T20697] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 875.089299][T20697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000580 [ 875.097271][T20697] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 875.105247][T20697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 875.113221][T20697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 875.121212][T20697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 875.129200][T20697] [ 875.132355][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.164197][ T5296] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 875.177451][ T5296] usb 2-1: config 219 interface 0 has no altsetting 0 [ 875.191512][ T5296] usb 2-1: config 219 interface 0 has no altsetting 1 [ 875.203936][ T5296] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 875.237079][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.245634][ T5296] usb 2-1: Product: ᄸኼ裑놃读镧酬䩲侑ˆㅞ斟谛ꮵê´åŠ‘å°’ë­¿ã«…â¿èŸá˜î‰ºç–¤î¼ã„¨è‚–à³¹ï©ì°•崸鬨ẗ꘺늱î¡ë»¹æ·ì´¹ç„佡爪—㽩稂â­ì¾¡î‹žè¸Šå©‹ê‰²ì¤¯â†ŸïŽ³á”¼æ³ç¨æ¢ï•– [ 875.264809][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.271159][ T5296] usb 2-1: Manufacturer: 鬚ቒ涱邏鴥ᑦ肂ꎣ먈㢚횞蛕䮌è†á¼žàº®å¡ˆëœ¢äª ì—§î›ºç¹ºæ›”觼唛í’鑼ᾜ묭㵓⑒ç¨êŽ•æ§‘é¿—ì°¾à½‘ã€¸èš»ï»ˆá¿¶á ·å»¢á²™æšå‘œÒ¤ä˜€ç¨¹é¯™ç’·è“¸áㄤ࿔䈯콄ᾄﲲ᎚ê·åŠ£î†ŸíŸ“ç’£ï‚’à¡¦ä²¸å¿Œæ¸Ðå¹¤à –îŽœé¨–æˆŽïŠ‘á“¥Ãæ”€ã…¨ïª‡ïª¯å ¾ê¾”êŠÒ¸ì±§ì˜žì¹µç¥ã±»é•‹à³á­ë€”룀䳎䘷尦 [ 875.302291][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.308708][ T5296] usb 2-1: SerialNumber: Ð’ [ 875.364108][T20162] hsr_slave_0: left promiscuous mode [ 875.380797][T20162] hsr_slave_1: left promiscuous mode [ 875.390589][T20162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.403105][T20162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.416051][T20162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.429942][T20162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.465756][T20162] veth1_macvtap: left promiscuous mode [ 875.471509][T20162] veth0_macvtap: left promiscuous mode [ 875.477085][T20162] veth1_vlan: left promiscuous mode [ 875.491172][T20162] veth0_vlan: left promiscuous mode [ 875.667579][ T5281] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 875.829387][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.840940][ T5281] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.866662][ T5281] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 875.884693][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 875.894486][ T5281] usb 5-1: Product: syz [ 875.906365][ T5281] usb 5-1: Manufacturer: syz [ 875.911474][ T5281] usb 5-1: SerialNumber: syz [ 875.924809][ T5281] usb 5-1: config 0 descriptor?? [ 875.967030][ T5281] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 876.015904][ T7001] udevd[7001]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.232750][T18427] usb 5-1: USB disconnect, device number 102 [ 876.346368][T20162] team0 (unregistering): Port device team_slave_1 removed [ 876.424529][T20162] team0 (unregistering): Port device team_slave_0 removed [ 876.437390][T19493] Bluetooth: hci0: command tx timeout [ 877.166526][T20646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.252582][T20680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3426'. [ 877.269218][T20706] netlink: 'syz.4.3429': attribute type 5 has an invalid length. [ 877.288128][T20552] usb 4-1: USB disconnect, device number 58 [ 877.306266][T20710] syz.0.3430: attempt to access beyond end of device [ 877.306266][T20710] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 877.346867][T20646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.352336][ T5296] usb 2-1: selecting invalid altsetting 0 [ 877.373424][ T5296] usb 2-1: selecting invalid altsetting 0 [ 877.445547][ T5296] usb 2-1: USB disconnect, device number 104 [ 877.516052][T20646] team0: Port device team_slave_0 added [ 877.546050][T20646] team0: Port device team_slave_1 added [ 877.629293][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 877.633902][T20646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.679608][T20646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.705533][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.789927][T20646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.837120][T20646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.883719][T20646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.970320][T20738] FAULT_INJECTION: forcing a failure. [ 877.970320][T20738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.013056][T20646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.045854][T20738] CPU: 0 UID: 0 PID: 20738 Comm: syz.1.3437 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 878.056440][T20738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 878.066526][T20738] Call Trace: [ 878.069817][T20738] [ 878.072790][T20738] dump_stack_lvl+0x241/0x360 [ 878.077495][T20738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.082905][T20738] ? __pfx__printk+0x10/0x10 [ 878.087527][T20738] ? __pfx_lock_release+0x10/0x10 [ 878.092580][T20738] should_fail_ex+0x3b0/0x4e0 [ 878.097380][T20738] _copy_from_user+0x2f/0xe0 [ 878.102013][T20738] get_compat_msghdr+0xae/0x730 [ 878.107006][T20738] ? __lock_acquire+0x1384/0x2050 [ 878.112139][T20738] ? __fget_files+0x29/0x470 [ 878.116750][T20738] ? __pfx_get_compat_msghdr+0x10/0x10 [ 878.122314][T20738] ? __fget_files+0x3f3/0x470 [ 878.127033][T20738] do_recvmmsg+0x524/0xad0 [ 878.131519][T20738] ? __pfx_lock_acquire+0x10/0x10 [ 878.136653][T20738] ? __pfx_do_recvmmsg+0x10/0x10 [ 878.141617][T20738] ? kstrtouint_from_user+0x128/0x190 [ 878.147074][T20738] ? vfs_write+0x7bf/0xc90 [ 878.151513][T20738] __sys_recvmmsg+0x1a8/0x270 [ 878.156196][T20738] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 878.162182][T20738] ? __pfx___sys_recvmmsg+0x10/0x10 [ 878.167390][T20738] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 878.173737][T20738] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 878.179908][T20738] __do_fast_syscall_32+0xb4/0x110 [ 878.185030][T20738] ? exc_page_fault+0x590/0x8c0 [ 878.189894][T20738] do_fast_syscall_32+0x34/0x80 [ 878.194755][T20738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 878.201093][T20738] RIP: 0023:0xf7f10579 [ 878.205165][T20738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 878.224779][T20738] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 878.233208][T20738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 878.241202][T20738] RDX: 0000000000000284 RSI: 000000000000002b RDI: 0000000000000000 [ 878.249177][T20738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 878.257149][T20738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 878.265295][T20738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.273284][T20738] [ 878.385257][T20646] hsr_slave_0: entered promiscuous mode [ 878.402976][T20646] hsr_slave_1: entered promiscuous mode [ 878.468172][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3439'. [ 878.518304][T19493] Bluetooth: hci0: command tx timeout [ 878.708778][T20756] FAULT_INJECTION: forcing a failure. [ 878.708778][T20756] name failslab, interval 1, probability 0, space 0, times 0 [ 878.722844][T20756] CPU: 0 UID: 0 PID: 20756 Comm: syz.3.3440 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 878.731701][ T5281] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 878.733374][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 878.751090][T20756] Call Trace: [ 878.754400][T20756] [ 878.757350][T20756] dump_stack_lvl+0x241/0x360 [ 878.762070][T20756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.767298][T20756] ? __pfx__printk+0x10/0x10 [ 878.771920][T20756] ? __kmalloc_noprof+0xb0/0x400 [ 878.776997][T20756] ? __pfx___might_resched+0x10/0x10 [ 878.782324][T20756] should_fail_ex+0x3b0/0x4e0 [ 878.787021][T20756] ? sock_kmalloc+0xd7/0x160 [ 878.791627][T20756] should_failslab+0xac/0x100 [ 878.796344][T20756] ? sock_kmalloc+0xd7/0x160 [ 878.800963][T20756] __kmalloc_noprof+0xd8/0x400 [ 878.805735][T20756] sock_kmalloc+0xd7/0x160 [ 878.810171][T20756] skcipher_recvmsg+0x5ff/0x1230 [ 878.815138][T20756] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 878.820531][T20756] ? aa_sock_msg_perm+0x91/0x160 [ 878.825492][T20756] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 878.830782][T20756] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 878.836162][T20756] sock_recvmsg+0x22f/0x280 [ 878.840688][T20756] __sys_recvfrom+0x24a/0x3d0 [ 878.845386][T20756] ? __pfx___sys_recvfrom+0x10/0x10 [ 878.850598][T20756] ? __might_fault+0xaa/0x120 [ 878.855288][T20756] ? __might_fault+0xc6/0x120 [ 878.859972][T20756] __se_compat_sys_socketcall+0x46d/0x1430 [ 878.865785][T20756] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 878.872213][T20756] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 878.878807][T20756] ? lockdep_hardirqs_on+0x99/0x150 [ 878.884010][T20756] __do_fast_syscall_32+0xb4/0x110 [ 878.889131][T20756] ? exc_page_fault+0x590/0x8c0 [ 878.893985][T20756] do_fast_syscall_32+0x34/0x80 [ 878.898844][T20756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 878.905182][T20756] RIP: 0023:0xf7fc4579 [ 878.909259][T20756] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 878.929110][T20756] RSP: 002b:00000000f5745450 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 878.937532][T20756] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f574546c [ 878.945589][T20756] RDX: 0000000000000000 RSI: 00000000f5745570 RDI: 00000000f744bff4 [ 878.953565][T20756] RBP: 00000000f5745570 R08: 0000000000000000 R09: 0000000000000000 [ 878.961541][T20756] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 878.969601][T20756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.977581][T20756] [ 879.057441][ T5281] usb 2-1: device descriptor read/64, error -71 [ 879.099852][T20762] syz.3.3442: attempt to access beyond end of device [ 879.099852][T20762] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 879.134761][T20552] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 879.199124][T20767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3444'. [ 879.291805][T20552] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 879.307575][ T5281] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 879.327438][T20552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.335575][T20552] usb 1-1: Product: syz [ 879.355103][ T4642] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 879.387457][T20552] usb 1-1: Manufacturer: syz [ 879.392119][T20552] usb 1-1: SerialNumber: syz [ 879.412646][T20552] usb 1-1: config 0 descriptor?? [ 879.457542][ T9] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 879.487598][ T5281] usb 2-1: device descriptor read/64, error -71 [ 879.526992][T20646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 879.546451][T20646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 879.558201][T20646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 879.558770][ T4642] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 879.576911][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 879.578313][T20646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 879.596278][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 879.609193][ T5281] usb usb2-port1: attempt power cycle [ 879.614795][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.625196][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 879.641260][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.647505][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 879.660583][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.668814][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 879.669144][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 879.695923][ T9] usb 4-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 879.722851][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 879.723304][ T9] usb 4-1: config 219 interface 0 has no altsetting 0 [ 879.752824][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.779684][ T9] usb 4-1: config 219 interface 0 has no altsetting 1 [ 879.782324][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 879.796048][T20552] hso 1-1:0.0: Failed to find BULK IN ep [ 879.808081][ T9] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 879.819938][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.822385][T20552] usb-storage 1-1:0.0: USB Mass Storage device detected [ 879.831104][T20646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.836657][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 879.849980][ T9] usb 4-1: Product: ᄸኼ裑놃读镧酬䩲侑ˆㅞ斟谛ꮵê´åŠ‘å°’ë­¿ã«…â¿èŸá˜î‰ºç–¤î¼ã„¨è‚–à³¹ï©ì°•崸鬨ẗ꘺늱î¡ë»¹æ·ì´¹ç„佡爪—㽩稂â­ì¾¡î‹žè¸Šå©‹ê‰²ì¤¯â†ŸïŽ³á”¼æ³ç¨æ¢ï•– [ 879.873141][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.874276][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 879.906195][T20646] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.915046][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 879.936731][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 879.959086][ T5281] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 879.968080][ T9] usb 4-1: Manufacturer: 鬚ቒ涱邏鴥ᑦ肂ꎣ먈㢚횞蛕䮌è†á¼žàº®å¡ˆëœ¢äª ì—§î›ºç¹ºæ›”觼唛í’鑼ᾜ묭㵓⑒ç¨êŽ•æ§‘é¿—ì°¾à½‘ã€¸èš»ï»ˆá¿¶á ·å»¢á²™æšå‘œÒ¤ä˜€ç¨¹é¯™ç’·è“¸áㄤ࿔䈯콄ᾄﲲ᎚ê·åŠ£î†ŸíŸ“ç’£ï‚’à¡¦ä²¸å¿Œæ¸Ðå¹¤à –îŽœé¨–æˆŽïŠ‘á“¥Ãæ”€ã…¨ïª‡ïª¯å ¾ê¾”êŠÒ¸ì±§ì˜žì¹µç¥ã±»é•‹à³á­ë€”룀䳎䘷尦 [ 879.972456][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 879.999462][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.005949][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.021836][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.043658][ T5281] usb 2-1: device descriptor read/8, error -71 [ 880.052117][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 880.065813][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.073177][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.076106][ T9] usb 4-1: SerialNumber: Ð’ [ 880.087060][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 880.105319][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 880.130088][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 880.152148][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 880.168754][ T4642] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 880.189151][ T4642] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 880.206905][T20646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.218991][ T4642] usb 5-1: config 0 interface 0 has no altsetting 0 [ 880.241415][ T4642] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 880.258295][ T4642] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 880.277155][ T4642] usb 5-1: Product: syz [ 880.282350][ T4642] usb 5-1: Manufacturer: syz [ 880.286980][ T4642] usb 5-1: SerialNumber: syz [ 880.291930][ T5281] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 880.296173][T20646] veth0_vlan: entered promiscuous mode [ 880.318114][ T5281] usb 2-1: device descriptor read/8, error -71 [ 880.330381][ T4642] usb 5-1: config 0 descriptor?? [ 880.336377][T20646] veth1_vlan: entered promiscuous mode [ 880.347740][ T4642] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 880.365490][T20767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3444'. [ 880.419741][T20792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.427035][T20792] IPv6: NLM_F_CREATE should be set when creating new route [ 880.428873][ T5281] usb usb2-port1: unable to enumerate USB device [ 880.496231][ T9] usb 4-1: selecting invalid altsetting 0 [ 880.503114][T20646] veth0_macvtap: entered promiscuous mode [ 880.508398][ T9] usb 4-1: selecting invalid altsetting 0 [ 880.536199][T20646] veth1_macvtap: entered promiscuous mode [ 880.599945][T19493] Bluetooth: hci0: command tx timeout [ 880.600230][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.619460][ T9] usb 4-1: USB disconnect, device number 59 [ 880.674804][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.713651][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.732492][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.747019][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.766292][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.785763][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.808242][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.822135][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.834152][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.852683][T20646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.871601][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.883019][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.894512][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.905610][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.917961][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.928827][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.939252][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.950742][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.960972][T20646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.971595][T20646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.983305][T20646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.998063][T20646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.006807][T20646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.016181][T20646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.026559][T20646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.117111][ T7890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.125622][ T7890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.171731][T20162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.180665][T20162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.285648][T20806] FAULT_INJECTION: forcing a failure. [ 881.285648][T20806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.299375][T20806] CPU: 1 UID: 0 PID: 20806 Comm: syz.2.3414 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 881.309837][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 881.319933][T20806] Call Trace: [ 881.323236][T20806] [ 881.326226][T20806] dump_stack_lvl+0x241/0x360 [ 881.330936][T20806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.336144][T20806] ? __pfx__printk+0x10/0x10 [ 881.340737][T20806] ? __pfx_lock_release+0x10/0x10 [ 881.345770][T20806] ? ucma_get_ctx+0x28c/0x3a0 [ 881.350577][T20806] should_fail_ex+0x3b0/0x4e0 [ 881.355261][T20806] _copy_to_user+0x2f/0xb0 [ 881.359693][T20806] ucma_query_route+0x80a/0xaf0 [ 881.364566][T20806] ? __pfx_ucma_query_route+0x10/0x10 [ 881.369948][T20806] ? __might_fault+0xc6/0x120 [ 881.374626][T20806] ? __pfx_ucma_query_route+0x10/0x10 [ 881.379996][T20806] ucma_write+0x2d9/0x420 [ 881.384331][T20806] ? end_current_label_crit_section+0x151/0x180 [ 881.390606][T20806] ? __pfx_ucma_write+0x10/0x10 [ 881.395464][T20806] ? bpf_lsm_file_permission+0x9/0x10 [ 881.400850][T20806] ? security_file_permission+0x74/0x280 [ 881.406490][T20806] ? rw_verify_area+0x1c3/0x6f0 [ 881.411350][T20806] ? __pfx_ucma_write+0x10/0x10 [ 881.416232][T20806] vfs_write+0x29c/0xc90 [ 881.420510][T20806] ? __pfx_vfs_write+0x10/0x10 [ 881.425300][T20806] ? __fget_files+0x29/0x470 [ 881.429919][T20806] ? __fget_files+0x3f3/0x470 [ 881.434796][T20806] ? __fget_files+0x29/0x470 [ 881.439418][T20806] ? __fdget_pos+0x19a/0x320 [ 881.444036][T20806] ksys_write+0x1a0/0x2c0 [ 881.448400][T20806] ? __pfx_ksys_write+0x10/0x10 [ 881.453278][T20806] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 881.459886][T20806] ? lockdep_hardirqs_on+0x99/0x150 [ 881.465098][T20806] __do_fast_syscall_32+0xb4/0x110 [ 881.470220][T20806] ? exc_page_fault+0x590/0x8c0 [ 881.475164][T20806] do_fast_syscall_32+0x34/0x80 [ 881.480037][T20806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.486376][T20806] RIP: 0023:0xf7f01579 [ 881.490536][T20806] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 881.510153][T20806] RSP: 002b:00000000f568656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 881.518670][T20806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 881.526647][T20806] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.534643][T20806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.542966][T20806] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 881.550962][T20806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.559029][T20806] [ 881.562174][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.714757][T20811] netlink: zone id is out of range [ 881.745467][T20811] netlink: zone id is out of range [ 881.756380][T20811] netlink: zone id is out of range [ 881.793868][T20811] netlink: zone id is out of range [ 881.805411][T20811] netlink: zone id is out of range [ 881.817957][T20811] netlink: zone id is out of range [ 881.831331][T20811] netlink: zone id is out of range [ 881.843139][T20811] netlink: zone id is out of range [ 881.848894][T20811] netlink: zone id is out of range [ 881.851183][T20817] netdevsim netdevsim3: Direct firmware load for .½p failed with error -2 [ 881.864785][ T5281] usb 1-1: USB disconnect, device number 84 [ 881.879701][ T4642] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 881.906991][T20811] netlink: zone id is out of range [ 881.912931][T20817] netdevsim netdevsim3: Falling back to sysfs fallback for: .½p [ 882.059746][ T4642] usb 3-1: Using ep0 maxpacket: 16 [ 882.081013][ T4642] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 882.090548][ T4642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.099996][ T4642] usb 3-1: Product: syz [ 882.104300][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 882.111519][ T4642] usb 3-1: Manufacturer: syz [ 882.116485][ T4642] usb 3-1: SerialNumber: syz [ 882.143166][ T4642] r8152-cfgselector 3-1: Unknown version 0x0000 [ 882.150027][ T4642] r8152-cfgselector 3-1: config 0 descriptor?? [ 882.157751][T20552] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 882.169835][ T936] usb 5-1: USB disconnect, device number 103 [ 882.190018][ T936] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 882.309744][T20552] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 882.319795][T20552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.333302][T20552] usb 2-1: config 0 descriptor?? [ 882.367067][T20552] cp210x 2-1:0.0: cp210x converter detected [ 882.459980][T20829] syz.3.3453: attempt to access beyond end of device [ 882.459980][T20829] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 882.571224][T20819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.581801][T20819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.637543][ T936] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 882.656163][ T9] r8152-cfgselector 3-1: USB disconnect, device number 97 [ 882.771824][T20552] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 882.785665][T20552] cp210x 2-1:0.0: querying part number failed [ 882.796637][T20552] usb 2-1: cp210x converter now attached to ttyUSB0 [ 882.806233][T20552] usb 2-1: USB disconnect, device number 109 [ 882.808068][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 882.824419][T20552] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 882.847877][ T936] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 882.850601][T20552] cp210x 2-1:0.0: device disconnected [ 882.872229][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.902371][ T936] usb 5-1: Product: syz [ 882.906908][ T936] usb 5-1: Manufacturer: syz [ 882.919075][ T936] usb 5-1: SerialNumber: syz [ 882.931254][ T936] usb 5-1: config 0 descriptor?? [ 882.940436][ T936] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 882.949559][T20835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3455'. [ 883.217696][ T9] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 883.351875][ T936] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 883.377952][ T936] visor 5-1:0.0: probe with driver visor failed with error -5 [ 883.388930][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.400608][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 883.409465][T20841] macvlan2: entered promiscuous mode [ 883.409490][T20841] macvlan2: entered allmulticast mode [ 883.409889][T20840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3458'. [ 883.438645][ T9] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 883.445070][T20841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.453333][ T9] usb 1-1: config 219 interface 0 has no altsetting 0 [ 883.472498][ T9] usb 1-1: config 219 interface 0 has no altsetting 1 [ 883.493323][T20841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.499024][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 883.531034][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.557427][ T9] usb 1-1: Product: ᄸኼ裑놃读镧酬䩲侑ˆㅞ斟谛ꮵê´åŠ‘å°’ë­¿ã«…â¿èŸá˜î‰ºç–¤î¼ã„¨è‚–à³¹ï©ì°•崸鬨ẗ꘺늱î¡ë»¹æ·ì´¹ç„佡爪—㽩稂â­ì¾¡î‹žè¸Šå©‹ê‰²ì¤¯â†ŸïŽ³á”¼æ³ç¨æ¢ï•– [ 883.596625][ T9] usb 1-1: Manufacturer: 鬚ቒ涱邏鴥ᑦ肂ꎣ먈㢚횞蛕䮌è†á¼žàº®å¡ˆëœ¢äª ì—§î›ºç¹ºæ›”觼唛í’鑼ᾜ묭㵓⑒ç¨êŽ•æ§‘é¿—ì°¾à½‘ã€¸èš»ï»ˆá¿¶á ·å»¢á²™æšå‘œÒ¤ä˜€ç¨¹é¯™ç’·è“¸áㄤ࿔䈯콄ᾄﲲ᎚ê·åŠ£î†ŸíŸ“ç’£ï‚’à¡¦ä²¸å¿Œæ¸Ðå¹¤à –îŽœé¨–æˆŽïŠ‘á“¥Ãæ”€ã…¨ïª‡ïª¯å ¾ê¾”êŠÒ¸ì±§ì˜žì¹µç¥ã±»é•‹à³á­ë€”룀䳎䘷尦 [ 883.631631][ T9] usb 1-1: SerialNumber: Ð’ [ 883.677557][ T4642] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 883.696753][T20827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.711775][T20827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.818116][ T4642] usb 3-1: device descriptor read/64, error -71 [ 883.827915][ T46] usb 5-1: USB disconnect, device number 104 [ 883.855906][T20835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3455'. [ 883.857581][T20552] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 883.926543][ T9] usb 1-1: selecting invalid altsetting 0 [ 883.941373][ T9] usb 1-1: selecting invalid altsetting 0 [ 883.974788][ T9] usb 1-1: USB disconnect, device number 85 [ 884.002096][ T5534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.014888][ T5534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.043509][ T7184] udevd[7184]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.060318][ T4642] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 884.076985][T20552] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 884.095793][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.125189][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.139265][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.162240][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.172188][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.184564][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.194231][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.214536][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.225920][ T4642] usb 3-1: device descriptor read/64, error -71 [ 884.235031][ T5534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.246107][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.255234][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.265260][ T5534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.267351][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.308039][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.322680][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.337794][ T4642] usb usb3-port1: attempt power cycle [ 884.348238][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.360722][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.370504][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.384097][ T5534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.395724][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.406911][ T5534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.428715][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.437025][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.456579][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.477765][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.521483][T20552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.535481][ T5534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.556882][T20552] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.586853][ T5534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.609073][T20552] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.619588][ T4618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 884.632596][ T4618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 884.642344][ T4618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 884.660305][ T4618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 884.668296][ T4618] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 884.679604][T20552] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 884.691261][T20552] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 884.699874][ T4642] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 884.707717][ T4618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 884.717051][T20552] usb 4-1: Product: syz [ 884.721461][T20552] usb 4-1: Manufacturer: syz [ 884.728622][ T4642] usb 3-1: device descriptor read/8, error -71 [ 884.735085][T20552] usb 4-1: SerialNumber: syz [ 884.754862][T20552] usb 4-1: config 0 descriptor?? [ 884.769087][T20552] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 884.822577][T20862] IPv6: Can't replace route, no match found [ 884.967554][ T4642] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 884.999896][ T5534] bridge_slave_1: left allmulticast mode [ 885.020373][ T5534] bridge_slave_1: left promiscuous mode [ 885.032476][ T4642] usb 3-1: device descriptor read/8, error -71 [ 885.044057][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.055098][ T5534] bridge_slave_0: left allmulticast mode [ 885.064787][ T5534] bridge_slave_0: left promiscuous mode [ 885.070684][T20552] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 885.084709][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.169803][ T4642] usb usb3-port1: unable to enumerate USB device [ 885.261314][T20552] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 885.284652][T20552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.314743][T20552] usb 1-1: config 0 descriptor?? [ 885.326357][T20552] gspca_main: spca508-2.14.0 probing 8086:0110 [ 885.522712][T20552] gspca_spca508: reg_read err -32 [ 885.542863][T20867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.564633][T20867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.800806][T20552] gspca_spca508: reg_read err -71 [ 885.808768][T20552] gspca_spca508: reg_read err -71 [ 885.814387][T20552] gspca_spca508: reg_read err -71 [ 885.825189][T20552] gspca_spca508: reg write: error -71 [ 885.831187][T20552] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 885.864092][T20552] usb 1-1: USB disconnect, device number 86 [ 885.897509][ T5278] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 886.015018][ T5534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.027523][ T5534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.041480][ T5534] bond0 (unregistering): Released all slaves [ 886.048154][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 886.064019][ T5278] usb 5-1: unable to get BOS descriptor or descriptor too short [ 886.076326][ T5278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 886.090200][ T5278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.100083][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.125826][ T5278] usb 5-1: Product: С [ 886.151454][ T5278] usb 5-1: Manufacturer: 긨탞é¿ï­˜ì¼›ê´†å‹°Ç¿ãµ–鼜뤱Ώ㼛䂨⸓삻䓑â½ï»½ç…Œãˆƒì›ä™´í’°à­­é·…䅣퇥 [ 886.196041][ T5278] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 886.237132][ T5278] cdc_ncm 5-1:1.0: bind() failure [ 886.252934][ T5278] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 886.296107][ T5278] cdc_ncm 5-1:1.1: bind() failure [ 886.310222][T20861] chnl_net:caif_netlink_parms(): no params data found [ 886.600356][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 886.635098][ T5278] usb 4-1: USB disconnect, device number 60 [ 886.645049][ T5534] hsr_slave_0: left promiscuous mode [ 886.668251][ T5278] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 886.705818][ T5534] hsr_slave_1: left promiscuous mode [ 886.746532][ T5534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.771393][T19493] Bluetooth: hci4: command tx timeout [ 886.797504][ T5612] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 886.808111][ T5534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.826911][ T5534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.866291][ T5534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.908845][T20893] vhci_hcd: default hub control req: 8018 v0000 i0000 l0 [ 886.935937][ T5534] veth1_macvtap: left promiscuous mode [ 886.954153][ T5534] veth0_macvtap: left promiscuous mode [ 886.960060][ T5534] veth1_vlan: left promiscuous mode [ 886.965408][ T5534] veth0_vlan: left promiscuous mode [ 886.981032][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 886.996357][ T5612] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.000565][ T4642] usb 5-1: USB disconnect, device number 105 [ 887.030581][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 887.064496][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 887.119307][ T5612] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 887.147673][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.170256][ T5612] usb 3-1: config 0 descriptor?? [ 887.182487][T20884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 887.193041][ T5612] hub 3-1:0.0: USB hub found [ 887.395393][ T5612] hub 3-1:0.0: 2 ports detected [ 887.417695][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 887.607667][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 887.619222][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.636792][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 887.657005][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 887.668131][ T9] usb 4-1: SerialNumber: syz [ 887.676400][ T9] usb 4-1: config 0 descriptor?? [ 887.703169][ T9] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 887.711942][ T936] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 887.720253][ T9] usb 4-1: No valid video chain found. [ 887.883602][ T936] usb 5-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 887.893257][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.901510][ T936] usb 5-1: Product: syz [ 887.906093][ T936] usb 5-1: Manufacturer: syz [ 887.911032][ T936] usb 5-1: SerialNumber: syz [ 887.919639][ T936] usb 5-1: config 0 descriptor?? [ 887.934472][ T936] r8712u: register rtl8712_netdev_ops to netdev_ops [ 887.941861][ T936] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 888.100589][ T5534] team0 (unregistering): Port device team_slave_1 removed [ 888.184320][ T5534] team0 (unregistering): Port device team_slave_0 removed [ 888.447459][T20907] program syz.4.3476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.657816][ T936] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 888.671667][ T936] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 888.682111][ T936] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 888.847497][T19493] Bluetooth: hci4: command tx timeout [ 889.124618][T20902] netlink: 'syz.3.3474': attribute type 10 has an invalid length. [ 889.132860][T20902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3474'. [ 889.152436][T20902] hsr0: entered promiscuous mode [ 889.162752][T20902] hsr0: entered allmulticast mode [ 889.169697][T20902] hsr_slave_0: entered allmulticast mode [ 889.178259][T20902] hsr_slave_1: entered allmulticast mode [ 889.184482][T20902] bridge0: port 3(hsr0) entered blocking state [ 889.197007][T20902] bridge0: port 3(hsr0) entered disabled state [ 889.216496][T20902] bridge0: port 3(hsr0) entered blocking state [ 889.222931][T20902] bridge0: port 3(hsr0) entered forwarding state [ 889.284926][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 889.305981][ T9] usb 4-1: USB disconnect, device number 61 [ 889.369288][T20861] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.378023][T20861] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.387001][ T5281] usb 5-1: USB disconnect, device number 106 [ 889.401819][T20861] bridge_slave_0: entered allmulticast mode [ 889.409862][T20861] bridge_slave_0: entered promiscuous mode [ 889.458534][T20861] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.466091][T20861] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.474264][T20861] bridge_slave_1: entered allmulticast mode [ 889.483387][T20861] bridge_slave_1: entered promiscuous mode [ 889.562889][T20861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.575514][T20861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.692053][ T9] usb 3-1: USB disconnect, device number 102 [ 889.695799][T20861] team0: Port device team_slave_0 added [ 889.737628][T20861] team0: Port device team_slave_1 added [ 889.786304][T20861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.794145][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.820058][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.828241][T20861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.846512][T20861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.858144][T20861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.884140][ C1] vkms_vblank_simulate: vblank timer overrun [ 889.943299][T20861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.101192][T20861] hsr_slave_0: entered promiscuous mode [ 890.125825][T20861] hsr_slave_1: entered promiscuous mode [ 890.135592][T20861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.135776][T20934] fuse: Bad value for 'fd' [ 890.159168][T20861] Cannot create hsr debugfs directory [ 890.327449][T18427] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 890.399209][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 890.517624][T18427] usb 4-1: Using ep0 maxpacket: 8 [ 890.547454][T18427] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 236, using maximum allowed: 30 [ 890.569976][T18427] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.600101][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 890.629026][T18427] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.647380][T18427] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 236 [ 890.677339][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 890.693808][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 890.715404][T18427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 890.722737][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 890.736944][T18427] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 890.764228][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 890.777863][ T5278] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 890.778047][T18427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.801018][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 890.821526][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 890.841167][T18427] usb 4-1: config 0 descriptor?? [ 890.848215][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 890.865110][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 890.889417][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 890.903618][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 890.923284][T19493] Bluetooth: hci4: command tx timeout [ 890.941357][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 890.953047][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 890.961455][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 890.971232][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 890.977407][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 890.982831][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 890.996772][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 891.006247][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 891.018525][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 891.018961][ T5278] usb 5-1: unable to get BOS descriptor or descriptor too short [ 891.026308][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 891.042366][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 891.067332][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 891.076128][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 891.078138][ T5278] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 891.086273][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 891.105923][ T5278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 891.107380][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 891.124587][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 891.135367][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 891.136537][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.144390][ T9] usb 1-1: Product: syz [ 891.156537][ T9] usb 1-1: Manufacturer: syz [ 891.160004][ T5278] usb 5-1: Product: С [ 891.161870][ T9] usb 1-1: SerialNumber: syz [ 891.177819][ T9] usb 1-1: config 0 descriptor?? [ 891.182915][ T5278] usb 5-1: Manufacturer: 긨탞é¿ï­˜ì¼›ê´†å‹°Ç¿ãµ–鼜뤱Ώ㼛䂨⸓삻䓑â½ï»½ç…Œãˆƒì›ä™´í’°à­­é·…䅣퇥 [ 891.193438][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 891.224619][ T5278] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 891.234071][ T5278] cdc_ncm 5-1:1.0: bind() failure [ 891.251589][ T5278] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 891.263669][ T5278] cdc_ncm 5-1:1.1: bind() failure [ 891.430518][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3480'. [ 891.597220][T20861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 891.616372][T20861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 891.630416][T20861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 891.642886][T20861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 891.677641][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 891.732764][T20861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.770368][T20861] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.783696][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.790936][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.814379][T20162] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.821635][T20162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.858709][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 891.877307][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 891.906489][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.924002][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.943030][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 891.944188][T20861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.953466][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.997338][ T9] usb 3-1: Product: syz [ 892.001929][ T9] usb 3-1: Manufacturer: syz [ 892.006594][ T9] usb 3-1: SerialNumber: syz [ 892.054764][ T936] usb 5-1: USB disconnect, device number 107 [ 892.059751][T20861] veth0_vlan: entered promiscuous mode [ 892.134241][T20861] veth1_vlan: entered promiscuous mode [ 892.246051][T20861] veth0_macvtap: entered promiscuous mode [ 892.276546][T20861] veth1_macvtap: entered promiscuous mode [ 892.322053][ T9] usb 3-1: 0:2 : does not exist [ 892.334331][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.341556][ T9] usb 3-1: USB disconnect, device number 103 [ 892.374956][ T7183] udevd[7183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.383294][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.440507][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.452413][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.467873][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.480794][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.493758][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.518532][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.536767][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.556285][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.566620][ T936] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 892.584166][T20861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.599423][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.616759][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.638845][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.650360][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.660462][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.675841][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.686049][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.707133][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.727873][T20861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.745790][T20861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.758947][ T936] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.772546][ T936] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=4f.be [ 892.779075][T20861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.792739][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=25 [ 892.805799][T20861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.812533][ T936] usb 5-1: SerialNumber: syz [ 892.825820][T20861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.834124][ T936] usb 5-1: config 0 descriptor?? [ 892.855495][T20861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.871756][T20861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.010938][T19493] Bluetooth: hci4: command tx timeout [ 893.023270][T20162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.047145][T20162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.114093][ T7890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.117568][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 893.145035][ T936] usb 4-1: USB disconnect, device number 62 [ 893.161012][ T7890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.249826][ T5281] usb 1-1: USB disconnect, device number 87 [ 893.282438][ T5281] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 893.487936][T21011] program syz.0.3490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.617655][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 893.707381][ T4642] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 893.797555][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 893.846161][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 893.877191][ T4642] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 893.907225][ T4642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.915943][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 893.915998][ T4642] usb 2-1: Product: syz [ 893.934411][ T4642] usb 2-1: Manufacturer: syz [ 893.949913][ T4642] usb 2-1: SerialNumber: syz [ 893.966249][ T4642] usb 2-1: config 0 descriptor?? [ 893.978988][ T4642] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 893.990169][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 894.017802][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 894.026902][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.076944][ T9] usb 3-1: config 0 descriptor?? [ 894.083448][T21013] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 894.105683][ T9] hub 3-1:0.0: USB hub found [ 894.287560][ T5281] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 894.328851][ T9] hub 3-1:0.0: 2 ports detected [ 894.469244][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 894.501238][ T4642] gspca_sunplus: reg_r err -110 [ 894.514314][ T5281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 894.522975][ T4642] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 894.533475][ T5281] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 894.556794][ T5281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.572262][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.582166][ T5281] usb 1-1: Product: С [ 894.586537][ T5281] usb 1-1: Manufacturer: 긨탞é¿ï­˜ì¼›ê´†å‹°Ç¿ãµ–鼜뤱Ώ㼛䂨⸓삻䓑â½ï»½ç…Œãˆƒì›ä™´í’°à­­é·…䅣퇥 [ 894.611184][ T5281] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 894.622894][ T5281] cdc_ncm 1-1:1.0: bind() failure [ 894.641164][ T5281] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 894.650166][ T5281] cdc_ncm 1-1:1.1: bind() failure [ 894.851279][T21040] RDS: rds_bind could not find a transport for 500::, load rds_tcp or rds_rdma? [ 894.870030][ T5612] usb 1-1: USB disconnect, device number 88 [ 894.958364][ T5281] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 895.132973][ T5281] usb 4-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 895.161011][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.179686][ T4642] usb 5-1: USB disconnect, device number 108 [ 895.194383][ T5281] usb 4-1: Product: syz [ 895.209771][ T5281] usb 4-1: Manufacturer: syz [ 895.225400][ T5281] usb 4-1: SerialNumber: syz [ 895.243737][ T5281] usb 4-1: config 0 descriptor?? [ 895.256202][ T5281] r8712u: register rtl8712_netdev_ops to netdev_ops [ 895.263337][ T5281] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 895.272489][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 895.667450][ T4642] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 895.687445][ T5278] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 895.754583][T21077] program syz.3.3497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 895.784571][T21077] bond0: entered promiscuous mode [ 895.790257][T21077] bond_slave_0: entered promiscuous mode [ 895.796233][T21077] bond_slave_1: entered promiscuous mode [ 895.830558][ T4642] usb 5-1: Using ep0 maxpacket: 32 [ 895.849634][ T4642] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 895.868289][ T5278] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 895.877914][ T4642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 895.889759][ T4642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 895.902824][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 895.912565][ T5281] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 895.919474][ T4642] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 895.928848][ T5281] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 895.936458][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 895.949949][ T5281] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 895.964856][ T4642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.973061][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 895.984164][ T4642] usb 5-1: config 0 descriptor?? [ 895.993818][ T5281] usb 4-1: USB disconnect, device number 63 [ 896.008239][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.019036][T21074] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 896.027346][ T4642] hub 5-1:0.0: USB hub found [ 896.033070][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.044717][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.052943][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.076811][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.091097][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.099604][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.114354][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.128457][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.136429][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.145959][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.165580][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.177899][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.193421][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.194349][ T936] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 896.218611][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.227662][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.236937][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.253434][ T4642] hub 5-1:0.0: 2 ports detected [ 896.258931][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.268665][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 896.281472][ T5278] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 896.300033][ T5278] usb 1-1: config 0 interface 0 has no altsetting 0 [ 896.313895][ T5278] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 896.331063][ T5278] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 896.342761][ T5278] usb 1-1: Product: syz [ 896.347048][ T5278] usb 1-1: Manufacturer: syz [ 896.355142][ T5278] usb 1-1: SerialNumber: syz [ 896.373120][ T5278] usb 1-1: config 0 descriptor?? [ 896.395754][ T5278] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 896.518606][ T936] usb 2-1: USB disconnect, device number 110 [ 896.626095][ T5278] usb 3-1: USB disconnect, device number 104 [ 896.696097][T21079] IPVS: length: 215 != 1275777400 [ 897.269456][ T46] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 897.337490][ T4642] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 897.425209][T20162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.457482][ T5278] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 897.500080][ T4642] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 897.522427][ T4642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.538222][ T4642] usb 2-1: config 0 descriptor?? [ 897.572080][ T4642] cp210x 2-1:0.0: cp210x converter detected [ 897.617010][T20162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.627698][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 897.629535][ T5278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 897.665141][ T5278] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 897.691345][ T5278] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.707481][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.715877][ T5278] usb 3-1: Product: С [ 897.723827][ T5278] usb 3-1: Manufacturer: 긨탞é¿ï­˜ì¼›ê´†å‹°Ç¿ãµ–鼜뤱Ώ㼛䂨⸓삻䓑â½ï»½ç…Œãˆƒì›ä™´í’°à­­é·…䅣퇥 [ 897.762773][ T5278] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 897.762966][T20162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.775277][ T5278] cdc_ncm 3-1:1.0: bind() failure [ 897.810586][ T5278] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 897.820769][T21100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.835174][ T5278] cdc_ncm 3-1:1.1: bind() failure [ 897.842894][T21100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.951166][ T4618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 897.964394][ T4618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 897.975079][ T4618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 898.013200][ T4618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 898.027668][ T4618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 898.035245][ T4618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.059814][T21102] RDS: rds_bind could not find a transport for 500::, load rds_tcp or rds_rdma? [ 898.069093][T20162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.143554][ T9] usb 3-1: USB disconnect, device number 105 [ 898.303844][ T4642] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 898.311598][ T4642] cp210x 2-1:0.0: querying part number failed [ 898.321893][ T4642] usb 2-1: cp210x converter now attached to ttyUSB0 [ 898.359161][ T4642] usb 2-1: USB disconnect, device number 111 [ 898.391934][ T4642] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 898.429296][ T4642] cp210x 2-1:0.0: device disconnected [ 898.438916][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 898.468115][ T5278] usb 1-1: USB disconnect, device number 89 [ 898.485507][ T5278] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 898.556586][T20162] bridge0: port 3(hsr0) entered disabled state [ 898.574727][T20162] bridge_slave_1: left allmulticast mode [ 898.581636][T20162] bridge_slave_1: left promiscuous mode [ 898.587419][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.596423][T20162] bridge_slave_0: left allmulticast mode [ 898.602894][T20162] bridge_slave_0: left promiscuous mode [ 898.609247][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.898186][ T5278] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 899.049163][ T9] usb 5-1: USB disconnect, device number 109 [ 899.077651][ T5278] usb 1-1: Using ep0 maxpacket: 32 [ 899.095625][ T5278] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 899.111555][ T5278] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 899.121728][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.130404][ T5278] usb 1-1: Product: syz [ 899.134765][ T5278] usb 1-1: Manufacturer: syz [ 899.139513][ T5278] usb 1-1: SerialNumber: syz [ 899.154734][ T5278] usb 1-1: config 0 descriptor?? [ 899.161321][T21111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 899.175442][ T5278] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 899.267727][ T936] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 899.435483][T20162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.445278][T20162] bond_slave_0: left promiscuous mode [ 899.455880][T20162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.466882][T20162] bond_slave_1: left promiscuous mode [ 899.473207][ T936] usb 2-1: Using ep0 maxpacket: 16 [ 899.480705][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 899.496087][ T936] usb 2-1: New USB device found, idVendor=056a, idProduct=0060, bcdDevice= 0.00 [ 899.508337][T20162] bond0 (unregistering): Released all slaves [ 899.514635][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.533502][ T936] usb 2-1: config 0 descriptor?? [ 899.544149][ T936] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 899.573307][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3518'. [ 899.601642][T21122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3518'. [ 899.764474][ T936] usb 2-1: USB disconnect, device number 112 [ 900.063294][T20162] hsr_slave_0: left promiscuous mode [ 900.076964][T20162] hsr_slave_1: left promiscuous mode [ 900.093908][T20162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.107035][T20162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.117509][ T5612] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 900.118093][ T4618] Bluetooth: hci3: command tx timeout [ 900.142219][T20162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.152633][T20162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.196613][T20162] veth1_macvtap: left promiscuous mode [ 900.221378][T20162] veth0_macvtap: left promiscuous mode [ 900.236582][T20162] veth1_vlan: left promiscuous mode [ 900.244032][T20162] veth0_vlan: left promiscuous mode [ 900.318929][ T5612] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 900.332396][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.365613][ T5612] usb 5-1: config 0 descriptor?? [ 900.397566][ T5612] cp210x 5-1:0.0: cp210x converter detected [ 900.670624][T21129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.706063][T21129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.719721][ T5278] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 900.869363][ T5612] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 900.876961][ T5612] cp210x 5-1:0.0: querying part number failed [ 900.885950][ T5612] usb 5-1: cp210x converter now attached to ttyUSB0 [ 900.925835][ T5612] usb 5-1: USB disconnect, device number 110 [ 900.925929][ T5278] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 900.956674][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 900.956993][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 900.985169][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 900.988286][ T5612] cp210x 5-1:0.0: device disconnected [ 901.039989][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.086005][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.102242][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.113857][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.138413][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.154266][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.165919][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.195285][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.206617][T21139] net_ratelimit: 91 callbacks suppressed [ 901.206635][T21139] dccp_close: ABORT with 32 bytes unread [ 901.211446][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.237086][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.245625][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.262580][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.277236][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.291816][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.309796][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.340991][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.352637][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.373641][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.387394][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.409889][ T5278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 901.426608][ T5278] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 901.445348][ T5278] usb 2-1: config 0 interface 0 has no altsetting 0 [ 901.454169][ T5278] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 901.464436][ T5278] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 901.482667][ T5278] usb 2-1: Product: syz [ 901.502306][ T5278] usb 2-1: Manufacturer: syz [ 901.507060][ T5278] usb 2-1: SerialNumber: syz [ 901.515322][ T5278] usb 2-1: config 0 descriptor?? [ 901.533532][ T5278] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 901.622763][ T5612] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 901.656196][T20162] team0 (unregistering): Port device team_slave_1 removed [ 901.720503][T20162] team0 (unregistering): Port device team_slave_0 removed [ 901.787549][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 901.795215][ T5612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 901.821086][ T5612] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 901.876010][ T5612] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.902129][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.910420][ T5612] usb 3-1: Product: С [ 901.914629][ T5612] usb 3-1: Manufacturer: 긨탞é¿ï­˜ì¼›ê´†å‹°Ç¿ãµ–鼜뤱Ώ㼛䂨⸓삻䓑â½ï»½ç…Œãˆƒì›ä™´í’°à­­é·…䅣퇥 [ 901.959975][ T5612] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 901.966828][ T5612] cdc_ncm 3-1:1.0: bind() failure [ 901.988712][ T5612] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 901.995570][ T5612] cdc_ncm 3-1:1.1: bind() failure [ 902.162519][T21155] RDS: rds_bind could not find a transport for 500::, load rds_tcp or rds_rdma? [ 902.196182][ T4642] usb 3-1: USB disconnect, device number 106 [ 902.202473][ T4618] Bluetooth: hci3: command tx timeout [ 902.799053][T21106] chnl_net:caif_netlink_parms(): no params data found [ 902.876394][ T936] usb 1-1: USB disconnect, device number 90 [ 903.027592][ T5612] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 903.039618][T21162] FAULT_INJECTION: forcing a failure. [ 903.039618][T21162] name failslab, interval 1, probability 0, space 0, times 0 [ 903.052988][T21162] CPU: 1 UID: 0 PID: 21162 Comm: syz.0.3526 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 903.063459][T21162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 903.073518][T21162] Call Trace: [ 903.076814][T21162] [ 903.079753][T21162] dump_stack_lvl+0x241/0x360 [ 903.085217][T21162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.090414][T21162] ? __pfx__printk+0x10/0x10 [ 903.095001][T21162] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 903.100544][T21162] ? __pfx___might_resched+0x10/0x10 [ 903.105824][T21162] should_fail_ex+0x3b0/0x4e0 [ 903.110513][T21162] ? getname_flags+0xb7/0x540 [ 903.115203][T21162] should_failslab+0xac/0x100 [ 903.119878][T21162] ? getname_flags+0xb7/0x540 [ 903.124549][T21162] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 903.129941][T21162] getname_flags+0xb7/0x540 [ 903.134447][T21162] user_path_at+0x24/0x60 [ 903.138773][T21162] __se_sys_mount+0x297/0x3c0 [ 903.143448][T21162] ? __pfx___se_sys_mount+0x10/0x10 [ 903.148651][T21162] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 903.155258][T21162] ? __ia32_sys_mount+0x20/0xc0 [ 903.160119][T21162] __do_fast_syscall_32+0xb4/0x110 [ 903.165260][T21162] ? exc_page_fault+0x590/0x8c0 [ 903.170114][T21162] do_fast_syscall_32+0x34/0x80 [ 903.174971][T21162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 903.181392][T21162] RIP: 0023:0xf7f33579 [ 903.185456][T21162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 903.205062][T21162] RSP: 002b:00000000f569556c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 903.213661][T21162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 903.221633][T21162] RDX: 0000000020002100 RSI: 0000000000000000 RDI: 0000000020000080 [ 903.229604][T21162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 903.237657][T21162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 903.245650][T21162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 903.253638][T21162] [ 903.256872][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.297599][T21153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 903.306454][T21153] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 903.363844][ T5612] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 903.406477][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.450868][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 903.453958][ T5612] usb 3-1: config 0 descriptor?? [ 903.474261][T21153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 903.484305][T21153] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 903.503830][ T5612] cp210x 3-1:0.0: cp210x converter detected [ 903.517460][T21106] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.537397][T21106] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.544671][T21106] bridge_slave_0: entered allmulticast mode [ 903.561791][ T4642] usb 2-1: USB disconnect, device number 113 [ 903.566507][T21106] bridge_slave_0: entered promiscuous mode [ 903.619272][ T4642] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 903.706253][T21153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 903.710218][T21106] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.724940][T21158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.730046][T21153] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 903.741951][T21106] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.749089][T21173] syz.1.3528: attempt to access beyond end of device [ 903.749089][T21173] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 903.767949][T21106] bridge_slave_1: entered allmulticast mode [ 903.775302][T21106] bridge_slave_1: entered promiscuous mode [ 903.796540][T21158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.941375][T21106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.983677][T21106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.156467][T21153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 904.166352][T21153] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 904.202236][T21106] team0: Port device team_slave_0 added [ 904.222741][ T5612] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 904.235875][ T5612] cp210x 3-1:0.0: querying part number failed [ 904.243178][T21106] team0: Port device team_slave_1 added [ 904.260986][ T5612] usb 3-1: cp210x converter now attached to ttyUSB0 [ 904.278794][ T4618] Bluetooth: hci3: command tx timeout [ 904.297827][ T5612] usb 3-1: USB disconnect, device number 107 [ 904.316505][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 904.338570][ T5612] cp210x 3-1:0.0: device disconnected [ 904.447167][T21153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 904.448929][T21106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.455927][T21153] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 904.466301][T21106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.500668][T21106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.545902][T21106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.564639][T21106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.613356][T21106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.687767][T18427] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 904.694618][T21106] hsr_slave_0: entered promiscuous mode [ 904.704875][T21106] hsr_slave_1: entered promiscuous mode [ 904.716518][T21106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.733788][T21106] Cannot create hsr debugfs directory [ 904.791356][T21197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3534'. [ 904.827748][T18427] usb 2-1: device descriptor read/64, error -71 [ 905.078334][T20552] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 905.098585][T18427] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 905.237561][T18427] usb 2-1: device descriptor read/64, error -71 [ 905.281959][T20552] usb 5-1: unable to get BOS descriptor or descriptor too short [ 905.314420][T20552] usb 5-1: not running at top speed; connect to a high speed hub [ 905.371405][T20552] usb 5-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 905.377671][T18427] usb usb2-port1: attempt power cycle [ 905.398257][T20552] usb 5-1: config 219 interface 0 has no altsetting 0 [ 905.405098][T20552] usb 5-1: config 219 interface 0 has no altsetting 1 [ 905.458066][T20552] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 905.473161][T20552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.502317][T20552] usb 5-1: Product: ᄸኼ裑놃读镧酬䩲侑ˆㅞ斟谛ꮵê´åŠ‘å°’ë­¿ã«…â¿èŸá˜î‰ºç–¤î¼ã„¨è‚–à³¹ï©ì°•崸鬨ẗ꘺늱î¡ë»¹æ·ì´¹ç„佡爪—㽩稂â­ì¾¡î‹žè¸Šå©‹ê‰²ì¤¯â†ŸïŽ³á”¼æ³ç¨æ¢ï•– [ 905.567358][T20552] usb 5-1: Manufacturer: 鬚ቒ涱邏鴥ᑦ肂ꎣ먈㢚횞蛕䮌è†á¼žàº®å¡ˆëœ¢äª ì—§î›ºç¹ºæ›”觼唛í’鑼ᾜ묭㵓⑒ç¨êŽ•æ§‘é¿—ì°¾à½‘ã€¸èš»ï»ˆá¿¶á ·å»¢á²™æšå‘œÒ¤ä˜€ç¨¹é¯™ç’·è“¸áㄤ࿔䈯콄ᾄﲲ᎚ê·åŠ£î†ŸíŸ“ç’£ï‚’à¡¦ä²¸å¿Œæ¸Ðå¹¤à –îŽœé¨–æˆŽïŠ‘á“¥Ãæ”€ã…¨ïª‡ïª¯å ¾ê¾”êŠÒ¸ì±§ì˜žì¹µç¥ã±»é•‹à³á­ë€”룀䳎䘷尦 [ 905.598666][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.658982][T20552] usb 5-1: SerialNumber: Ð’ [ 905.692924][T21222] syz.2.3539: attempt to access beyond end of device [ 905.692924][T21222] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 905.738381][T18427] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 905.777600][ T5612] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 905.790233][T18427] usb 2-1: device descriptor read/8, error -71 [ 905.820554][T21106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 905.843520][T21106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 905.861537][T21106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 905.879452][T21106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 905.911051][T21197] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3534'. [ 905.970093][ T5612] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 906.000071][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.022014][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3540'. [ 906.039643][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.044334][T20552] usb 5-1: selecting invalid altsetting 0 [ 906.067140][T18427] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 906.083415][T20552] usb 5-1: selecting invalid altsetting 0 [ 906.123536][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.137007][T18427] usb 2-1: device descriptor read/8, error -71 [ 906.150373][T20552] usb 5-1: USB disconnect, device number 111 [ 906.164111][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.182867][T21106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.190433][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.241658][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.251178][T21106] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.264299][T18427] usb usb2-port1: unable to enumerate USB device [ 906.274937][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.312670][T20162] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.319857][T20162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.348139][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.378500][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.385679][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.389697][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.424838][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.430384][ T7184] udevd[7184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.445808][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.494686][T21106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 906.510756][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.552101][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.584785][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.622007][T21106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.635061][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.644583][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.658957][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.670774][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.679762][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.694999][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.726369][T21106] veth0_vlan: entered promiscuous mode [ 906.727023][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.761546][T21106] veth1_vlan: entered promiscuous mode [ 906.786305][ T5612] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 906.835727][T21106] veth0_macvtap: entered promiscuous mode [ 906.854079][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 906.895301][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 906.896661][T21106] veth1_macvtap: entered promiscuous mode [ 906.907508][ T5612] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 906.923147][ T5612] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 906.938983][ T5612] usb 1-1: Product: syz [ 906.943507][ T5612] usb 1-1: Manufacturer: syz [ 906.954099][ T5612] usb 1-1: SerialNumber: syz [ 906.955684][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.980257][ T5612] usb 1-1: config 0 descriptor?? [ 906.980704][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.997164][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.017344][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.027215][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.039783][ T5612] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 907.053930][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.067492][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.078159][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.088099][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.098835][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.110680][T21106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.132281][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.143531][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.154523][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.165229][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.175287][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.185803][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.195756][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.206375][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.216389][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.226954][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.239794][T21106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.289036][T21106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.298028][T21106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.327442][T21106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.341225][T21106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.390927][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 907.429934][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 907.644560][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 908.114401][T20162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.114426][T20162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.221390][T20158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.251825][T20158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.428828][ C0] usb 1-1: yurex_control_callback - control failed: -2 [ 908.504913][ T9] usb 1-1: USB disconnect, device number 91 [ 908.529893][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 908.538596][T20552] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 908.646556][T21280] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3512'. [ 908.731841][T20552] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 908.752297][T20552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.778277][T20552] usb 3-1: config 0 descriptor?? [ 908.795197][T20552] cp210x 3-1:0.0: cp210x converter detected [ 909.009831][T21275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.040637][T21275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.175345][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 909.643533][T20552] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 909.673738][T20552] cp210x 3-1:0.0: querying part number failed [ 909.700427][T20552] usb 3-1: cp210x converter now attached to ttyUSB0 [ 909.727000][T20552] usb 3-1: USB disconnect, device number 108 [ 909.745693][T20552] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 909.756135][T20552] cp210x 3-1:0.0: device disconnected [ 910.025323][T21313] syz.0.3549: attempt to access beyond end of device [ 910.025323][T21313] loop198: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 910.438955][T21333] ptrace attach of ""[21335] was attempted by "./syz-executor exec"[21333] [ 910.625829][T21262] coredump: 31(syz.1.3544): interrupted: fatal signal pending [ 910.647588][ T5612] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 910.668119][T21262] coredump: 31(syz.1.3544): written to core: VMAs: 31, size 97292288; core: 41747842 bytes, pos 79069184 [ 910.836239][ T5612] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 910.891447][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.964977][ T5612] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 911.031278][ T5612] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.129134][ T5612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 911.205841][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.272219][ T5612] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 911.345722][ T5612] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.441076][ T5612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 911.504682][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.572978][ T5612] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 911.640174][ T5612] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.747306][ C1] sched: DL replenish lagged too much [ 948.653941][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 948.675644][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 952.044693][ C1] kworker/1:0: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 952.058690][ C1] CPU: 1 UID: 0 PID: 20552 Comm: kworker/1:0 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 952.069189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 952.079238][ C1] Workqueue: events nsim_dev_trap_report_work [ 952.085302][ C1] Call Trace: [ 952.088573][ C1] [ 952.091409][ C1] dump_stack_lvl+0x241/0x360 [ 952.096084][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.101276][ C1] ? __pfx__printk+0x10/0x10 [ 952.105861][ C1] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 952.112269][ C1] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 952.118769][ C1] warn_alloc+0x278/0x410 [ 952.123097][ C1] ? seqcount_lockdep_reader_access+0x13b/0x1e0 [ 952.129329][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 952.134175][ C1] ? wakeup_kswapd+0x390/0x890 [ 952.138939][ C1] __alloc_pages_slowpath+0x2339/0x2390 [ 952.144488][ C1] ? get_page_from_freelist+0x4ee/0x2f10 [ 952.150126][ C1] ? __pfx___alloc_pages_slowpath+0x10/0x10 [ 952.156021][ C1] ? mark_lock+0x9a/0x360 [ 952.160378][ C1] __alloc_pages_noprof+0x43e/0x6c0 [ 952.165570][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 952.171298][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 952.176759][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 952.182737][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 952.188715][ C1] ? alloc_pages_noprof+0x43/0x170 [ 952.193843][ C1] alloc_slab_page+0x6a/0x130 [ 952.198514][ C1] allocate_slab+0x1c0/0x2f0 [ 952.203093][ C1] ___slab_alloc+0xcd1/0x14b0 [ 952.207765][ C1] ? skb_clone+0x20c/0x390 [ 952.212176][ C1] ? skb_clone+0x20c/0x390 [ 952.216576][ C1] __slab_alloc+0x58/0xa0 [ 952.220901][ C1] ? skb_clone+0x20c/0x390 [ 952.225311][ C1] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 952.230857][ C1] skb_clone+0x20c/0x390 [ 952.235088][ C1] ? dev_queue_xmit_nit+0x220/0xc10 [ 952.240304][ C1] dev_queue_xmit_nit+0x419/0xc10 [ 952.245355][ C1] ? dev_queue_xmit_nit+0x2b/0xc10 [ 952.250466][ C1] ? validate_xmit_skb+0x9f9/0x1120 [ 952.255659][ C1] dev_hard_start_xmit+0x15f/0x7e0 [ 952.260787][ C1] ? __pfx_validate_xmit_skb+0x10/0x10 [ 952.266274][ C1] __dev_queue_xmit+0x1b58/0x3e80 [ 952.271335][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 952.276442][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 952.281815][ C1] ? mark_lock+0x9a/0x360 [ 952.286150][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 952.292137][ C1] ? ip_finish_output2+0xa14/0x1390 [ 952.297336][ C1] ? ip_finish_output2+0x45f/0x1390 [ 952.302527][ C1] ip_finish_output2+0xd41/0x1390 [ 952.307545][ C1] ? ip_finish_output2+0x45f/0x1390 [ 952.312739][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 952.318212][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 952.318667][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.323070][ C1] ? __ip_finish_output+0x349/0x400 [ 952.333419][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.338572][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 952.349097][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.354867][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 952.360943][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.367226][ C1] ? synproxy_pernet+0x45/0x270 [ 952.373838][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.378630][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 952.388458][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.393620][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 952.404114][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.409797][ C1] ? validate_chain+0x11e/0x5920 [ 952.409826][ C1] ? nf_ip_checksum+0x13a/0x500 [ 952.415871][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.420790][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 952.420830][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 952.425771][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.432176][ C1] ? __pfx_validate_chain+0x10/0x10 [ 952.432214][ C1] nft_do_chain+0x4ad/0x1da0 [ 952.437518][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.443210][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 952.453045][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.458183][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 952.458243][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 952.462784][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.473264][ C1] nft_do_chain_inet+0x418/0x6b0 [ 952.473303][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 952.478433][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.484438][ C1] ? ipt_do_table+0x312/0x1860 [ 952.490056][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.494991][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 952.501487][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.506373][ C1] nf_hook_slow+0xc3/0x220 [ 952.511882][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.521723][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 952.521751][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 952.526579][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.536974][ C1] NF_HOOK+0x29e/0x450 [ 952.537006][ C1] ? NF_HOOK+0x9a/0x450 [ 952.542470][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.548576][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 952.548604][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 952.553082][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.559662][ C1] ? ip_rcv_finish+0x406/0x560 [ 952.559688][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 952.559706][ C1] NF_HOOK+0x3a4/0x450 [ 952.565667][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.571625][ C1] ? __lock_acquire+0x1384/0x2050 [ 952.571662][ C1] ? NF_HOOK+0x9a/0x450 [ 952.581548][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.585496][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 952.589661][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.600105][ C1] ? ip_rcv_core+0x801/0xd10 [ 952.600136][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 952.604710][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.610703][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 952.610734][ C1] __netif_receive_skb+0x2bf/0x650 [ 952.616778][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.621526][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 952.621561][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 952.626747][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.630708][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 952.630743][ C1] ? __pfx_lock_release+0x10/0x10 [ 952.637222][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.642232][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 952.646372][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.656160][ C1] process_backlog+0x662/0x15b0 [ 952.656196][ C1] ? process_backlog+0x33b/0x15b0 [ 952.660778][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.671234][ C1] ? __pfx_process_backlog+0x10/0x10 [ 952.671265][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 952.675974][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 952.680930][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 952.680969][ C1] __napi_poll+0xcb/0x490 [ 952.680996][ C1] net_rx_action+0x89b/0x1240 [ 952.681036][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 952.687547][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 952.692023][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 952.697094][ C0] node 0: slabs: 1549, objs: 24784, free: 0 [ 952.703591][ C1] handle_softirqs+0x2c5/0x980 [ 952.703629][ C1] ? do_softirq+0x11b/0x1e0 [ 952.708646][ C0] node 1: slabs: 42488, objs: 679808, free: 13 [ 952.714265][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 952.724329][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.730029][ C1] do_softirq+0x11b/0x1e0 [ 952.730063][ C1] [ 952.730073][ C1] [ 952.730083][ C1] ? __pfx_do_softirq+0x10/0x10 [ 952.735523][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.746001][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 952.746041][ C1] ? rcu_is_watching+0x15/0xb0 [ 952.751156][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.757179][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 952.762057][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.767034][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 952.773567][ C0] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 952.778792][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 952.778826][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 952.784825][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 952.795502][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 952.795536][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 952.801859][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 952.806159][ C1] ? process_scheduled_works+0x976/0x1850 [ 952.810820][ C0] node 0: slabs: 5975, objs: 71700, free: 0 [ 952.815881][ C1] process_scheduled_works+0xa63/0x1850 [ 952.825968][ C0] node 1: slabs: 111775, objs: 1341300, free: 34 [ 952.832261][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 952.838325][ C0] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 952.843054][ C1] ? assign_work+0x364/0x3d0 [ 952.917410][ C0] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 952.922481][ C1] worker_thread+0x870/0xd30 [ 952.928352][ C0] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 952.935449][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 953.044763][ C1] ? __kthread_parkme+0x169/0x1d0 [ 953.049795][ C1] ? __pfx_worker_thread+0x10/0x10 [ 953.054904][ C1] kthread+0x2f0/0x390 [ 953.059251][ C1] ? __pfx_worker_thread+0x10/0x10 [ 953.064354][ C1] ? __pfx_kthread+0x10/0x10 [ 953.068933][ C1] ret_from_fork+0x4b/0x80 [ 953.073340][ C1] ? __pfx_kthread+0x10/0x10 [ 953.077917][ C1] ret_from_fork_asm+0x1a/0x30 [ 953.082688][ C1] [ 953.085704][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.091798][ C1] Mem-Info: [ 953.094918][ C1] active_anon:12524 inactive_anon:2029 isolated_anon:0 [ 953.094918][ C1] active_file:11816 inactive_file:929 isolated_file:0 [ 953.094918][ C1] unevictable:768 dirty:1708 writeback:25 [ 953.094918][ C1] slab_reclaimable:5395 slab_unreclaimable:562916 [ 953.094918][ C1] mapped:34155 shmem:13828 pagetables:752 [ 953.094918][ C1] sec_pagetables:0 bounce:0 [ 953.094918][ C1] kernel_misc_reclaimable:0 [ 953.094918][ C1] free:8122 free_pcp:4560 free_cma:0 [ 953.140281][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.146317][ C1] Node 0 active_anon:5764kB inactive_anon:8108kB active_file:13208kB inactive_file:3048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86424kB dirty:796kB writeback:100kB shmem:10636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9924kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no [ 953.178636][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.184673][ C1] Node 1 active_anon:44332kB inactive_anon:8kB active_file:34056kB inactive_file:668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:50196kB dirty:6036kB writeback:0kB shmem:44676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:344kB pagetables:500kB sec_pagetables:0kB all_unreclaimable? no [ 953.216472][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.222504][ C1] Node 0 DMA free:1360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:1532kB inactive_anon:1536kB active_file:4672kB inactive_file:1096kB unevictable:0kB writepending:264kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:24kB free_cma:0kB [ 953.250993][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.257015][ C1] lowmem_reserve[]: 0 2467 2468 0 0 [ 953.262305][ C1] Node 0 DMA32 free:11016kB boost:28672kB min:62900kB low:71456kB high:80012kB reserved_highatomic:2048KB active_anon:4232kB inactive_anon:6572kB active_file:8528kB inactive_file:2104kB unevictable:1536kB writepending:632kB present:3129332kB managed:2554524kB mlocked:0kB bounce:0kB free_pcp:8740kB local_pcp:8220kB free_cma:0kB [ 953.292973][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.298993][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 953.303712][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 953.330206][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.336289][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 953.341073][ C1] Node 1 Normal free:20112kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:44332kB inactive_anon:8kB active_file:34056kB inactive_file:668kB unevictable:1536kB writepending:6036kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:9596kB local_pcp:9280kB free_cma:0kB [ 953.371269][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.377464][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 953.382250][ C1] Node 0 DMA: 41*4kB (M) 34*8kB (M) 13*16kB (M) 13*32kB (M) 2*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1316kB [ 953.396439][ C1] Node 0 DMA32: 388*4kB (UME) 122*8kB (UME) 154*16kB (UME) 515*32kB (UME) 54*64kB (UME) 14*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26720kB [ 953.412373][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 953.423975][ C1] Node 1 Normal: 129*4kB (UM) 74*8kB (UM) 64*16kB (UME) 96*32kB (UME) 38*64kB (UME) 10*128kB (ME) 13*256kB (UME) 2*512kB (UE) 2*1024kB (E) 1*2048kB (E) 1*4096kB (M) = 21460kB [ 953.441497][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 953.451155][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 953.460564][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 953.467372][ T5612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 953.470170][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 953.486145][ C1] 26820 total pagecache pages [ 953.490936][ C1] 750 pages in swap cache [ 953.495332][ C1] Free swap = 104284kB [ 953.499560][ C1] Total swap = 124996kB [ 953.503774][ C1] 2097051 pages RAM [ 953.507635][ C1] 0 pages HighMem/MovableOnly [ 953.512336][ C1] 427082 pages reserved [ 953.516576][ C1] 0 pages cma reserved [ 954.951155][T21335] coredump: 99(syz.0.3553): interrupted: fatal signal pending [ 955.070461][T21335] coredump: 99(syz.0.3553): written to core: VMAs: 3, size 33554432; core: 10340809 bytes, pos 10342400 [ 958.310015][T21362] blktrace: Concurrent blktraces are not allowed on nbd2 [ 958.957454][ T5612] usb 4-1: unable to read config index 3 descriptor/start: -110 [ 958.965224][ T5612] usb 4-1: can't read configurations, error -110 [ 959.267430][ T5612] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 959.407795][ T5612] usb 4-1: device descriptor read/64, error -32 [ 959.462753][T19493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 959.477649][T19493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 959.486941][T19493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 959.495782][T19493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 959.504074][T19493] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 959.512165][T19493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 959.557698][ T5612] usb usb4-port1: attempt power cycle [ 961.564037][T19493] Bluetooth: hci4: command tx timeout [ 963.034174][T21290] coredump: 4(syz.3.3512): written to core: VMAs: 31, size 99389440; core: 62066366 bytes, pos 99393536 [ 963.637697][T19493] Bluetooth: hci4: command tx timeout [ 963.791095][T20162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.910391][T20162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.032212][T20162] bond0 (unregistering): Released all slaves [ 964.111209][T20162] bond1 (unregistering): Released all slaves [ 965.741530][T19493] Bluetooth: hci4: command tx timeout [ 967.813146][T19493] Bluetooth: hci4: command tx timeout [ 967.843775][ T4618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 967.873606][ T4618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 967.888141][ T4618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 967.896133][ T4618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 967.904508][ T4618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 967.929190][ T4618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.190229][T19493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.203253][T19493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.214812][T19493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.223210][T19493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.231357][T19493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 968.239120][T19493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 968.358684][ T4618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 968.388997][ T4618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 968.400242][ T4618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 968.408385][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 968.419502][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 968.426863][ T4618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 968.616646][T19493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 968.630216][T19493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 968.639301][T19493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 968.647704][T19493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 968.656164][T19493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 968.669398][T19493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 970.037815][T19493] Bluetooth: hci0: command tx timeout [ 970.277674][T19493] Bluetooth: hci1: command tx timeout [ 970.518328][T19493] Bluetooth: hci2: command tx timeout [ 970.757471][T19493] Bluetooth: hci3: command tx timeout [ 972.117992][T19493] Bluetooth: hci0: command tx timeout [ 972.357508][T19493] Bluetooth: hci1: command tx timeout [ 972.597526][T19493] Bluetooth: hci2: command tx timeout [ 972.837441][T19493] Bluetooth: hci3: command tx timeout [ 974.197786][T19493] Bluetooth: hci0: command tx timeout [ 974.437417][T19493] Bluetooth: hci1: command tx timeout [ 974.677609][T19493] Bluetooth: hci2: command tx timeout [ 974.918303][T19493] Bluetooth: hci3: command tx timeout [ 976.277609][T19493] Bluetooth: hci0: command tx timeout [ 976.517504][T19493] Bluetooth: hci1: command tx timeout [ 976.757533][T19493] Bluetooth: hci2: command tx timeout [ 976.997495][T19493] Bluetooth: hci3: command tx timeout [ 993.244114][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.260489][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1018.713368][ T4618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1018.734260][ T4618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1018.779342][ T4618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1018.853153][ T4618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1018.923917][ T4618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1018.940244][ T4618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1021.077622][ T4618] Bluetooth: hci5: command tx timeout [ 1023.157617][ T4618] Bluetooth: hci5: command tx timeout [ 1025.238023][ T4618] Bluetooth: hci5: command tx timeout [ 1027.213023][T19493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1027.255797][T19493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1027.266460][T19493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1027.278799][T19493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1027.286802][T19493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1027.297889][T19493] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1027.329775][T19493] Bluetooth: hci5: command tx timeout [ 1027.399044][ T4618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1027.410552][ T4618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1027.418841][ T4618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1027.431099][ T4618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1027.448233][ T4618] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1027.460271][ T4618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1027.623900][T19493] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1027.641912][T19493] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1027.655498][T19493] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1027.664049][T19493] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1027.673177][T19493] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1027.680937][T19493] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1028.043842][ T4618] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1028.067555][ T4618] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1028.079126][ T4618] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1028.088816][ T4618] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1028.096555][ T4618] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1028.104375][ T4618] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1029.397560][ T4618] Bluetooth: hci6: command tx timeout [ 1029.557662][ T4618] Bluetooth: hci7: command tx timeout [ 1029.717809][ T4618] Bluetooth: hci8: command tx timeout [ 1030.197665][ T4618] Bluetooth: hci9: command tx timeout [ 1031.477534][ T4618] Bluetooth: hci6: command tx timeout [ 1031.637494][ T4618] Bluetooth: hci7: command tx timeout [ 1031.797711][ T4618] Bluetooth: hci8: command tx timeout [ 1032.277467][ T4618] Bluetooth: hci9: command tx timeout [ 1033.557543][ T4618] Bluetooth: hci6: command tx timeout [ 1033.717452][ T4618] Bluetooth: hci7: command tx timeout [ 1033.877649][ T4618] Bluetooth: hci8: command tx timeout [ 1034.358117][ T4618] Bluetooth: hci9: command tx timeout [ 1035.637435][ T4618] Bluetooth: hci6: command tx timeout [ 1035.797622][ T4618] Bluetooth: hci7: command tx timeout [ 1035.957734][ T4618] Bluetooth: hci8: command tx timeout [ 1036.437511][ T4618] Bluetooth: hci9: command tx timeout [ 1054.680205][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.686565][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.367526][T19493] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1079.381846][T19493] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1079.391524][T19493] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1079.403378][T19493] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1079.413244][T19493] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1079.427520][T19493] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1081.477533][ T4618] Bluetooth: hci10: command tx timeout [ 1082.357638][ T4618] Bluetooth: hci4: command 0x0406 tx timeout [ 1083.557418][T19493] Bluetooth: hci10: command tx timeout [ 1085.637707][T19493] Bluetooth: hci10: command tx timeout [ 1087.724168][T19493] Bluetooth: hci10: command tx timeout [ 1087.991446][ T4618] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1088.003027][ T4618] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1088.012104][ T4618] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1088.023285][ T4618] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1088.031851][ T4618] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1088.068360][ T5234] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1088.080401][ T5234] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1088.106446][T19493] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1088.117019][T19493] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1088.125834][T19493] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1088.133954][T19493] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1088.142213][T19493] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1088.257481][ T4618] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1088.276731][ T4618] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1088.289306][ T4618] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1088.299342][ T4618] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1088.319790][ T4618] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1088.327349][ T4618] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1088.785763][T19493] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1088.798025][T19493] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1088.808267][T19493] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1088.816332][T19493] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1088.827131][T19493] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1088.835006][T19493] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1090.127905][T19493] Bluetooth: hci11: command tx timeout [ 1090.197577][T19493] Bluetooth: hci12: command tx timeout [ 1090.437683][T19493] Bluetooth: hci13: command tx timeout [ 1090.917670][T21489] Bluetooth: hci14: command tx timeout [ 1092.197641][T21489] Bluetooth: hci11: command tx timeout [ 1092.277600][T21489] Bluetooth: hci12: command tx timeout [ 1092.517521][T21489] Bluetooth: hci13: command tx timeout [ 1092.623493][T21489] Bluetooth: hci3: command 0x0406 tx timeout [ 1092.631674][T21489] Bluetooth: hci0: command 0x0406 tx timeout [ 1092.638186][T21489] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.644240][T21489] Bluetooth: hci2: command 0x0406 tx timeout [ 1092.997514][T19493] Bluetooth: hci14: command tx timeout [ 1094.277576][T19493] Bluetooth: hci11: command tx timeout [ 1094.357642][T19493] Bluetooth: hci12: command tx timeout [ 1094.597526][T19493] Bluetooth: hci13: command tx timeout [ 1095.077447][T19493] Bluetooth: hci14: command tx timeout [ 1096.357548][T19493] Bluetooth: hci11: command tx timeout [ 1096.437465][T19493] Bluetooth: hci12: command tx timeout [ 1096.677504][T19493] Bluetooth: hci13: command tx timeout [ 1097.157646][T19493] Bluetooth: hci14: command tx timeout [ 1113.561064][ T30] INFO: task kworker/u8:4:66 blocked for more than 143 seconds. [ 1113.575720][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1113.585656][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1113.622896][ T30] task:kworker/u8:4 state:D stack:15416 pid:66 tgid:66 ppid:2 flags:0x00004000 [ 1113.681444][ T30] Workqueue: writeback wb_workfn (flush-250:0) [ 1113.714044][ T30] Call Trace: [ 1113.767479][ T30] [ 1113.770493][ T30] __schedule+0x1893/0x4b50 [ 1113.775068][ T30] ? __pfx___schedule+0x10/0x10 [ 1113.867396][ T30] ? __blk_flush_plug+0x449/0x500 [ 1113.872503][ T30] ? __pfx_lock_release+0x10/0x10 [ 1113.921294][ T30] ? __blk_flush_plug+0x449/0x500 [ 1113.926408][ T30] ? kthread_data+0x52/0xd0 [ 1113.957666][ T30] ? schedule+0x90/0x320 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1113.967483][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1113.987434][ T30] ? schedule+0x90/0x320 [ 1113.991843][ T30] schedule+0x14b/0x320 [ 1113.996045][ T30] io_schedule+0x8d/0x110 [ 1114.054833][ T30] rq_qos_wait+0x2ff/0x420 [ 1114.074882][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1114.107317][ T30] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 1114.112586][ T30] ? __pfx_rq_qos_wait+0x10/0x10 [ 1114.157559][ T30] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 1114.163354][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1114.224783][ T30] ? blk_mq_sched_bio_merge+0x29e/0x350 [ 1114.241514][ T30] ? __pfx_lock_release+0x10/0x10 [ 1114.246614][ T30] wbt_wait+0x373/0x5b0 [ 1114.286769][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 1114.306803][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1114.337426][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 1114.342202][ T30] __rq_qos_throttle+0x68/0xb0 [ 1114.347007][ T30] blk_mq_submit_bio+0x6d3/0x23d0 [ 1114.405093][ T30] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1114.447331][ T30] __submit_bio+0x1c1/0x560 [ 1114.452008][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1114.457082][ T30] ? blk_add_trace_bio+0x2c/0x2f0 [ 1114.512840][ T30] ? blk_add_trace_bio+0x1e6/0x2f0 [ 1114.542291][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1114.570190][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 1114.576247][ T30] ? __pfx___might_resched+0x10/0x10 [ 1114.617424][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1114.623686][ T30] __block_write_full_folio+0x7ed/0xf50 [ 1114.663792][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1114.673619][ T30] write_cache_pages+0xd0/0x230 [ 1114.696848][ T30] ? __pfx_block_write_full_folio+0x10/0x10 [ 1114.717450][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1114.722901][ T30] ? __pfx_write_cache_pages+0x10/0x10 [ 1114.746480][ T30] ? blk_start_plug+0x53/0x1b0 [ 1114.761510][ T30] blkdev_writepages+0xb1/0x110 [ 1114.766429][ T30] ? __pfx_blkdev_writepages+0x10/0x10 [ 1114.792801][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1114.827474][ T30] ? __pfx_blkdev_writepages+0x10/0x10 [ 1114.845286][ T30] do_writepages+0x35d/0x870 [ 1114.865048][ T30] ? __pfx_do_writepages+0x10/0x10 [ 1114.875785][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1114.894433][ T30] ? writeback_sb_inodes+0x59b/0x1370 [ 1114.910165][ T30] ? __pfx_lock_release+0x10/0x10 [ 1114.915269][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1114.937368][ T30] __writeback_single_inode+0x14f/0x10d0 [ 1114.943092][ T30] ? wbc_attach_and_unlock_inode+0x565/0x580 [ 1114.974069][ T30] writeback_sb_inodes+0x812/0x1370 [ 1114.986194][ T30] ? mark_lock+0x9a/0x360 [ 1115.004370][ T30] ? __lock_acquire+0x1384/0x2050 [ 1115.017369][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1115.023138][ T30] ? __pfx_move_expired_inodes+0x10/0x10 [ 1115.046303][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1115.062054][ T30] __writeback_inodes_wb+0x11b/0x260 [ 1115.081415][ T30] wb_writeback+0x42f/0xbd0 [ 1115.086011][ T30] ? queue_io+0x381/0x5a0 [ 1115.107429][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 1115.112558][ T30] wb_workfn+0xba1/0x1090 [ 1115.116966][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 1115.144540][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1115.163000][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1115.187208][ T30] ? process_scheduled_works+0x976/0x1850 [ 1115.193319][ T30] process_scheduled_works+0xa63/0x1850 [ 1115.216985][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1115.233709][ T30] ? assign_work+0x364/0x3d0 [ 1115.247613][ T30] worker_thread+0x870/0xd30 [ 1115.252303][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1115.276220][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1115.291333][ T30] kthread+0x2f0/0x390 [ 1115.295498][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1115.317510][ T30] ? __pfx_kthread+0x10/0x10 [ 1115.322202][ T30] ret_from_fork+0x4b/0x80 [ 1115.326654][ T30] ? __pfx_kthread+0x10/0x10 [ 1115.355821][ T30] ret_from_fork_asm+0x1a/0x30 [ 1115.368162][ T30] [ 1115.376419][ T30] INFO: task jbd2/sda1-8:4643 blocked for more than 145 seconds. [ 1115.397568][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1115.404911][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1115.443770][ T30] task:jbd2/sda1-8 state:D stack:24208 pid:4643 tgid:4643 ppid:2 flags:0x00004000 [ 1115.468471][ T30] Call Trace: [ 1115.471850][ T30] [ 1115.474804][ T30] __schedule+0x1893/0x4b50 [ 1115.490109][ T30] ? __pfx___schedule+0x10/0x10 [ 1115.495039][ T30] ? __pfx_lock_release+0x10/0x10 [ 1115.533136][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1115.543635][ T30] ? schedule+0x90/0x320 [ 1115.565554][ T30] schedule+0x14b/0x320 [ 1115.577317][ T30] io_schedule+0x8d/0x110 [ 1115.581717][ T30] bit_wait_io+0x12/0xd0 [ 1115.585993][ T30] __wait_on_bit+0xb0/0x2f0 [ 1115.621859][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 1115.626883][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 1115.646658][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 1115.667400][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1115.673473][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1115.697352][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 1115.703816][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1115.736847][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1115.746696][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1115.766360][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 1115.787401][ T30] ? __timer_delete_sync+0x15c/0x310 [ 1115.792769][ T30] ? __timer_delete_sync+0x25d/0x310 [ 1115.837401][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 1115.843151][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1115.861404][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1115.885002][ T30] ? prepare_to_wait+0x186/0x210 [ 1115.896917][ T30] ? finish_wait+0xd4/0x1e0 [ 1115.907497][ T30] kjournald2+0x41c/0x7b0 [ 1115.911888][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1115.937491][ T30] ? __pfx_kjournald2+0x10/0x10 [ 1115.942414][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1115.967187][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1115.977357][ T30] ? __pfx_kjournald2+0x10/0x10 [ 1115.982322][ T30] kthread+0x2f0/0x390 [ 1115.986435][ T30] ? __pfx_kjournald2+0x10/0x10 [ 1116.014239][ T30] ? __pfx_kthread+0x10/0x10 [ 1116.030479][ T30] ret_from_fork+0x4b/0x80 [ 1116.034970][ T30] ? __pfx_kthread+0x10/0x10 [ 1116.057493][ T30] ret_from_fork_asm+0x1a/0x30 [ 1116.062621][ T30] [ 1116.078769][ T30] INFO: task syz-executor:19423 blocked for more than 145 seconds. [ 1116.086738][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1116.117347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.126126][ T30] task:syz-executor state:D stack:20704 pid:19423 tgid:19423 ppid:1 flags:0x20004006 [ 1116.163435][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.169860][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.186206][ T30] Call Trace: [ 1116.203158][ T30] [ 1116.206160][ T30] __schedule+0x1893/0x4b50 [ 1116.221549][ T30] ? __pfx___schedule+0x10/0x10 [ 1116.226476][ T30] ? __pfx_lock_release+0x10/0x10 [ 1116.251691][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1116.257238][ T30] ? schedule+0x90/0x320 [ 1116.281286][ T30] schedule+0x14b/0x320 [ 1116.285521][ T30] schedule_preempt_disabled+0x13/0x30 [ 1116.307603][ T30] __mutex_lock+0x6a7/0xd70 [ 1116.312201][ T30] ? __mutex_lock+0x52a/0xd70 [ 1116.316915][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1116.343247][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1116.354235][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1116.364614][ T30] tun_chr_close+0x3b/0x1b0 [ 1116.375394][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1116.382151][ T30] __fput+0x23f/0x880 [ 1116.386211][ T30] task_work_run+0x24f/0x310 [ 1116.397589][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1116.402986][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1116.414660][ T30] ? do_exit+0xa2a/0x27f0 [ 1116.419479][ T30] ? kmem_cache_free+0x1a3/0x420 [ 1116.424462][ T30] ? do_exit+0xa2a/0x27f0 [ 1116.437097][ T30] do_exit+0xa2f/0x27f0 [ 1116.442885][ T30] ? __pfx_do_exit+0x10/0x10 [ 1116.454884][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.462103][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1116.475400][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1116.482238][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1116.494499][ T30] do_group_exit+0x207/0x2c0 [ 1116.500946][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.506202][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1116.517824][ T30] get_signal+0x176f/0x1810 [ 1116.522399][ T30] ? kernel_wait4+0x32d/0x3e0 [ 1116.527120][ T30] ? __pfx_get_signal+0x10/0x10 [ 1116.540938][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1116.546560][ T30] ? __pfx___ia32_compat_sys_wait4+0x10/0x10 [ 1116.558830][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1116.565068][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1116.577330][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1116.582955][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1116.595666][ T30] ? exc_page_fault+0x590/0x8c0 [ 1116.610623][ T30] do_fast_syscall_32+0x34/0x80 [ 1116.615542][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1116.629197][ T30] RIP: 0023:0xf7faf579 [ 1116.633326][ T30] RSP: 002b:00000000f759fd00 EFLAGS: 00000206 ORIG_RAX: 0000000000000072 [ 1116.647348][ T30] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000f759fe08 [ 1116.655383][ T30] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1116.671653][ T30] RBP: 00000000f759fe08 R08: 0000000000000000 R09: 0000000000000000 [ 1116.687143][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1116.695623][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1116.711845][ T30] [ 1116.715225][ T30] INFO: task kworker/u8:2:20162 blocked for more than 146 seconds. [ 1116.723404][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1116.739239][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.753688][ T30] task:kworker/u8:2 state:D stack:21136 pid:20162 tgid:20162 ppid:2 flags:0x00004000 [ 1116.766861][ T30] Workqueue: netns cleanup_net [ 1116.777766][ T30] Call Trace: [ 1116.781087][ T30] [ 1116.784044][ T30] __schedule+0x1893/0x4b50 [ 1116.797761][ T30] ? __pfx___schedule+0x10/0x10 [ 1116.802694][ T30] ? __pfx_lock_release+0x10/0x10 [ 1116.815021][ T30] ? kthread_data+0x52/0xd0 [ 1116.820022][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1116.825198][ T30] ? schedule+0x90/0x320 [ 1116.837405][ T30] schedule+0x14b/0x320 [ 1116.841633][ T30] schedule_timeout+0xb0/0x310 [ 1116.846424][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1116.858582][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1116.864638][ T30] ? wait_for_completion+0x2fe/0x620 [ 1116.877112][ T30] ? wait_for_completion+0x2fe/0x620 [ 1116.884454][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.895601][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1116.904261][ T30] ? wait_for_completion+0x2fe/0x620 [ 1116.913308][ T30] wait_for_completion+0x355/0x620 [ 1116.923302][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1116.934101][ T30] ? __flush_work+0xe7/0xc50 [ 1116.942360][ T30] __flush_work+0xa37/0xc50 [ 1116.946926][ T30] ? __flush_work+0xe7/0xc50 [ 1116.955369][ T30] ? __pfx___flush_work+0x10/0x10 [ 1116.965382][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 1116.974385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1116.984749][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1116.993716][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1117.004171][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 1117.014658][ T30] ? mark_lock+0x9a/0x360 [ 1117.022776][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1117.033805][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1117.044175][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.054744][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1117.064943][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1117.073845][ T30] ? kfree+0x1a1/0x440 [ 1117.082855][ T30] ? macsec_notify+0x66f/0x690 [ 1117.091707][ T30] macsec_notify+0x677/0x690 [ 1117.096515][ T30] ? __pfx_macsec_notify+0x10/0x10 [ 1117.106504][ T30] notifier_call_chain+0x19f/0x3e0 [ 1117.115507][ T30] unregister_netdevice_many_notify+0xedd/0x1da0 [ 1117.125882][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1117.141115][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.146232][ T30] ? up_write+0x1a9/0x590 [ 1117.154344][ T30] unregister_netdevice_queue+0x303/0x370 [ 1117.165505][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1117.175590][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1117.184918][ T30] _cfg80211_unregister_wdev+0x162/0x560 [ 1117.196041][ T30] ieee80211_remove_interfaces+0x4db/0x700 [ 1117.205763][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1117.215745][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 1117.224762][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 1117.236022][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1117.245920][ T30] hwsim_exit_net+0x5c1/0x670 [ 1117.255609][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1117.265836][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 1117.275394][ T30] cleanup_net+0x802/0xcc0 [ 1117.283432][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1117.292428][ T30] ? process_scheduled_works+0x976/0x1850 [ 1117.303264][ T30] process_scheduled_works+0xa63/0x1850 [ 1117.312562][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1117.323970][ T30] ? assign_work+0x364/0x3d0 [ 1117.333633][ T30] worker_thread+0x870/0xd30 [ 1117.342304][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1117.351917][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1117.357004][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1117.370601][ T30] kthread+0x2f0/0x390 [ 1117.374739][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1117.383601][ T30] ? __pfx_kthread+0x10/0x10 [ 1117.391859][ T30] ret_from_fork+0x4b/0x80 [ 1117.396329][ T30] ? __pfx_kthread+0x10/0x10 [ 1117.417394][ T30] ret_from_fork_asm+0x1a/0x30 [ 1117.422240][ T30] [ 1117.428942][ T30] INFO: task syz-executor:20646 blocked for more than 147 seconds. [ 1117.436961][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1117.451218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.464975][ T30] task:syz-executor state:D stack:18104 pid:20646 tgid:20646 ppid:1 flags:0x20004006 [ 1117.483323][ T30] Call Trace: [ 1117.486663][ T30] [ 1117.492533][ T30] __schedule+0x1893/0x4b50 [ 1117.503284][ T30] ? __pfx___schedule+0x10/0x10 [ 1117.509772][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.514843][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1117.528645][ T30] ? schedule+0x90/0x320 [ 1117.532942][ T30] schedule+0x14b/0x320 [ 1117.537149][ T30] schedule_preempt_disabled+0x13/0x30 [ 1117.547325][ T30] __mutex_lock+0x6a7/0xd70 [ 1117.551887][ T30] ? __mutex_lock+0x52a/0xd70 [ 1117.556628][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1117.571649][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1117.576747][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1117.588589][ T30] tun_chr_close+0x3b/0x1b0 [ 1117.593147][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1117.606047][ T30] __fput+0x23f/0x880 [ 1117.611716][ T30] task_work_run+0x24f/0x310 [ 1117.616349][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1117.628906][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1117.634066][ T30] ? do_exit+0xa2a/0x27f0 [ 1117.655045][ T30] ? kmem_cache_free+0x1a3/0x420 [ 1117.661734][ T30] ? do_exit+0xa2a/0x27f0 [ 1117.666120][ T30] do_exit+0xa2f/0x27f0 [ 1117.677685][ T30] ? __pfx_do_exit+0x10/0x10 [ 1117.682328][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1117.695135][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1117.701884][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.715265][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1117.725330][ T30] do_group_exit+0x207/0x2c0 [ 1117.736856][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1117.742442][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1117.754613][ T30] get_signal+0x176f/0x1810 [ 1117.760907][ T30] ? __pfx_get_signal+0x10/0x10 [ 1117.765826][ T30] ? __pfx_vfs_read+0x10/0x10 [ 1117.777389][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1117.783016][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1117.797848][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1117.804058][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1117.812905][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1117.823709][ T30] ? exc_page_fault+0x590/0x8c0 [ 1117.831298][ T30] do_fast_syscall_32+0x34/0x80 [ 1117.836204][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.847298][ T30] RIP: 0023:0xf7f01579 [ 1117.851414][ T30] RSP: 002b:00000000f74efd80 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1117.867338][ T30] RAX: fffffffffffffe00 RBX: 00000000000000f9 RCX: 00000000f74efe54 [ 1117.875361][ T30] RDX: 0000000000000024 RSI: 00000000f738bff4 RDI: 0000000000000000 [ 1117.889053][ T30] RBP: 00000000f74efe54 R08: 0000000000000000 R09: 0000000000000000 [ 1117.897077][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1117.912682][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.923707][ T30] [ 1117.926849][ T30] INFO: task syz-executor:21106 blocked for more than 147 seconds. [ 1117.941179][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1117.951059][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.966585][ T30] task:syz-executor state:D stack:20704 pid:21106 tgid:21106 ppid:1 flags:0x20004006 [ 1117.979665][ T30] Call Trace: [ 1117.982984][ T30] [ 1117.985937][ T30] __schedule+0x1893/0x4b50 [ 1117.996798][ T30] ? __pfx___schedule+0x10/0x10 [ 1118.004273][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.014978][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1118.024529][ T30] ? schedule+0x90/0x320 [ 1118.033531][ T30] schedule+0x14b/0x320 [ 1118.041025][ T30] schedule_preempt_disabled+0x13/0x30 [ 1118.046535][ T30] __mutex_lock+0x6a7/0xd70 [ 1118.057203][ T30] ? __mutex_lock+0x52a/0xd70 [ 1118.062023][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1118.066729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1118.078824][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1118.083647][ T30] tun_chr_close+0x3b/0x1b0 [ 1118.094680][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1118.102349][ T30] __fput+0x23f/0x880 [ 1118.106386][ T30] task_work_run+0x24f/0x310 [ 1118.116083][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1118.127236][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1118.137099][ T30] ? do_exit+0xa2a/0x27f0 [ 1118.143995][ T30] ? kmem_cache_free+0x1a3/0x420 [ 1118.153657][ T30] ? do_exit+0xa2a/0x27f0 [ 1118.161842][ T30] do_exit+0xa2f/0x27f0 [ 1118.166052][ T30] ? __pfx_do_exit+0x10/0x10 [ 1118.175457][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1118.183369][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.195485][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.204461][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1118.214636][ T30] do_group_exit+0x207/0x2c0 [ 1118.223171][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1118.233602][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1118.241350][ T30] get_signal+0x176f/0x1810 [ 1118.245908][ T30] ? __pfx_get_signal+0x10/0x10 [ 1118.256944][ T30] ? __pfx_vfs_read+0x10/0x10 [ 1118.264278][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1118.274551][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1118.283352][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1118.295106][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1118.303262][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1118.313062][ T30] do_fast_syscall_32+0x34/0x80 [ 1118.322138][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1118.333332][ T30] RIP: 0023:0xf747d579 [ 1118.340443][ T30] RSP: 002b:00000000f75cfd80 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1118.355032][ T30] RAX: fffffffffffffe00 RBX: 00000000000000f9 RCX: 00000000f75cfe54 [ 1118.367293][ T30] RDX: 0000000000000024 RSI: 00000000f746bff4 RDI: 0000000000000000 [ 1118.375338][ T30] RBP: 00000000f75cfe54 R08: 0000000000000000 R09: 0000000000000000 [ 1118.390646][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1118.403414][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.414234][ T30] [ 1118.423647][ T30] INFO: task syz.4.3547:21296 blocked for more than 148 seconds. [ 1118.434097][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1118.447566][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1118.456278][ T30] task:syz.4.3547 state:D stack:21936 pid:21296 tgid:21287 ppid:19423 flags:0x20004006 [ 1118.474448][ T30] Call Trace: [ 1118.479212][ T30] [ 1118.482192][ T30] __schedule+0x1893/0x4b50 [ 1118.486939][ T30] ? __pfx___schedule+0x10/0x10 [ 1118.499125][ T30] ? __blk_flush_plug+0x449/0x500 [ 1118.504220][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.515166][ T30] ? __blk_flush_plug+0x449/0x500 [ 1118.524902][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1118.536195][ T30] ? schedule+0x90/0x320 [ 1118.541878][ T30] schedule+0x14b/0x320 [ 1118.546075][ T30] io_schedule+0x8d/0x110 [ 1118.557783][ T30] rq_qos_wait+0x2ff/0x420 [ 1118.562253][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1118.574628][ T30] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 1118.580241][ T30] ? __pfx_rq_qos_wait+0x10/0x10 [ 1118.585218][ T30] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 1118.599763][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1118.605119][ T30] ? blk_mq_sched_bio_merge+0x29e/0x350 [ 1118.622529][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.632326][ T30] wbt_wait+0x373/0x5b0 [ 1118.636566][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 1118.644170][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1118.655844][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 1118.663174][ T30] __rq_qos_throttle+0x68/0xb0 [ 1118.672636][ T30] blk_mq_submit_bio+0x6d3/0x23d0 [ 1118.694287][ T30] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1118.702770][ T30] __submit_bio+0x1c1/0x560 [ 1118.711966][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1118.717094][ T30] ? blk_add_trace_bio+0x2c/0x2f0 [ 1118.731925][ T30] ? blk_add_trace_bio+0x1e6/0x2f0 [ 1118.739801][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1118.745583][ T30] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 1118.757920][ T30] ? __pfx___might_resched+0x10/0x10 [ 1118.763270][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1118.777748][ T30] __block_write_full_folio+0x7ed/0xf50 [ 1118.783366][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1118.796420][ T30] write_cache_pages+0xd0/0x230 [ 1118.801673][ T30] ? __pfx_block_write_full_folio+0x10/0x10 [ 1118.814840][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1118.822034][ T30] ? __pfx_write_cache_pages+0x10/0x10 [ 1118.835077][ T30] ? blk_start_plug+0x70/0x1b0 [ 1118.840400][ T30] blkdev_writepages+0xb1/0x110 [ 1118.845303][ T30] ? __pfx_blkdev_writepages+0x10/0x10 [ 1118.859024][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1118.864293][ T30] ? __pfx_blkdev_writepages+0x10/0x10 [ 1118.875992][ T30] do_writepages+0x35d/0x870 [ 1118.882300][ T30] ? __pfx_do_writepages+0x10/0x10 [ 1118.894353][ T30] ? filemap_fdatawrite_wbc+0x11a/0x180 [ 1118.900312][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1118.905381][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.917518][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1118.922821][ T30] ? wbc_attach_and_unlock_inode+0x565/0x580 [ 1118.937120][ T30] filemap_fdatawrite_wbc+0x125/0x180 [ 1118.943038][ T30] filemap_write_and_wait_range+0x198/0x290 [ 1118.957140][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1118.962875][ T30] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 1118.976228][ T30] ? __asan_memset+0x23/0x50 [ 1118.981355][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 1118.986526][ T30] bdev_release+0x15f/0x700 [ 1119.000561][ T30] blkdev_release+0x15/0x20 [ 1119.005140][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 1119.014254][ T30] __fput+0x23f/0x880 [ 1119.021279][ T30] task_work_run+0x24f/0x310 [ 1119.025926][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1119.037191][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1119.044677][ T30] do_exit+0xa2f/0x27f0 [ 1119.056160][ T30] ? __pfx_do_exit+0x10/0x10 [ 1119.062193][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1119.073505][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1119.081339][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1119.094847][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1119.104758][ T30] do_group_exit+0x207/0x2c0 [ 1119.116564][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1119.123823][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1119.132781][ T30] get_signal+0x176f/0x1810 [ 1119.141374][ T30] ? __pfx_get_signal+0x10/0x10 [ 1119.146472][ T30] ? do_futex+0x33b/0x560 [ 1119.155246][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1119.167034][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1119.175900][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1119.187399][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1119.193004][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1119.204321][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1119.210897][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1119.216139][ T30] do_fast_syscall_32+0x34/0x80 [ 1119.227362][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1119.236451][ T30] RIP: 0023:0xf7faf579 [ 1119.245388][ T30] RSP: 002b:00000000f53f360c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1119.257868][ T30] RAX: fffffffffffffe00 RBX: 00000000f74750a0 RCX: 0000000000000080 [ 1119.265893][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74750a4 [ 1119.282843][ T30] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1119.293462][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1119.306130][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.317616][ T30] [ 1119.326644][ T30] INFO: task syz-executor:21371 blocked for more than 149 seconds. [ 1119.336141][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1119.347295][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1119.356235][ T30] task:syz-executor state:D stack:21440 pid:21371 tgid:21371 ppid:1 flags:0x20004004 [ 1119.374231][ T30] Call Trace: [ 1119.379460][ T30] [ 1119.382432][ T30] __schedule+0x1893/0x4b50 [ 1119.386994][ T30] ? __pfx___schedule+0x10/0x10 [ 1119.401926][ T30] ? __pfx_lock_release+0x10/0x10 [ 1119.407016][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1119.417434][ T30] ? schedule+0x90/0x320 [ 1119.421743][ T30] schedule+0x14b/0x320 [ 1119.425929][ T30] schedule_preempt_disabled+0x13/0x30 [ 1119.438638][ T30] __mutex_lock+0x6a7/0xd70 [ 1119.443686][ T30] ? __mutex_lock+0x52a/0xd70 [ 1119.455683][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 1119.462115][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1119.467243][ T30] ? __asan_memset+0x23/0x50 [ 1119.481886][ T30] ? nla_strscpy+0x113/0x180 [ 1119.486529][ T30] rtnl_newlink+0xab7/0x20a0 [ 1119.497359][ T30] ? rtnl_newlink+0x4a1/0x20a0 [ 1119.502186][ T30] ? rtnl_newlink+0x4a1/0x20a0 [ 1119.506988][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1119.520020][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1119.525992][ T30] ? __pfx_lock_release+0x10/0x10 [ 1119.536906][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1119.543897][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 1119.555920][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1119.563953][ T30] ? __lock_acquire+0x1384/0x2050 [ 1119.574839][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1119.583237][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1119.593964][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1119.601326][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1119.606734][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1119.620261][ T30] netlink_unicast+0x7f6/0x990 [ 1119.625101][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1119.634674][ T30] ? __virt_addr_valid+0x183/0x530 [ 1119.645444][ T30] ? __check_object_size+0x49c/0x900 [ 1119.654552][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1119.663113][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.672150][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1119.677143][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.687347][ T30] __sock_sendmsg+0x221/0x270 [ 1119.692127][ T30] __sys_sendto+0x398/0x4f0 [ 1119.696665][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1119.707843][ T30] ? __might_fault+0xaa/0x120 [ 1119.712595][ T30] ? __might_fault+0xc6/0x120 [ 1119.735678][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 1119.741894][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 1119.756805][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1119.763932][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1119.776022][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1119.782870][ T30] ? exc_page_fault+0x590/0x8c0 [ 1119.794819][ T30] do_fast_syscall_32+0x34/0x80 [ 1119.800134][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1119.806503][ T30] RIP: 0023:0xf7f37579 [ 1119.822266][ T30] RSP: 002b:00000000f751f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1119.832663][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f751f864 [ 1119.846478][ T30] RDX: 0000000000000000 RSI: 00000000f7f24568 RDI: 00000000f73bbff4 [ 1119.863428][ T30] RBP: 00000000f7f24568 R08: 0000000000000000 R09: 0000000000000000 [ 1119.873189][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1119.888926][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.896962][ T30] [ 1119.906588][ T30] INFO: task syz-executor:21434 blocked for more than 149 seconds. [ 1119.916231][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1119.927562][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1119.936277][ T30] task:syz-executor state:D stack:26784 pid:21434 tgid:21434 ppid:1 flags:0x20004006 [ 1119.955667][ T30] Call Trace: [ 1119.960057][ T30] [ 1119.963033][ T30] __schedule+0x1893/0x4b50 [ 1119.974705][ T30] ? __pfx___schedule+0x10/0x10 [ 1119.981204][ T30] ? __pfx_lock_release+0x10/0x10 [ 1119.986278][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1119.998893][ T30] ? schedule+0x90/0x320 [ 1120.003187][ T30] schedule+0x14b/0x320 [ 1120.013568][ T30] schedule_preempt_disabled+0x13/0x30 [ 1120.021647][ T30] __mutex_lock+0x6a7/0xd70 [ 1120.026205][ T30] ? __mutex_lock+0x52a/0xd70 [ 1120.035827][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1120.046421][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1120.054402][ T30] ? __asan_memset+0x23/0x50 [ 1120.064112][ T30] register_nexthop_notifier+0x84/0x290 [ 1120.071323][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1120.077186][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 1120.090872][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1120.097090][ T30] ? __asan_memset+0x23/0x50 [ 1120.106669][ T30] ops_init+0x31e/0x590 [ 1120.114779][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1120.125232][ T30] setup_net+0x287/0x9e0 [ 1120.132041][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1120.142832][ T30] ? __pfx_setup_net+0x10/0x10 [ 1120.151052][ T30] copy_net_ns+0x33f/0x570 [ 1120.155528][ T30] create_new_namespaces+0x425/0x7b0 [ 1120.165986][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1120.175435][ T30] ksys_unshare+0x619/0xc10 [ 1120.184644][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1120.192215][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.204105][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1120.213786][ T30] __ia32_sys_unshare+0x37/0x40 [ 1120.223467][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1120.231211][ T30] ? exc_page_fault+0x590/0x8c0 [ 1120.236120][ T30] do_fast_syscall_32+0x34/0x80 [ 1120.246255][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1120.255271][ T30] RIP: 0023:0xf7f87579 [ 1120.264450][ T30] RSP: 002b:00000000f756ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1120.275959][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1120.289173][ T30] RDX: 00000000f740bff4 RSI: 00000000f72e2a6a RDI: 0000000030000000 [ 1120.297195][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.310614][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1120.321273][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1120.333994][ T30] [ 1120.337066][ T30] INFO: task syz-executor:21436 blocked for more than 150 seconds. [ 1120.348088][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1120.355406][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1120.367351][ T30] task:syz-executor state:D stack:26736 pid:21436 tgid:21436 ppid:1 flags:0x20004004 [ 1120.384368][ T30] Call Trace: [ 1120.388409][ T30] [ 1120.391378][ T30] __schedule+0x1893/0x4b50 [ 1120.395936][ T30] ? __pfx___schedule+0x10/0x10 [ 1120.407349][ T30] ? __pfx_lock_release+0x10/0x10 [ 1120.412443][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1120.425140][ T30] ? schedule+0x90/0x320 [ 1120.429784][ T30] schedule+0x14b/0x320 [ 1120.433997][ T30] schedule_preempt_disabled+0x13/0x30 [ 1120.447348][ T30] __mutex_lock+0x6a7/0xd70 [ 1120.451930][ T30] ? __mutex_lock+0x52a/0xd70 [ 1120.456641][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1120.469875][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1120.474979][ T30] ? __asan_memset+0x23/0x50 [ 1120.484584][ T30] register_nexthop_notifier+0x84/0x290 [ 1120.492768][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1120.504243][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 1120.513321][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1120.527376][ T30] ? __asan_memset+0x23/0x50 [ 1120.532042][ T30] ops_init+0x31e/0x590 [ 1120.536230][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1120.549848][ T30] setup_net+0x287/0x9e0 [ 1120.554164][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1120.564552][ T30] ? __pfx_setup_net+0x10/0x10 [ 1120.572854][ T30] copy_net_ns+0x33f/0x570 [ 1120.582163][ T30] create_new_namespaces+0x425/0x7b0 [ 1120.590098][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1120.595879][ T30] ksys_unshare+0x619/0xc10 [ 1120.607390][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1120.612486][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.625252][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1120.632986][ T30] __ia32_sys_unshare+0x37/0x40 [ 1120.645046][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1120.651155][ T30] ? exc_page_fault+0x590/0x8c0 [ 1120.656062][ T30] do_fast_syscall_32+0x34/0x80 [ 1120.667332][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1120.674858][ T30] RIP: 0023:0xf7f37579 [ 1120.689239][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1120.704973][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1120.713486][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 1120.727715][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.735753][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1120.750152][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1120.772036][ T30] [ 1120.775113][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1120.788901][ T30] INFO: task syz-executor:21438 blocked for more than 150 seconds. [ 1120.796859][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1120.810670][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1120.823106][ T30] task:syz-executor state:D stack:24752 pid:21438 tgid:21438 ppid:1 flags:0x20004006 [ 1120.837300][ T30] Call Trace: [ 1120.840626][ T30] [ 1120.843593][ T30] __schedule+0x1893/0x4b50 [ 1120.858077][ T30] ? __pfx___schedule+0x10/0x10 [ 1120.863004][ T30] ? __pfx_lock_release+0x10/0x10 [ 1120.874591][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1120.882101][ T30] ? schedule+0x90/0x320 [ 1120.886556][ T30] schedule+0x14b/0x320 [ 1120.895598][ T30] schedule_preempt_disabled+0x13/0x30 [ 1120.904504][ T30] __mutex_lock+0x6a7/0xd70 [ 1120.913873][ T30] ? __mutex_lock+0x52a/0xd70 [ 1120.921314][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1120.927091][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1120.937371][ T30] ? __asan_memset+0x23/0x50 [ 1120.942030][ T30] register_nexthop_notifier+0x84/0x290 [ 1120.954110][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1120.961480][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 1120.974614][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1120.981687][ T30] ? __asan_memset+0x23/0x50 [ 1120.986505][ T30] ops_init+0x31e/0x590 [ 1120.997316][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1121.002762][ T30] setup_net+0x287/0x9e0 [ 1121.007041][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1121.020212][ T30] ? __pfx_setup_net+0x10/0x10 [ 1121.025084][ T30] copy_net_ns+0x33f/0x570 [ 1121.035708][ T30] create_new_namespaces+0x425/0x7b0 [ 1121.043621][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1121.054223][ T30] ksys_unshare+0x619/0xc10 [ 1121.062481][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1121.072805][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1121.082694][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1121.095287][ T30] __ia32_sys_unshare+0x37/0x40 [ 1121.102739][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1121.112622][ T30] ? exc_page_fault+0x590/0x8c0 [ 1121.120131][ T30] do_fast_syscall_32+0x34/0x80 [ 1121.125123][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1121.137358][ T30] RIP: 0023:0xf745d579 [ 1121.141477][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1121.156176][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1121.166487][ T30] RDX: 00000000f744bff4 RSI: 00000000f7322a6a RDI: 0000000030000000 [ 1121.181814][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1121.194158][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1121.206952][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1121.217332][ T30] [ 1121.220394][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1121.237187][ T30] INFO: task syz-executor:21440 blocked for more than 151 seconds. [ 1121.248135][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1121.255461][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.272438][ T30] task:syz-executor state:D stack:26336 pid:21440 tgid:21440 ppid:1 flags:0x20004004 [ 1121.285628][ T30] Call Trace: [ 1121.293686][ T30] [ 1121.296668][ T30] __schedule+0x1893/0x4b50 [ 1121.305556][ T30] ? __pfx___schedule+0x10/0x10 [ 1121.314043][ T30] ? __pfx_lock_release+0x10/0x10 [ 1121.322898][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1121.333194][ T30] ? schedule+0x90/0x320 [ 1121.341272][ T30] schedule+0x14b/0x320 [ 1121.345486][ T30] schedule_preempt_disabled+0x13/0x30 [ 1121.354684][ T30] __mutex_lock+0x6a7/0xd70 [ 1121.365408][ T30] ? __mutex_lock+0x52a/0xd70 [ 1121.373729][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1121.383119][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1121.392177][ T30] ? __asan_memset+0x23/0x50 [ 1121.397032][ T30] register_nexthop_notifier+0x84/0x290 [ 1121.406046][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1121.415964][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 1121.425916][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1121.436813][ T30] ? __asan_memset+0x23/0x50 [ 1121.445060][ T30] ops_init+0x31e/0x590 [ 1121.452931][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1121.461995][ T30] setup_net+0x287/0x9e0 [ 1121.466327][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1121.476694][ T30] ? __pfx_setup_net+0x10/0x10 [ 1121.486849][ T30] copy_net_ns+0x33f/0x570 [ 1121.495380][ T30] create_new_namespaces+0x425/0x7b0 [ 1121.505574][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1121.515039][ T30] ksys_unshare+0x619/0xc10 [ 1121.523640][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1121.533450][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1121.543141][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1121.553391][ T30] __ia32_sys_unshare+0x37/0x40 [ 1121.567347][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1121.572522][ T30] ? exc_page_fault+0x590/0x8c0 [ 1121.583710][ T30] do_fast_syscall_32+0x34/0x80 [ 1121.588929][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1121.595710][ T30] RIP: 0023:0xf7f52579 [ 1121.604369][ T30] RSP: 002b:00000000f753ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1121.616849][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1121.628631][ T30] RDX: 00000000f73dbff4 RSI: 00000000f72b2a6a RDI: 0000000030000000 [ 1121.636646][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1121.652156][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1121.663468][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1121.676844][ T30] [ 1121.682417][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1121.697362][ T30] [ 1121.697362][ T30] Showing all locks held in the system: [ 1121.705490][ T30] 1 lock held by khungtaskd/30: [ 1121.716630][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1121.729147][ T30] 3 locks held by kworker/u8:4/66: [ 1121.734291][ T30] #0: ffff88801e2dc948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1121.751608][ T30] #1: ffffc900015cfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1121.768230][ T30] #2: ffff88801be860e0 (&type->s_umount_key#41){.+.+}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 1121.784707][ T30] 2 locks held by getty/4983: [ 1121.792322][ T30] #0: ffff88802ea710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1121.817431][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1121.835050][ T30] 3 locks held by kworker/0:4/5280: [ 1121.840725][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1121.860173][ T30] #1: ffffc90003df7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1121.876256][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1121.894061][ T30] 3 locks held by kworker/0:5/5612: [ 1121.903428][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1121.921664][ T30] #1: ffffc90002fefd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1121.936013][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1121.951216][ T30] 3 locks held by kworker/u8:13/7888: [ 1121.956628][ T30] #0: ffff88802e1eb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1121.976069][ T30] #1: ffffc90003bb7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1121.997422][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1122.013828][ T30] 1 lock held by syz-executor/19423: [ 1122.019529][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1122.036291][ T30] 6 locks held by kworker/u8:2/20162: [ 1122.042525][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1122.057294][ T30] #1: ffffc900049cfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1122.074722][ T30] #2: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1122.084562][ T30] #3: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1122.102249][ T30] #4: ffff888051c60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 1122.115509][ T30] #5: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1122.136403][ T30] 5 locks held by kworker/1:0/20552: [ 1122.142157][ T30] 1 lock held by syz-executor/20646: [ 1122.155232][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1122.164626][ T30] 1 lock held by syz-executor/21106: [ 1122.176838][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1122.187881][ T30] 1 lock held by syz-executor/21371: [ 1122.193203][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 1122.207310][ T30] 2 locks held by syz-executor/21434: [ 1122.212809][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.230094][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.244924][ T30] 2 locks held by syz-executor/21436: [ 1122.253630][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.270090][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.286008][ T30] 2 locks held by syz-executor/21438: [ 1122.295161][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.308709][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.324580][ T30] 2 locks held by syz-executor/21440: [ 1122.333025][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.348334][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.365605][ T30] 2 locks held by syz-executor/21443: [ 1122.371382][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.387301][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.403804][ T30] 2 locks held by syz-executor/21456: [ 1122.410015][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.427792][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.444526][ T30] 2 locks held by syz-executor/21460: [ 1122.452637][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.469122][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.485116][ T30] 2 locks held by syz-executor/21462: [ 1122.493190][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.507415][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.531738][ T30] 2 locks held by syz-executor/21464: [ 1122.537165][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.551067][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.569295][ T30] 2 locks held by syz-executor/21467: [ 1122.574713][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.591568][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.607305][ T30] 2 locks held by syz-executor/21479: [ 1122.612722][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.630862][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.645694][ T30] 2 locks held by syz-executor/21481: [ 1122.654866][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.669497][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.685801][ T30] 2 locks held by syz-executor/21485: [ 1122.694842][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.708498][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.726060][ T30] 2 locks held by syz-executor/21487: [ 1122.733143][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1122.748734][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1122.766798][ T30] [ 1122.769916][ T30] ============================================= [ 1122.769916][ T30] [ 1122.786473][ T30] NMI backtrace for cpu 0 [ 1122.790877][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1122.801061][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1122.811148][ T30] Call Trace: [ 1122.814455][ T30] [ 1122.817413][ T30] dump_stack_lvl+0x241/0x360 [ 1122.822131][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.827366][ T30] ? __pfx__printk+0x10/0x10 [ 1122.832007][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1122.836978][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1122.842464][ T30] ? _printk+0xd5/0x120 [ 1122.846645][ T30] ? __pfx__printk+0x10/0x10 [ 1122.851262][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1122.856146][ T30] ? __pfx__printk+0x10/0x10 [ 1122.860766][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1122.865818][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1122.871835][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1122.877860][ T30] watchdog+0xff4/0x1040 [ 1122.882130][ T30] ? watchdog+0x1ea/0x1040 [ 1122.886576][ T30] ? __pfx_watchdog+0x10/0x10 [ 1122.891276][ T30] kthread+0x2f0/0x390 [ 1122.895364][ T30] ? __pfx_watchdog+0x10/0x10 [ 1122.900064][ T30] ? __pfx_kthread+0x10/0x10 [ 1122.904676][ T30] ret_from_fork+0x4b/0x80 [ 1122.909115][ T30] ? __pfx_kthread+0x10/0x10 [ 1122.913725][ T30] ret_from_fork_asm+0x1a/0x30 [ 1122.918532][ T30] [ 1122.922252][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1122.927738][ C1] NMI backtrace for cpu 1 [ 1122.927753][ C1] CPU: 1 UID: 0 PID: 20552 Comm: kworker/1:0 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 1122.927773][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1122.927785][ C1] Workqueue: events nsim_dev_trap_report_work [ 1122.927808][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 1122.927831][ C1] Code: db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 6f e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 1122.927845][ C1] RSP: 0018:ffffc90000a17a10 EFLAGS: 00000006 [ 1122.927860][ C1] RAX: 0000000000000036 RBX: 0000000000000d8d RCX: ffffffff81709d8a [ 1122.927873][ C1] RDX: 0000000000000002 RSI: 0000000000000008 RDI: ffffffff9424f930 [ 1122.927884][ C1] RBP: 0000000000000002 R08: ffffffff9424f86f R09: 1ffffffff2849f0d [ 1122.927897][ C1] R10: dffffc0000000000 R11: fffffbfff2849f0e R12: ffff888033194750 [ 1122.927910][ C1] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff888033194730 [ 1122.927923][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1122.927938][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.927950][ C1] CR2: 00000000f7311804 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1122.927966][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.927976][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1122.927988][ C1] Call Trace: [ 1122.927994][ C1] [ 1122.928002][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1122.928022][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1122.928046][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1122.928070][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1122.928092][ C1] ? nmi_handle+0x14f/0x5a0 [ 1122.928108][ C1] ? nmi_handle+0x2a/0x5a0 [ 1122.928125][ C1] ? __kasan_check_read+0xa/0x20 [ 1122.928143][ C1] ? default_do_nmi+0x63/0x160 [ 1122.928162][ C1] ? exc_nmi+0x123/0x1f0 [ 1122.928179][ C1] ? end_repeat_nmi+0xf/0x53 [ 1122.928205][ C1] ? mark_lock+0x9a/0x360 [ 1122.928221][ C1] ? __kasan_check_read+0xa/0x20 [ 1122.928239][ C1] ? __kasan_check_read+0xa/0x20 [ 1122.928258][ C1] ? __kasan_check_read+0xa/0x20 [ 1122.928277][ C1] [ 1122.928283][ C1] [ 1122.928289][ C1] mark_lock+0x9a/0x360 [ 1122.928303][ C1] ? trace_fib_table_lookup+0x95/0x230 [ 1122.928323][ C1] lockdep_hardirqs_on_prepare+0x282/0x780 [ 1122.928347][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1122.928371][ C1] ? rcu_is_watching+0x15/0xb0 [ 1122.928389][ C1] trace_hardirqs_on+0x28/0x40 [ 1122.928408][ C1] __local_bh_enable_ip+0x168/0x200 [ 1122.928428][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1122.928448][ C1] ? ipt_do_table+0x312/0x1860 [ 1122.928470][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1122.928492][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1122.928515][ C1] ipt_do_table+0x1552/0x1860 [ 1122.928545][ C1] ? ipt_do_table+0x312/0x1860 [ 1122.928567][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 1122.928596][ C1] ? ipt_do_table+0x312/0x1860 [ 1122.928619][ C1] iptable_mangle_hook+0x154/0x4b0 [ 1122.928645][ C1] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 1122.928668][ C1] nf_hook_slow+0xc3/0x220 [ 1122.928687][ C1] ? __pfx_dst_output+0x10/0x10 [ 1122.928707][ C1] nf_hook+0x2c4/0x450 [ 1122.928728][ C1] ? nf_hook+0x9e/0x450 [ 1122.928745][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1122.928765][ C1] ? __pfx_dst_output+0x10/0x10 [ 1122.928786][ C1] ? ip_fast_csum+0x1f0/0x2b0 [ 1122.928810][ C1] __ip_local_out+0x3d9/0x4e0 [ 1122.928829][ C1] ? __pfx_dst_output+0x10/0x10 [ 1122.928849][ C1] ip_local_out+0x26/0x70 [ 1122.928867][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 1122.928893][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1122.928915][ C1] ? synproxy_pernet+0x45/0x270 [ 1122.928938][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 1122.928962][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1122.928985][ C1] ? nf_ip_checksum+0x13a/0x500 [ 1122.929008][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 1122.929031][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1122.929055][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1122.929075][ C1] nft_do_chain+0x4ad/0x1da0 [ 1122.929102][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1122.929123][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1122.929153][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1122.929179][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1122.929202][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1122.929223][ C1] ? ipt_do_table+0x312/0x1860 [ 1122.929254][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1122.929275][ C1] nf_hook_slow+0xc3/0x220 [ 1122.929294][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1122.929311][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1122.929329][ C1] NF_HOOK+0x29e/0x450 [ 1122.929345][ C1] ? NF_HOOK+0x9a/0x450 [ 1122.929361][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1122.929378][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1122.929397][ C1] ? ip_rcv_finish+0x406/0x560 [ 1122.929413][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1122.929430][ C1] NF_HOOK+0x3a4/0x450 [ 1122.929445][ C1] ? __lock_acquire+0x1384/0x2050 [ 1122.929468][ C1] ? NF_HOOK+0x9a/0x450 [ 1122.929484][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1122.929499][ C1] ? ip_rcv_core+0x801/0xd10 [ 1122.929516][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1122.929534][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1122.929550][ C1] __netif_receive_skb+0x2bf/0x650 [ 1122.929570][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1122.929597][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1122.929615][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1122.929638][ C1] ? __pfx_lock_release+0x10/0x10 [ 1122.929660][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1122.929685][ C1] process_backlog+0x662/0x15b0 [ 1122.929707][ C1] ? process_backlog+0x33b/0x15b0 [ 1122.929728][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1122.929747][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1122.929771][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1122.929793][ C1] ? debug_object_activate+0x3e4/0x510 [ 1122.929812][ C1] __napi_poll+0xcb/0x490 [ 1122.929830][ C1] net_rx_action+0x89b/0x1240 [ 1122.929857][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1122.929876][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1122.929905][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1122.929932][ C1] handle_softirqs+0x2c5/0x980 [ 1122.929954][ C1] ? do_softirq+0x11b/0x1e0 [ 1122.929975][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1122.929998][ C1] do_softirq+0x11b/0x1e0 [ 1122.930018][ C1] [ 1122.930024][ C1] [ 1122.930030][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1122.930050][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1122.930075][ C1] ? rcu_is_watching+0x15/0xb0 [ 1122.930093][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1122.930113][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0