last executing test programs: 38.899710826s ago: executing program 1 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "c10449f31985d8a5", "c4474e7db1bf15fbabcc0b4fd7e5780c", "8561a3dd", "e51a280443bb1e8f"}, 0x28) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="a81a38a0eec2272428977f1016992b643333053d9bb8631cebc76a41660dd5df53b8f61afd1bb5bb25246040b27b21765a83229cda98afd8d789c490dee3b48a24523d18135960268486f95948893ae4438a5742fb8ef7a661077f1d499ba0f5a94e3614d8a1957426b3033f742072eb55a4513bb64ffc", 0x77}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 38.736076074s ago: executing program 1 (id=22): write(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000fee000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000440)=""/4096) 38.686502604s ago: executing program 1 (id=24): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_targets\x00') r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001340)=""/4081, 0xff1}], 0x2, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64], 0x20) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000680)="b2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="15", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0), 0xf}}], 0x3, 0xf048090) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$midi(&(0x7f0000000040), 0x9, 0x80000) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000240)=0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x5) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000), &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x801, 0x84) 38.331841844s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'macvlan0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0x1, 0x7f, 0x0, 0x445bcbe6, 0x0, 0x6, 0x4, 0x401, 0x0, 0x9de, 0x9, 0xffff, 0xffff121c, 0x7fffffff, 0x9, 0x2, 0x7, 0x306c, 0x8000, 0x5000, 0xc, 0x5}}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1000, 0x40, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="63030e10ebff0241750047880196", 0xe, 0x8000, &(0x7f0000000140)={0x11, 0x6, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setxattr$security_capability(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x4, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 37.571917547s ago: executing program 1 (id=32): socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x8000, 0x10c) sendfile(r0, r0, 0x0, 0x8) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2040) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0xa0}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x110, r3, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000200)={0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x900, 0x0, 0x34424752}}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 36.446814555s ago: executing program 1 (id=34): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2c9ab000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000000c0007800800124009"], 0x54}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r8 = dup(r7) sendfile(r7, r8, 0x0, 0x80006) 36.248318244s ago: executing program 32 (id=34): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2c9ab000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000000c0007800800124009"], 0x54}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d882, 0x0) r8 = dup(r7) sendfile(r7, r8, 0x0, 0x80006) 26.167741982s ago: executing program 2 (id=111): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x0, 0x0, 0x25002, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x1, 0x0, 0x2011, 0x8, 0x9, 0xd, 0x6, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48884}, 0x20018840) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES8], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@netkit={@void, @value}}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0x7f}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r6, 0x5, 0x3}, &(0x7f0000000580)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="83", 0x1}], 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_NMI(r4, 0xae9a) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x15, 0x95, 0xf, 0x20, 0x2c7c, 0x6002, 0x429b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x0, 0xff}}]}}]}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00']) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000200)=0xea0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 24.15195577s ago: executing program 2 (id=134): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x0, 0x0, 0x1004, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48884}, 0x20018840) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0x7f}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r4, 0x5, 0x3}, &(0x7f0000000580)=0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="83", 0x1}], 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000200)=0xea0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 23.903444746s ago: executing program 2 (id=139): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/65, 0x41}, 0x86}], 0x1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001380), 0x10000009, 0x129100) r3 = syz_open_dev$vivid(&(0x7f0000000940), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000900)={0x0, 0x6, 0x200b}) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8, r2}, 0x18) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f0000000340)="6076ffe491e37dcd5cc53521126146c07a6f71375f8391f7e63967a5c148ed2466f393e796d15887fe664fd109384d3683e04219f4fcb82c05b1813a19a9", &(0x7f0000000380)=""/70, &(0x7f0000000400)="fec76e1928fecb47cbcd2db203a2aaf51f17f6cbec8d0f4065ab9d40c40f6d0d856b193031a4e572b3ce970b11d6da5b690c869fbb150a6e13321630728ca04eb8f7649687efd39663e280b37553cc64804eb0d4884f55414a5fb32d705d2de6d5791fbb18da1aafb7ecb72e", &(0x7f0000000480)="d41529efc5fe885e5f9c41ba7829c7c131d364b6ff8943a9e5570d8442", 0x7874, r4, 0x4}, 0x38) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuacct.stat\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18) syz_usb_connect(0x0, 0x4f, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x3, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x9, 0x4, "4299d83e091515"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="020e7d88172c779e47775cb49530f7c1ce4843cfa6938dd8dcf904b5ef017e7b7dee52de52812d9859ec080a7801cc4efa014da9010ce53bf47ee0dc724d914c8a4a05", 0x43}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x862}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0xa0}, 0x4) write$binfmt_script(r5, &(0x7f0000000840), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) preadv(r1, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000000640)=""/74, 0x4a}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/190, 0xbe}], 0x5, 0x1000, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, 0x0, &(0x7f0000000000)) 21.169920971s ago: executing program 3 (id=166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000004240)=ANY=[@ANYBLOB="44005d02be03030500"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000001c0012800b0001006d616373656300000c000280060002405e23000008000500", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x0) syz_open_pts(r4, 0x4480) ioctl$FIONREAD(r0, 0x80047437, 0x0) 21.085255599s ago: executing program 3 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe800000000000008000ffffffe900aafe800001"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 21.084859937s ago: executing program 3 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x25, 0x37, 0x2, {0x3, 0x4, 0x8, r1, 0x7, 'TIPCv2\x00'}}, 0x25) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x4, 0x2d2afee6, 0x0, 0x7, 0x3, @discrete={0x1, 0x3}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r2) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000014000100000000000000000008"], 0x38}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a00000000230000ffe5df0000000000000000000000000140000000200002"], 0x6c}}, 0x800) 20.97968095s ago: executing program 3 (id=170): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3e) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000380)=ANY=[], 0x2c) 20.860556585s ago: executing program 3 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x0, {}, {0x0, 0x1, 0x1}, 0x0, 0xff}], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfffe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) 20.768043308s ago: executing program 2 (id=173): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3e) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000380)=ANY=[], 0x2c) (fail_nth: 1) 20.370747343s ago: executing program 2 (id=174): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) (fail_nth: 2) 20.240109044s ago: executing program 3 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffff2d38, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x3005, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffff2d38, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x3005, 0x1}) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) (async) 20.168421076s ago: executing program 33 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffff2d38, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x3005, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffff2d38, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x3005, 0x1}) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) (async) 20.038577839s ago: executing program 2 (id=181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b83e823c9b83051075a3f333aedf50ce000092d10219050f000000000000"], 0x0) r2 = semget(0x0, 0x3, 0x3) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket(0x11, 0x800000003, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) (async) socketpair(0x10, 0xa, 0x80, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') (rerun: 64) pread64(r4, &(0x7f0000000280)=""/69, 0x45, 0xbbf9) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (rerun: 32) 19.846848181s ago: executing program 34 (id=181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b83e823c9b83051075a3f333aedf50ce000092d10219050f000000000000"], 0x0) r2 = semget(0x0, 0x3, 0x3) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket(0x11, 0x800000003, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) (async) socketpair(0x10, 0xa, 0x80, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') (rerun: 64) pread64(r4, &(0x7f0000000280)=""/69, 0x45, 0xbbf9) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (rerun: 32) 18.38143484s ago: executing program 4 (id=195): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) r0 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r2, r1}, &(0x7f00000001c0)=""/241, 0xf1, 0x0) 18.319370423s ago: executing program 4 (id=197): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private0, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) 18.278369641s ago: executing program 5 (id=198): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0xc5, [0x2, 0x2, 0x80, 0x10001, 0x5, 0x4], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)=""/197}, &(0x7f00000000c0)=0x78) 17.209801087s ago: executing program 5 (id=199): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) (fail_nth: 6) 17.192867941s ago: executing program 4 (id=201): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e21, @private=0xa010105}, @in={0x2, 0x4e20, @loopback}]}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x3, "abacd211119ca95c63377526d1c0f7e9faac3ca507558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000003080102000000000080"], 0x20}, 0x1, 0x0, 0x0, 0x20010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = syz_io_uring_setup(0x65a2, &(0x7f0000000480)={0x0, 0xad97, 0x1, 0x1, 0x1cc, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000240)) r8 = io_uring_setup(0x4773, &(0x7f0000000500)={0x0, 0xb8aa, 0x100, 0x1, 0x335, 0x0, r7}) syz_io_uring_setup(0x1845, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0xd3, 0x0, r8}, &(0x7f0000000280), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef5) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r4}) 17.157514702s ago: executing program 5 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000098000040"]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x20400}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 16.944040124s ago: executing program 4 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x0, {}, {0x0, 0x1, 0x1}, 0x0, 0xff}], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfffe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) 16.49636462s ago: executing program 5 (id=206): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) r0 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r2, r1}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={0x0}) 16.474103619s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe800000000000008000ffffffe900aafe800001"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 16.456941598s ago: executing program 5 (id=208): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f3b3868030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c0030b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e77f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7b00f8ffff91ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbb129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcdf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e300000000000000aef83994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e44b5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b30c003b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000001480)=""/4096, 0x1000) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x290c43, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000306020d20c50f27124af40102030109021b0001810380030904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 16.435946831s ago: executing program 4 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x3, {0xfffffffa, 0xd, 0x8, 0xfffffffe}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x34}}, 0x20) r9 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f00000002c0)=0x1ff, 0x4) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfe33) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, {0x1, @remote}, 0x28, {0x2, 0x4e21, @empty}, 'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4004080) close_range(r1, 0xffffffffffffffff, 0x0) 16.288723941s ago: executing program 0 (id=212): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e21, @private=0xa010105}, @in={0x2, 0x4e20, @loopback}]}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x3, "abacd211119ca95c63377526d1c0f7e9faac3ca507558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000003080102000000000080"], 0x20}, 0x1, 0x0, 0x0, 0x20010}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = syz_io_uring_setup(0x65a2, &(0x7f0000000480)={0x0, 0xad97, 0x1, 0x1, 0x1cc, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000240)) r8 = io_uring_setup(0x4773, &(0x7f0000000500)={0x0, 0xb8aa, 0x100, 0x1, 0x335, 0x0, r7}) syz_io_uring_setup(0x1845, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0xd3, 0x0, r8}, &(0x7f0000000280), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef5) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r4}) 16.210729835s ago: executing program 0 (id=213): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000210001000000000000000000fc010000000000000000000000000000ac1414aa00000000000000000000000000000000000002090200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000000fe80000000000000000008"], 0xac}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x9, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/27, 0x1b}, 0x8}, {{&(0x7f00000000c0)=@ethernet, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/48, 0x2a}], 0x0, &(0x7f00000008c0)=""/4096}, 0x8}], 0xe, 0x45833af92e4b39ff, 0x0) 16.132158592s ago: executing program 0 (id=214): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x200000000) 15.319466171s ago: executing program 0 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x2c020400) (async, rerun: 32) unshare(0x22020000) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async, rerun: 64) truncate(&(0x7f0000000280)='./file1\x00', 0x1) (async, rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c1, 0x0, 0x3, 0x200003f0, 0x20000420, 0xf], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/392, @ANYRESOCT=r0]}, 0x217) 15.293924719s ago: executing program 0 (id=216): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) r0 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r2, r1}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={0x0}) 15.223966735s ago: executing program 0 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x0, {}, {0x0, 0x1, 0x1}, 0x0, 0xff}], 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfffe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) 15.135260633s ago: executing program 5 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe800000000000008000ffffffe900aafe800001"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 520.349276ms ago: executing program 35 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x3, {0xfffffffa, 0xd, 0x8, 0xfffffffe}}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x34}}, 0x20) r9 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f00000002c0)=0x1ff, 0x4) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfe33) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, {0x1, @remote}, 0x28, {0x2, 0x4e21, @empty}, 'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xd8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4004080) close_range(r1, 0xffffffffffffffff, 0x0) 21.468205ms ago: executing program 36 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x0, {}, {0x0, 0x1, 0x1}, 0x0, 0xff}], 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfffe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) 0s ago: executing program 37 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003dc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x80000001, {{@in6=@private2, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x1000000, 0x80000000401, 0xfffff7fffffffffe, 0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7a}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe800000000000008000ffffffe900aafe800001"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) kernel console output (not intermixed with test programs): 57.921783][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.930521][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.942886][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.959138][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.974823][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.984164][ T5836] Bluetooth: hci3: command tx timeout [ 57.990785][ T5838] Bluetooth: hci2: command tx timeout [ 57.991217][ T54] Bluetooth: hci4: command tx timeout [ 57.996164][ T5838] Bluetooth: hci1: command tx timeout [ 58.001847][ T5836] Bluetooth: hci0: command tx timeout [ 58.007048][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.029533][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.035684][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 58.042354][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.058596][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.069946][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.081343][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.112898][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.121730][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.132079][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.141319][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.193425][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.204049][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.256453][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.279718][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.344631][ T3023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.358249][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.390933][ T3023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.405119][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.489444][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.500235][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.510973][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.519417][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.631533][ T5913] FAULT_INJECTION: forcing a failure. [ 58.631533][ T5913] name failslab, interval 1, probability 0, space 0, times 1 [ 58.648004][ T5916] FAULT_INJECTION: forcing a failure. [ 58.648004][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.651729][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.661383][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.3.4 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 58.661404][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.661417][ T5913] Call Trace: [ 58.661423][ T5913] [ 58.661429][ T5913] dump_stack_lvl+0x241/0x360 [ 58.661460][ T5913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.661476][ T5913] ? __pfx__printk+0x10/0x10 [ 58.661497][ T5913] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 58.661515][ T5913] ? __build_skb_around+0x245/0x3d0 [ 58.661536][ T5913] should_fail_ex+0x3b0/0x4e0 [ 58.661553][ T5913] should_failslab+0xac/0x100 [ 58.661576][ T5913] ? _sctp_make_chunk+0x161/0x460 [ 58.661592][ T5913] kmem_cache_alloc_noprof+0x70/0x380 [ 58.661609][ T5913] _sctp_make_chunk+0x161/0x460 [ 58.661626][ T5913] sctp_make_init+0x603/0x2840 [ 58.661648][ T5913] ? __pfx_perf_trace_itimer_expire+0xf/0x10 [ 58.661665][ T5913] ? kernel_text_address+0xa7/0xe0 [ 58.661684][ T5913] ? __pfx_sctp_make_init+0x10/0x10 [ 58.661707][ T5913] ? stack_trace_save+0x118/0x1d0 [ 58.661725][ T5913] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 58.661743][ T5913] ? __pfx_sctp_pname+0x10/0x10 [ 58.661762][ T5913] sctp_do_sm+0x1f1/0x60c0 [ 58.661782][ T5913] ? lock_acquire+0xe3/0x550 [ 58.661803][ T5913] ? kasan_save_track+0x51/0x80 [ 58.661822][ T5913] ? __kasan_kmalloc+0x98/0xb0 [ 58.661840][ T5913] ? sctp_stream_init_ext+0x56/0x180 [ 58.661859][ T5913] ? sctp_sendmsg_to_asoc+0x12fd/0x1800 [ 58.661876][ T5913] ? __sock_sendmsg+0x1a6/0x270 [ 58.661891][ T5913] ? __sys_sendto+0x363/0x4c0 [ 58.661908][ T5913] ? __x64_sys_sendto+0xde/0x100 [ 58.661925][ T5913] ? do_syscall_64+0xf3/0x230 [ 58.661942][ T5913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.661962][ T5913] ? __pfx_sctp_do_sm+0x10/0x10 [ 58.661994][ T5913] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 58.662014][ T5913] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 58.662034][ T5913] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 58.662050][ T5913] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 58.662067][ T5913] ? __asan_memcpy+0x40/0x70 [ 58.662085][ T5913] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 58.662112][ T5913] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 58.662129][ T5913] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 58.662147][ T5913] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 58.662163][ T5913] ? sctp_sendmsg+0xbb9/0x3520 [ 58.662179][ T5913] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 58.662197][ T5913] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 58.662214][ T5913] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 58.662231][ T5913] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 58.662249][ T5913] sctp_sendmsg+0x1bc3/0x3520 [ 58.662271][ T5913] ? __pfx_sctp_sendmsg+0x10/0x10 [ 58.662288][ T5913] ? rcu_is_watching+0x15/0xb0 [ 58.662304][ T5913] ? __pfx_aa_sk_perm+0x10/0x10 [ 58.662322][ T5913] ? inet_sendmsg+0x330/0x390 [ 58.662344][ T5913] __sock_sendmsg+0x1a6/0x270 [ 58.662361][ T5913] __sys_sendto+0x363/0x4c0 [ 58.662382][ T5913] ? __pfx___sys_sendto+0x10/0x10 [ 58.662404][ T5913] ? __fget_files+0x2a/0x410 [ 58.662423][ T5913] ? ksys_write+0x251/0x2b0 [ 58.662440][ T5913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.662460][ T5913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.662480][ T5913] ? rcu_is_watching+0x15/0xb0 [ 58.662495][ T5913] __x64_sys_sendto+0xde/0x100 [ 58.662515][ T5913] do_syscall_64+0xf3/0x230 [ 58.662532][ T5913] ? clear_bhb_loop+0x35/0x90 [ 58.662552][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.662571][ T5913] RIP: 0033:0x7fea1ad8cd29 [ 58.662589][ T5913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.662601][ T5913] RSP: 002b:00007fea1bcb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 58.662618][ T5913] RAX: ffffffffffffffda RBX: 00007fea1afa5fa0 RCX: 00007fea1ad8cd29 [ 58.662629][ T5913] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000004 [ 58.662639][ T5913] RBP: 00007fea1bcb4090 R08: 000000002005ffe4 R09: 000000000000001c [ 58.662649][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.662658][ T5913] R13: 0000000000000000 R14: 00007fea1afa5fa0 R15: 00007fea1b0cfa28 [ 58.662675][ T5913] [ 58.663065][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.4.5 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 58.663083][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.663115][ T5916] Call Trace: [ 58.663121][ T5916] [ 58.663127][ T5916] dump_stack_lvl+0x241/0x360 [ 58.663145][ T5916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.663161][ T5916] ? __pfx__printk+0x10/0x10 [ 58.663185][ T5916] ? snprintf+0xda/0x120 [ 58.663206][ T5916] should_fail_ex+0x3b0/0x4e0 [ 58.663223][ T5916] _copy_to_user+0x31/0xb0 [ 58.663238][ T5916] simple_read_from_buffer+0xca/0x150 [ 58.663261][ T5916] proc_fail_nth_read+0x1e9/0x250 [ 58.663281][ T5916] ? common_file_perm+0x1a6/0x210 [ 58.663300][ T5916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.663321][ T5916] ? rw_verify_area+0x243/0x630 [ 58.663338][ T5916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.663359][ T5916] vfs_read+0x1f8/0xb40 [ 58.663376][ T5916] ? fdget_pos+0x254/0x320 [ 58.663391][ T5916] ? __pfx___mutex_lock+0x10/0x10 [ 58.663408][ T5916] ? __pfx_vfs_read+0x10/0x10 [ 58.663426][ T5916] ? __fget_files+0x2a/0x410 [ 58.663441][ T5916] ? __fget_files+0x395/0x410 [ 58.663456][ T5916] ? __fget_files+0x2a/0x410 [ 58.663473][ T5916] ksys_read+0x18f/0x2b0 [ 58.663491][ T5916] ? __pfx_ksys_read+0x10/0x10 [ 58.663508][ T5916] ? rcu_is_watching+0x15/0xb0 [ 58.663524][ T5916] ? rcu_is_watching+0x15/0xb0 [ 58.663539][ T5916] do_syscall_64+0xf3/0x230 [ 58.663557][ T5916] ? clear_bhb_loop+0x35/0x90 [ 58.663577][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.663596][ T5916] RIP: 0033:0x7f8ffed8b73c [ 58.663607][ T5916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.663619][ T5916] RSP: 002b:00007f8fffb26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.663635][ T5916] RAX: ffffffffffffffda RBX: 00007f8ffefa5fa0 RCX: 00007f8ffed8b73c [ 58.663647][ T5916] RDX: 000000000000000f RSI: 00007f8fffb260a0 RDI: 0000000000000005 [ 58.663657][ T5916] RBP: 00007f8fffb26090 R08: 0000000000000000 R09: 0000000000000000 [ 58.663666][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.663675][ T5916] R13: 0000000000000000 R14: 00007f8ffefa5fa0 R15: 00007f8fff0cfa28 [ 58.663691][ T5916] [ 58.753794][ T5920] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12'. [ 58.820483][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.222386][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 59.297030][ T5933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.297046][ T5933] IPv6: NLM_F_CREATE should be set when creating new route [ 59.391361][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 59.400107][ T5884] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.415468][ T5884] usb 1-1: config 0 has no interface number 0 [ 59.447950][ T5884] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.458963][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.486147][ T5884] usb 1-1: Product: syz [ 59.490347][ T5884] usb 1-1: Manufacturer: syz [ 59.515398][ T5884] usb 1-1: SerialNumber: syz [ 59.524517][ T5884] usb 1-1: config 0 descriptor?? [ 59.535597][ T5884] smsc95xx v2.0.0 [ 59.542227][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 59.555094][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 59.574206][ T5939] netlink: 'syz.1.19': attribute type 14 has an invalid length. [ 59.590785][ T5939] netlink: 'syz.1.19': attribute type 13 has an invalid length. [ 59.873836][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.915363][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.939342][ T5957] netlink: 68 bytes leftover after parsing attributes in process `syz.4.25'. [ 59.958864][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 59.960320][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 59.995285][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.065899][ T54] Bluetooth: hci4: command tx timeout [ 60.071679][ T5836] Bluetooth: hci0: command tx timeout [ 60.077110][ T5836] Bluetooth: hci1: command tx timeout [ 60.080955][ T54] Bluetooth: hci3: command tx timeout [ 60.083921][ T5836] Bluetooth: hci2: command tx timeout [ 60.113303][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 60.122838][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.235225][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 60.257065][ T5884] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 60.287696][ T5884] usb 1-1: USB disconnect, device number 2 [ 60.353218][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 60.383864][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.405085][ T46] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 60.414823][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.426859][ T46] usb 5-1: config 0 descriptor?? [ 60.477756][ T5941] syz.3.18 (5941): drop_caches: 2 [ 60.709479][ T5972] capability: warning: `syz.3.29' uses 32-bit capabilities (legacy support in use) [ 60.720997][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 60.726999][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 60.741318][ T46] usb 5-1: USB disconnect, device number 2 [ 60.887833][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 61.057727][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 62.147393][ T5836] Bluetooth: hci2: command tx timeout [ 62.147410][ T54] Bluetooth: hci3: command tx timeout [ 62.147438][ T54] Bluetooth: hci1: command tx timeout [ 62.152868][ T5836] Bluetooth: hci4: command tx timeout [ 62.158193][ T5838] Bluetooth: hci0: command tx timeout [ 62.421276][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.428517][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.436563][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.452033][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.462919][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.470887][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.621315][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 62.657268][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 62.806896][ T9] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 62.816637][ T9] usb 1-1: config 0 has no interface number 0 [ 62.836382][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.848456][ T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 62.860045][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.867081][ T5884] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 62.892280][ T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 62.933643][ T6003] bridge_slave_0: entered allmulticast mode [ 62.949767][ T9] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 62.960262][ T6003] bridge_slave_0: entered promiscuous mode [ 62.969240][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.983110][ T3578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.002857][ T9] usb 1-1: config 0 descriptor?? [ 63.009707][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.020299][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.028609][ T5997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.039801][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.043507][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input7 [ 63.060656][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 63.064158][ T6003] bridge_slave_1: entered allmulticast mode [ 63.083256][ T6003] bridge_slave_1: entered promiscuous mode [ 63.100604][ T5884] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 63.119446][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.139508][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.154181][ T5884] usb 4-1: config 0 descriptor?? [ 63.183619][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.216488][ T3578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.266307][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.291056][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.310352][ T46] usb 1-1: USB disconnect, device number 3 [ 63.340321][ T6003] team0: Port device team_slave_0 added [ 63.358928][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 63.423119][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 63.598398][ T5884] monterey 0003:0566:3004.0001: unknown main item tag 0xd [ 63.981614][ T6003] team0: Port device team_slave_1 added [ 64.412229][ T5884] monterey 0003:0566:3004.0001: collection stack underflow [ 64.420664][ T5884] monterey 0003:0566:3004.0001: item 0 4 0 12 parsing failed [ 64.428771][ T5884] monterey 0003:0566:3004.0001: probe with driver monterey failed with error -22 [ 64.441755][ T5884] usb 4-1: USB disconnect, device number 2 [ 64.442051][ T3578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.520164][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.529672][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.540507][ T54] Bluetooth: hci1: command tx timeout [ 64.562613][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.577121][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.596183][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.628590][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.708300][ T3578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.751784][ T6003] hsr_slave_0: entered promiscuous mode [ 64.758327][ T6003] hsr_slave_1: entered promiscuous mode [ 64.767988][ T6003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.772640][ T909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.779394][ T6003] Cannot create hsr debugfs directory [ 64.829580][ T6048] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 64.836125][ T6048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.873017][ T6048] vhci_hcd vhci_hcd.0: Device attached [ 64.884144][ T6049] vhci_hcd: connection closed [ 64.884310][ T2953] vhci_hcd: stop threads [ 64.894445][ T2953] vhci_hcd: release socket [ 64.898884][ T2953] vhci_hcd: disconnect device [ 64.942197][ T909] usb 1-1: Using ep0 maxpacket: 8 [ 64.950888][ T909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.971105][ T909] usb 1-1: config index 0 descriptor too short (expected 46082, got 45) [ 64.979472][ T909] usb 1-1: config 63 has an invalid descriptor of length 170, skipping remainder of the config [ 65.000180][ T909] usb 1-1: config 63 has 0 interfaces, different from the descriptor's value: 29 [ 65.011940][ T909] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 65.025066][ T3578] bridge_slave_1: left allmulticast mode [ 65.031063][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.031085][ T909] usb 1-1: Product: syz [ 65.031097][ T909] usb 1-1: Manufacturer: syz [ 65.031109][ T909] usb 1-1: SerialNumber: syz [ 65.064301][ T3578] bridge_slave_1: left promiscuous mode [ 65.070998][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.081512][ T3578] bridge_slave_0: left allmulticast mode [ 65.087224][ T3578] bridge_slave_0: left promiscuous mode [ 65.093610][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.133806][ T6003] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.267040][ T6035] futex_wake_op: syz.0.52 tries to shift op by -1; fix this program [ 65.285841][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.52'. [ 65.302189][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.310555][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.329337][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.343290][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.355999][ T3578] bond0 (unregistering): Released all slaves [ 65.367197][ T6003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.376370][ T6003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.380070][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 65.462022][ T6003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.469830][ T909] usb 1-1: USB disconnect, device number 4 [ 65.501143][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 65.510102][ T5911] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 65.545644][ T5911] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 65.563381][ T5911] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 65.587011][ T5911] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 65.609085][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 65.629783][ T5911] usb 5-1: config 0 has no interface number 0 [ 65.656733][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.660900][ T5911] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 65.702928][ T5911] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 65.711893][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.734949][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 65.744057][ T5911] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 65.755409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.762542][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.783131][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.790228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.795224][ T5911] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.837509][ T5911] usb 5-1: config 0 interface 125 has no altsetting 0 [ 65.874934][ T5911] usb 5-1: config 0 interface 125 has no altsetting 2 [ 65.900088][ T5911] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 65.925112][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.953122][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.965367][ T5911] usb 5-1: Product: syz [ 65.969558][ T5911] usb 5-1: Manufacturer: syz [ 65.979074][ T5911] usb 5-1: SerialNumber: syz [ 65.989512][ T5911] usb 5-1: config 0 descriptor?? [ 66.014973][ T5911] usb 5-1: selecting invalid altsetting 2 [ 66.090652][ T3578] hsr_slave_0: left promiscuous mode [ 66.101658][ T3578] hsr_slave_1: left promiscuous mode [ 66.107503][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.144517][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.169373][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.177219][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.223469][ T3578] veth1_macvtap: left promiscuous mode [ 66.228983][ T3578] veth0_macvtap: left promiscuous mode [ 66.240841][ T3578] veth1_vlan: left promiscuous mode [ 66.246165][ T3578] veth0_vlan: left promiscuous mode [ 66.340476][ T5883] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.454824][ T3578] team0 (unregistering): Port device team_slave_1 removed [ 66.470494][ T3578] team0 (unregistering): Port device team_slave_0 removed [ 66.480719][ T5883] usb 4-1: device descriptor read/64, error -71 [ 66.534345][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.589982][ T6003] veth0_vlan: entered promiscuous mode [ 66.599859][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 66.618149][ T6003] veth1_vlan: entered promiscuous mode [ 66.624338][ T54] Bluetooth: hci1: command tx timeout [ 66.663702][ T6003] veth0_macvtap: entered promiscuous mode [ 66.685846][ T6003] veth1_macvtap: entered promiscuous mode [ 66.717210][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.740451][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.740567][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 66.750388][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.768311][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803588][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.815742][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.826609][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.837297][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.848427][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.864152][ T6124] netlink: 108 bytes leftover after parsing attributes in process `syz.0.77'. [ 66.867277][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.887237][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.897358][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.913678][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.925094][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.930505][ T5883] usb 4-1: device descriptor read/64, error -71 [ 66.936383][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.954388][ T6003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.964956][ T6003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.979749][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.989719][ T6003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.010470][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.041224][ T6003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.052389][ T6003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.060715][ T5883] usb usb4-port1: attempt power cycle [ 67.066959][ T6003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101902][ T5911] get_1284_register timeout [ 67.106497][ T5911] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 67.114515][ C0] usb 5-1: async_complete: urb error -104 [ 67.114593][ C0] usb 5-1: async_complete: urb error -104 [ 67.114653][ C0] usb 5-1: async_complete: urb error -104 [ 67.114718][ C0] usb 5-1: async_complete: urb error -104 [ 67.182334][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 67.193624][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.195483][ T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.207247][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.227659][ T46] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 67.231903][ T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.244886][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.256019][ T46] usb 3-1: config 0 descriptor?? [ 67.276363][ T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.285651][ T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.409129][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.36'. [ 67.419551][ T5883] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 67.438325][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 67.451415][ T5883] usb 4-1: device descriptor read/8, error -71 [ 67.527071][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 67.538919][ T6152] netlink: 'syz.0.80': attribute type 3 has an invalid length. [ 67.667494][ T46] greenasia 0003:0E8F:0012.0002: item fetching failed at offset 2/3 [ 67.683295][ T46] greenasia 0003:0E8F:0012.0002: parse failed [ 67.690829][ T5883] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 67.712925][ T46] greenasia 0003:0E8F:0012.0002: probe with driver greenasia failed with error -22 [ 67.728142][ T6163] FAULT_INJECTION: forcing a failure. [ 67.728142][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.750984][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.0.83 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 67.751007][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.751016][ T6163] Call Trace: [ 67.751022][ T6163] [ 67.751028][ T6163] dump_stack_lvl+0x241/0x360 [ 67.751052][ T6163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.751068][ T6163] ? __pfx__printk+0x10/0x10 [ 67.751089][ T6163] ? lock_acquire+0xe3/0x550 [ 67.751108][ T6163] ? __pfx_lock_release+0x10/0x10 [ 67.751126][ T6163] ? aa_file_perm+0x137/0xf50 [ 67.751150][ T6163] ? aa_file_perm+0x3ef/0xf50 [ 67.751171][ T6163] should_fail_ex+0x3b0/0x4e0 [ 67.751189][ T6163] _copy_from_user+0x2d/0xb0 [ 67.751204][ T6163] kstrtouint_from_user+0xc6/0x190 [ 67.751224][ T6163] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 67.751244][ T6163] ? __pfx_lock_acquire+0x10/0x10 [ 67.751263][ T6163] ? __pfx___might_resched+0x10/0x10 [ 67.751310][ T6163] proc_fail_nth_write+0xaa/0x2d0 [ 67.751331][ T6163] ? common_file_perm+0x1a6/0x210 [ 67.751350][ T6163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.751378][ T6163] ? bpf_lsm_file_permission+0x9/0x10 [ 67.751395][ T6163] ? preempt_count_add+0x93/0x190 [ 67.751412][ T6163] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.751433][ T6163] vfs_write+0x29f/0xd10 [ 67.751452][ T6163] ? fdget_pos+0x254/0x320 [ 67.751467][ T6163] ? __mutex_unlock_slowpath+0x227/0x800 [ 67.751487][ T6163] ? __pfx_vfs_write+0x10/0x10 [ 67.751503][ T6163] ? do_sys_openat2+0x17a/0x1d0 [ 67.751519][ T6163] ? __fget_files+0x2a/0x410 [ 67.751534][ T6163] ? __fget_files+0x395/0x410 [ 67.751547][ T6163] ? __fget_files+0x2a/0x410 [ 67.751565][ T6163] ksys_write+0x18f/0x2b0 [ 67.751583][ T6163] ? __pfx_ksys_write+0x10/0x10 [ 67.751601][ T6163] ? rcu_is_watching+0x15/0xb0 [ 67.751617][ T6163] ? rcu_is_watching+0x15/0xb0 [ 67.751633][ T6163] do_syscall_64+0xf3/0x230 [ 67.751651][ T6163] ? clear_bhb_loop+0x35/0x90 [ 67.751673][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.751693][ T6163] RIP: 0033:0x7f843718b7df [ 67.751707][ T6163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.751719][ T6163] RSP: 002b:00007f8437f96030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.751737][ T6163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f843718b7df [ 67.751749][ T6163] RDX: 0000000000000001 RSI: 00007f8437f960a0 RDI: 0000000000000004 [ 67.751759][ T6163] RBP: 00007f8437f96090 R08: 0000000000000000 R09: 0000000000000000 [ 67.751768][ T6163] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 67.751777][ T6163] R13: 0000000000000000 R14: 00007f84373a5fa0 R15: 00007f84374cfa28 [ 67.751793][ T6163] [ 68.046627][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.051325][ T6169] FAULT_INJECTION: forcing a failure. [ 68.051325][ T6169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.067541][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.4.85 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 68.067561][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.067570][ T6169] Call Trace: [ 68.067576][ T6169] [ 68.067582][ T6169] dump_stack_lvl+0x241/0x360 [ 68.067603][ T6169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.067617][ T6169] ? __pfx__printk+0x10/0x10 [ 68.067638][ T6169] ? lock_acquire+0xe3/0x550 [ 68.067658][ T6169] ? __pfx_lock_release+0x10/0x10 [ 68.067676][ T6169] ? aa_file_perm+0x137/0xf50 [ 68.067695][ T6169] ? aa_file_perm+0x3ef/0xf50 [ 68.067713][ T6169] should_fail_ex+0x3b0/0x4e0 [ 68.067729][ T6169] _copy_from_user+0x2d/0xb0 [ 68.067742][ T6169] kstrtouint_from_user+0xc6/0x190 [ 68.067761][ T6169] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 68.067780][ T6169] ? __pfx_lock_acquire+0x10/0x10 [ 68.067798][ T6169] ? __pfx___might_resched+0x10/0x10 [ 68.067818][ T6169] proc_fail_nth_write+0xaa/0x2d0 [ 68.067838][ T6169] ? common_file_perm+0x1a6/0x210 [ 68.067855][ T6169] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.067876][ T6169] ? bpf_lsm_file_permission+0x9/0x10 [ 68.067893][ T6169] ? preempt_count_add+0x93/0x190 [ 68.067908][ T6169] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 68.067928][ T6169] vfs_write+0x29f/0xd10 [ 68.067946][ T6169] ? fdget_pos+0x254/0x320 [ 68.067960][ T6169] ? __mutex_unlock_slowpath+0x227/0x800 [ 68.067978][ T6169] ? __pfx_vfs_write+0x10/0x10 [ 68.067996][ T6169] ? __fget_files+0x2a/0x410 [ 68.068012][ T6169] ? __fget_files+0x395/0x410 [ 68.068025][ T6169] ? __fget_files+0x2a/0x410 [ 68.068043][ T6169] ksys_write+0x18f/0x2b0 [ 68.068061][ T6169] ? __pfx_ksys_write+0x10/0x10 [ 68.068078][ T6169] ? rcu_is_watching+0x15/0xb0 [ 68.068094][ T6169] ? rcu_is_watching+0x15/0xb0 [ 68.068110][ T6169] do_syscall_64+0xf3/0x230 [ 68.068127][ T6169] ? clear_bhb_loop+0x35/0x90 [ 68.068161][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.068181][ T6169] RIP: 0033:0x7f8ffed8b7df [ 68.068195][ T6169] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 68.068206][ T6169] RSP: 002b:00007f8fffb26030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.068221][ T6169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ffed8b7df [ 68.068232][ T6169] RDX: 0000000000000001 RSI: 00007f8fffb260a0 RDI: 0000000000000003 [ 68.068242][ T6169] RBP: 00007f8fffb26090 R08: 0000000000000000 R09: 0000000000000000 [ 68.068251][ T6169] R10: 000000000000000e R11: 0000000000000293 R12: 0000000000000002 [ 68.068260][ T6169] R13: 0000000000000001 R14: 00007f8ffefa5fa0 R15: 00007f8fff0cfa28 [ 68.068273][ T6169] [ 68.335193][ T5883] usb 4-1: device descriptor read/8, error -71 [ 68.344792][ T46] usb 5-1: USB disconnect, device number 3 [ 68.386518][ T5911] usb 3-1: USB disconnect, device number 2 [ 68.392957][ T6175] FAULT_INJECTION: forcing a failure. [ 68.392957][ T6175] name failslab, interval 1, probability 0, space 0, times 0 [ 68.444062][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.4.87 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 68.444085][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.444095][ T6175] Call Trace: [ 68.444101][ T6175] [ 68.444107][ T6175] dump_stack_lvl+0x241/0x360 [ 68.444130][ T6175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.444146][ T6175] ? __pfx__printk+0x10/0x10 [ 68.444169][ T6175] ? __pfx___might_resched+0x10/0x10 [ 68.444189][ T6175] should_fail_ex+0x3b0/0x4e0 [ 68.444205][ T6175] should_failslab+0xac/0x100 [ 68.444227][ T6175] ? alloc_empty_file+0x9e/0x1d0 [ 68.444242][ T6175] kmem_cache_alloc_noprof+0x70/0x380 [ 68.444258][ T6175] alloc_empty_file+0x9e/0x1d0 [ 68.444274][ T6175] path_openat+0x107/0x3580 [ 68.444298][ T6175] ? rcu_is_watching+0x15/0xb0 [ 68.444318][ T6175] ? __pfx_lock_release+0x10/0x10 [ 68.444339][ T6175] ? __pfx_path_openat+0x10/0x10 [ 68.444364][ T6175] ? rcu_is_watching+0x15/0xb0 [ 68.444384][ T6175] do_filp_open+0x3e3/0x4e0 [ 68.444403][ T6175] ? __pfx_do_filp_open+0x10/0x10 [ 68.444420][ T6175] ? do_raw_spin_lock+0x14f/0x370 [ 68.444448][ T6175] io_openat2+0x44e/0x690 [ 68.444469][ T6175] ? __pfx_io_openat2+0x10/0x10 [ 68.444488][ T6175] ? __virt_addr_valid+0x183/0x530 [ 68.444509][ T6175] ? __virt_addr_valid+0x183/0x530 [ 68.444529][ T6175] ? __virt_addr_valid+0x45f/0x530 [ 68.444549][ T6175] ? __phys_addr_symbol+0x2f/0x70 [ 68.444569][ T6175] ? __check_object_size+0x47a/0x730 [ 68.444592][ T6175] io_issue_sqe+0x403/0x12b0 [ 68.444631][ T6175] ? __pfx_io_issue_sqe+0x10/0x10 [ 68.444655][ T6175] io_submit_sqes+0xa75/0x1d60 [ 68.444686][ T6175] __se_sys_io_uring_enter+0x2c8/0x3390 [ 68.444709][ T6175] ? __pfx_lock_release+0x10/0x10 [ 68.444729][ T6175] ? proc_fail_nth_write+0x24f/0x2d0 [ 68.444751][ T6175] ? common_file_perm+0x1a6/0x210 [ 68.444770][ T6175] ? __pfx_lock_release+0x10/0x10 [ 68.444789][ T6175] ? bpf_lsm_file_permission+0x9/0x10 [ 68.444808][ T6175] ? sb_end_write+0xe9/0x1c0 [ 68.444823][ T6175] ? vfs_write+0x7fa/0xd10 [ 68.444842][ T6175] ? __mutex_unlock_slowpath+0x227/0x800 [ 68.444861][ T6175] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 68.444883][ T6175] ? do_sys_openat2+0x17a/0x1d0 [ 68.444899][ T6175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 68.444917][ T6175] ? __fget_files+0x2a/0x410 [ 68.444933][ T6175] ? __fget_files+0x2a/0x410 [ 68.444949][ T6175] ? fput+0x21b/0x290 [ 68.444965][ T6175] ? ksys_write+0x251/0x2b0 [ 68.444982][ T6175] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.445003][ T6175] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.445023][ T6175] ? rcu_is_watching+0x15/0xb0 [ 68.445040][ T6175] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 68.445062][ T6175] do_syscall_64+0xf3/0x230 [ 68.445080][ T6175] ? clear_bhb_loop+0x35/0x90 [ 68.445101][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.445120][ T6175] RIP: 0033:0x7f8ffed8cd29 [ 68.445134][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.445146][ T6175] RSP: 002b:00007f8fffb26038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 68.445164][ T6175] RAX: ffffffffffffffda RBX: 00007f8ffefa5fa0 RCX: 00007f8ffed8cd29 [ 68.445175][ T6175] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 68.445185][ T6175] RBP: 00007f8fffb26090 R08: 0000000000000000 R09: 0000000000000000 [ 68.445194][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.445203][ T6175] R13: 0000000000000000 R14: 00007f8ffefa5fa0 R15: 00007f8fff0cfa28 [ 68.445219][ T6175] [ 68.603474][ T5883] usb usb4-port1: unable to enumerate USB device [ 68.840489][ T5838] Bluetooth: hci1: command tx timeout [ 68.849210][ T6185] FAULT_INJECTION: forcing a failure. [ 68.849210][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 68.935267][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.4.89 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 68.935291][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.935300][ T6185] Call Trace: [ 68.935313][ T6185] [ 68.935319][ T6185] dump_stack_lvl+0x241/0x360 [ 68.935340][ T6185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.935357][ T6185] ? __pfx__printk+0x10/0x10 [ 68.935380][ T6185] ? __pfx___might_resched+0x10/0x10 [ 68.935400][ T6185] should_fail_ex+0x3b0/0x4e0 [ 68.935419][ T6185] should_failslab+0xac/0x100 [ 68.935442][ T6185] __kmalloc_noprof+0xdd/0x4c0 [ 68.935458][ T6185] ? security_sk_alloc+0x53/0x360 [ 68.935475][ T6185] security_sk_alloc+0x53/0x360 [ 68.935492][ T6185] sk_prot_alloc+0xfa/0x210 [ 68.935512][ T6185] ? sk_alloc+0x26/0x370 [ 68.935532][ T6185] sk_alloc+0x38/0x370 [ 68.935552][ T6185] af_alg_accept+0xb9/0x510 [ 68.935571][ T6185] do_accept+0x4c4/0x6d0 [ 68.935591][ T6185] ? __pfx_do_accept+0x10/0x10 [ 68.935617][ T6185] __sys_accept4+0x11f/0x1d0 [ 68.935635][ T6185] ? __pfx___sys_accept4+0x10/0x10 [ 68.935654][ T6185] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.935675][ T6185] ? rcu_is_watching+0x15/0xb0 [ 68.935692][ T6185] __x64_sys_accept4+0x9a/0xb0 [ 68.935710][ T6185] do_syscall_64+0xf3/0x230 [ 68.935729][ T6185] ? clear_bhb_loop+0x35/0x90 [ 68.935749][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.935768][ T6185] RIP: 0033:0x7f8ffed8cd29 [ 68.935781][ T6185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.935793][ T6185] RSP: 002b:00007f8fffb26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 68.935810][ T6185] RAX: ffffffffffffffda RBX: 00007f8ffefa5fa0 RCX: 00007f8ffed8cd29 [ 68.935821][ T6185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.935829][ T6185] RBP: 00007f8fffb26090 R08: 0000000000000000 R09: 0000000000000000 [ 68.935838][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.935847][ T6185] R13: 0000000000000000 R14: 00007f8ffefa5fa0 R15: 00007f8fff0cfa28 [ 68.935863][ T6185] [ 69.352411][ T6197] __nla_validate_parse: 2 callbacks suppressed [ 69.352430][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.93'. [ 69.493153][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.90'. [ 69.511169][ C1] vcan0: j1939_session_tx_dat: 0xffff88807e13d400: queue data error: -100 [ 69.519957][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 69.527569][ C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 69.535199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.543045][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.550918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.558741][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.566636][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.574481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.582373][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.590199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.598098][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.605951][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.613854][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.621697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.629571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.637424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.645312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.653162][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.661048][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.668863][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.676759][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.684602][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.692518][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.700340][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.708253][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.716098][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.724000][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.730661][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 69.731822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.747165][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.755002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.763150][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.770998][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.778867][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.786732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.794632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.802484][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.810354][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.818209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.826095][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.834033][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.841917][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.846680][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 69.849716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.849781][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.874068][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.881955][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.889773][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.897666][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.905509][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.913389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.921309][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.924349][ T5911] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 69.929155][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.939024][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.945975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946093][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946148][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946160][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946273][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946286][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946331][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.946401][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.946446][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.958279][ T5911] usb 1-1: Product: syz [ 69.962222][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.962284][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.962298][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 69.973540][ T5911] usb 1-1: Manufacturer: syz [ 69.977959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 69.992533][ T5911] usb 1-1: SerialNumber: syz [ 69.993769][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.032876][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 70.040640][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.069667][ T5911] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 70.071864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.071946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.071959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.072001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.186810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.194695][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.202546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.210441][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.214979][ T5903] usb 4-1: config index 0 descriptor too short (expected 530, got 18) [ 70.218323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.218394][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.228412][ T5903] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 70.234326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.234395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.244248][ T5903] usb 4-1: config 0 has no interface number 0 [ 70.250307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.250372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.262318][ T5903] usb 4-1: too many endpoints for config 0 interface 83 altsetting 125: 241, using maximum allowed: 30 [ 70.265958][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.272430][ T5903] usb 4-1: config 0 interface 83 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 70.279859][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.289676][ T5903] usb 4-1: config 0 interface 83 has no altsetting 0 [ 70.298650][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.298717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.310755][ T5903] usb 4-1: New USB device found, idVendor=54ed, idProduct=9a70, bcdDevice=35.23 [ 70.319741][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.319808][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.367938][ T5903] usb 4-1: New USB device strings: Mfr=98, Product=145, SerialNumber=114 [ 70.374842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.374919][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.374932][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.389711][ T5903] usb 4-1: Product: syz [ 70.391213][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.399663][ T5903] usb 4-1: Manufacturer: syz [ 70.407206][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.407269][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.407282][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.407324][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.407337][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.413666][ T5903] usb 4-1: SerialNumber: syz [ 70.419327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.425536][ T5903] usb 4-1: config 0 descriptor?? [ 70.431703][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.431767][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.431780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.431842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.431853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.431895][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.527485][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.535426][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.543310][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.551285][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.559187][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.567155][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.574978][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.582856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.590693][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.598555][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.606488][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.614376][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.622216][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.630075][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.637900][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.645794][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.646106][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.653616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.653675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.653689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.664630][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.694416][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.702299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.710111][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.717995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.725838][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.733726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.741560][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.749419][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.757268][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.759639][ T5903] usb 4-1: USB disconnect, device number 7 [ 70.765144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765211][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765252][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765306][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765318][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765374][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765416][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765429][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765471][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765483][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765581][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.765593][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.765632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.873523][ T6223] FAULT_INJECTION: forcing a failure. [ 70.873523][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.880651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.880716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.889346][ T6223] CPU: 0 UID: 0 PID: 6223 Comm: syz.2.100 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 70.889366][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.889375][ T6223] Call Trace: [ 70.889381][ T6223] [ 70.889387][ T6223] dump_stack_lvl+0x241/0x360 [ 70.889410][ T6223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.889426][ T6223] ? __pfx__printk+0x10/0x10 [ 70.889450][ T6223] ? snprintf+0xda/0x120 [ 70.889473][ T6223] should_fail_ex+0x3b0/0x4e0 [ 70.889490][ T6223] _copy_to_user+0x31/0xb0 [ 70.889506][ T6223] simple_read_from_buffer+0xca/0x150 [ 70.889529][ T6223] proc_fail_nth_read+0x1e9/0x250 [ 70.889549][ T6223] ? common_file_perm+0x1a6/0x210 [ 70.889568][ T6223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.889591][ T6223] ? rw_verify_area+0x243/0x630 [ 70.889609][ T6223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 70.889630][ T6223] vfs_read+0x1f8/0xb40 [ 70.889648][ T6223] ? fdget_pos+0x254/0x320 [ 70.889663][ T6223] ? __pfx___mutex_lock+0x10/0x10 [ 70.889681][ T6223] ? __pfx_vfs_read+0x10/0x10 [ 70.889697][ T6223] ? do_sys_openat2+0x17a/0x1d0 [ 70.889713][ T6223] ? __fget_files+0x2a/0x410 [ 70.889728][ T6223] ? __fget_files+0x395/0x410 [ 70.889743][ T6223] ? __fget_files+0x2a/0x410 [ 70.889759][ T6223] ksys_read+0x18f/0x2b0 [ 70.889778][ T6223] ? __pfx_ksys_read+0x10/0x10 [ 70.889796][ T6223] ? rcu_is_watching+0x15/0xb0 [ 70.889812][ T6223] ? rcu_is_watching+0x15/0xb0 [ 70.889827][ T6223] do_syscall_64+0xf3/0x230 [ 70.889845][ T6223] ? clear_bhb_loop+0x35/0x90 [ 70.889865][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.889884][ T6223] RIP: 0033:0x7fe1ecd8b73c [ 70.889898][ T6223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.889910][ T6223] RSP: 002b:00007fe1edb38030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.889927][ T6223] RAX: ffffffffffffffda RBX: 00007fe1ecfa5fa0 RCX: 00007fe1ecd8b73c [ 70.889939][ T6223] RDX: 000000000000000f RSI: 00007fe1edb380a0 RDI: 0000000000000004 [ 70.889948][ T6223] RBP: 00007fe1edb38090 R08: 0000000000000000 R09: 0000000000000000 [ 70.889958][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.889967][ T6223] R13: 0000000000000000 R14: 00007fe1ecfa5fa0 R15: 00007fe1ed0cfa28 [ 70.889984][ T6223] [ 71.179661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.187527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.195345][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.203209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.211042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.218881][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.226694][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.234547][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.242366][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.250207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.258115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.265969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.273802][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.281682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.289494][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.297385][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.305226][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.313114][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.320950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.328822][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.336684][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.344552][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.352393][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.360263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.368115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.376000][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.383856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.391747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.399567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.407462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.415296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.423189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.431022][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.438900][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.446744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.454652][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.462495][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.470359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.478212][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.486089][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.493930][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.501819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.509641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.517525][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.525359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.533244][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.541079][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.548943][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.556786][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.564669][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.572515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.580373][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.588218][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.596088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.603927][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.611800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.619705][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.627591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.635506][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.643388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.651207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.659056][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.666897][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.667173][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.674744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.674761][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.681737][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.688805][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.710725][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.718581][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.726425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.734316][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.742151][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.750023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.757866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.765740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.773587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.781471][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.789293][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.797188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.805026][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.812913][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.820753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.828609][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.836457][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.844343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.852180][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.860039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.867981][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.875863][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.883721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.891605][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.899423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.907309][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.915138][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.923027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.930854][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.938722][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.946569][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.968849][ T5838] Bluetooth: hci1: command 0x0419 tx timeout [ 72.071649][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.072227][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 72.590568][ T46] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 72.667945][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 72.795252][ T46] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 72.831570][ T46] usb 3-1: config 6 has no interface number 0 [ 72.853691][ T46] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 72.891651][ T46] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.944069][ T46] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.983424][ T46] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 73.002879][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.045310][ T46] usb 3-1: Product: syz [ 73.065621][ T46] usb 3-1: Manufacturer: syz [ 73.070254][ T46] usb 3-1: SerialNumber: syz [ 73.116882][ T46] hso 3-1:6.2: Failed to find INT IN ep [ 73.121734][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 73.129417][ T9] ath9k_htc: Failed to initialize the device [ 73.332270][ T5903] usb 1-1: USB disconnect, device number 5 [ 73.342271][ T5903] usb 1-1: ath9k_htc: USB layer deinitialized [ 73.363885][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.395009][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.409316][ T6302] syzkaller0: entered allmulticast mode [ 73.424504][ T909] usb 3-1: USB disconnect, device number 3 [ 73.476510][ T6306] FAULT_INJECTION: forcing a failure. [ 73.476510][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 73.490190][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.122 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 73.490212][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.490220][ T6306] Call Trace: [ 73.490226][ T6306] [ 73.490231][ T6306] dump_stack_lvl+0x241/0x360 [ 73.490253][ T6306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.490268][ T6306] ? __pfx__printk+0x10/0x10 [ 73.490291][ T6306] ? __pfx___might_resched+0x10/0x10 [ 73.490311][ T6306] should_fail_ex+0x3b0/0x4e0 [ 73.490328][ T6306] should_failslab+0xac/0x100 [ 73.490350][ T6306] ? vm_area_alloc+0x10e/0x1d0 [ 73.490364][ T6306] kmem_cache_alloc_noprof+0x70/0x380 [ 73.490382][ T6306] vm_area_alloc+0x10e/0x1d0 [ 73.490400][ T6306] alloc_bprm+0x4a1/0xbe0 [ 73.490417][ T6306] ? __virt_addr_valid+0x45f/0x530 [ 73.490439][ T6306] ? __might_fault+0xc6/0x120 [ 73.490458][ T6306] do_execveat_common+0x1ae/0x710 [ 73.490481][ T6306] __x64_sys_execveat+0xc4/0xe0 [ 73.490501][ T6306] do_syscall_64+0xf3/0x230 [ 73.490518][ T6306] ? clear_bhb_loop+0x35/0x90 [ 73.490538][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.490558][ T6306] RIP: 0033:0x7fea1ad8cd29 [ 73.490572][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.490584][ T6306] RSP: 002b:00007fea1bcb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 73.490600][ T6306] RAX: ffffffffffffffda RBX: 00007fea1afa5fa0 RCX: 00007fea1ad8cd29 [ 73.490612][ T6306] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 73.490623][ T6306] RBP: 00007fea1bcb4090 R08: 0000000000000000 R09: 0000000000000000 [ 73.490633][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.490641][ T6306] R13: 0000000000000000 R14: 00007fea1afa5fa0 R15: 00007fea1b0cfa28 [ 73.490657][ T6306] [ 73.729395][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 73.957147][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 73.980907][ T5838] Bluetooth: hci1: command 0x0419 tx timeout [ 73.987833][ T6325] fuse: Bad value for 'fd' [ 74.182273][ T6345] netlink: 71 bytes leftover after parsing attributes in process `syz.5.132'. [ 74.190541][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 74.356484][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 74.546708][ T6365] FAULT_INJECTION: forcing a failure. [ 74.546708][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.578877][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.5.138 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 74.578901][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.578910][ T6365] Call Trace: [ 74.578916][ T6365] [ 74.578922][ T6365] dump_stack_lvl+0x241/0x360 [ 74.578945][ T6365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.578962][ T6365] ? __pfx__printk+0x10/0x10 [ 74.578986][ T6365] ? snprintf+0xda/0x120 [ 74.579009][ T6365] should_fail_ex+0x3b0/0x4e0 [ 74.579027][ T6365] _copy_to_user+0x31/0xb0 [ 74.579041][ T6365] simple_read_from_buffer+0xca/0x150 [ 74.579065][ T6365] proc_fail_nth_read+0x1e9/0x250 [ 74.579086][ T6365] ? common_file_perm+0x1a6/0x210 [ 74.579106][ T6365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.579129][ T6365] ? rw_verify_area+0x243/0x630 [ 74.579147][ T6365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.579169][ T6365] vfs_read+0x1f8/0xb40 [ 74.579187][ T6365] ? fdget_pos+0x254/0x320 [ 74.579203][ T6365] ? __pfx___mutex_lock+0x10/0x10 [ 74.579222][ T6365] ? __pfx_vfs_read+0x10/0x10 [ 74.579241][ T6365] ? __fget_files+0x2a/0x410 [ 74.579256][ T6365] ? __fget_files+0x395/0x410 [ 74.579271][ T6365] ? __fget_files+0x2a/0x410 [ 74.579289][ T6365] ksys_read+0x18f/0x2b0 [ 74.579307][ T6365] ? __pfx_ksys_read+0x10/0x10 [ 74.579326][ T6365] ? rcu_is_watching+0x15/0xb0 [ 74.579342][ T6365] ? rcu_is_watching+0x15/0xb0 [ 74.579358][ T6365] do_syscall_64+0xf3/0x230 [ 74.579377][ T6365] ? clear_bhb_loop+0x35/0x90 [ 74.579399][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.579419][ T6365] RIP: 0033:0x7f7d0638b73c [ 74.579433][ T6365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.579444][ T6365] RSP: 002b:00007f7d0711e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.579462][ T6365] RAX: ffffffffffffffda RBX: 00007f7d065a5fa0 RCX: 00007f7d0638b73c [ 74.579474][ T6365] RDX: 000000000000000f RSI: 00007f7d0711e0a0 RDI: 0000000000000005 [ 74.579484][ T6365] RBP: 00007f7d0711e090 R08: 0000000000000000 R09: 0000000000000000 [ 74.579494][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.579504][ T6365] R13: 0000000000000000 R14: 00007f7d065a5fa0 R15: 00007f7d066cfa28 [ 74.579519][ T6365] [ 74.852916][ T29] audit: type=1326 audit(1737902691.200:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 74.935704][ T29] audit: type=1326 audit(1737902691.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 74.963546][ T29] audit: type=1326 audit(1737902691.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 74.990800][ T29] audit: type=1326 audit(1737902691.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.034745][ T29] audit: type=1326 audit(1737902691.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.060499][ T29] audit: type=1326 audit(1737902691.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.123258][ T29] audit: type=1326 audit(1737902691.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.140529][ T5903] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.161091][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 75.168003][ T29] audit: type=1326 audit(1737902691.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.192997][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 75.212787][ T29] audit: type=1326 audit(1737902691.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.248838][ T29] audit: type=1326 audit(1737902691.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe1ecd8cd29 code=0x7ffc0000 [ 75.304184][ T5903] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 75.320853][ T5903] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 75.338461][ T5903] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 75.352043][ T5881] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 75.360360][ T5903] usb 3-1: config 0 has no interface number 0 [ 75.366863][ T5903] usb 3-1: config 0 has no interface number 1 [ 75.376285][ T5903] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 75.388182][ T5903] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.407984][ T5903] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 75.449522][ T5903] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 75.472494][ T5903] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 75.478065][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 75.486213][ T5903] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 75.505595][ T5903] usb 3-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 75.523599][ T5881] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 75.527293][ T5903] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 75.533651][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.543075][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 75.559876][ T6412] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 75.570059][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.595893][ T5903] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 75.599711][ T5881] usb 6-1: config 0 descriptor?? [ 75.625005][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 75.650154][ T5903] usb 3-1: config 0 interface 66 has no altsetting 0 [ 75.672245][ T5903] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 75.684850][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.710606][ T5903] usb 3-1: Product: syz [ 75.720496][ T9] usb 1-1: device descriptor read/64, error -71 [ 75.726942][ T5903] usb 3-1: Manufacturer: syz [ 75.747139][ T5903] usb 3-1: SerialNumber: syz [ 75.758222][ T5903] usb 3-1: config 0 descriptor?? [ 75.777384][ T5903] ljca 3-1:0.84: bulk endpoints not found [ 75.854783][ T5881] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 75.884548][ T5881] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 75.901597][ T5881] [drm:udl_init] *ERROR* Selecting channel failed [ 75.914391][ T5881] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 75.923651][ T5881] [drm] Initialized udl on minor 2 [ 75.929321][ T5881] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 75.951428][ T5881] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 75.971038][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 75.988115][ T46] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 75.999523][ T5881] usb 6-1: USB disconnect, device number 2 [ 76.007807][ T46] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 76.014735][ T5884] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 76.110528][ T9] usb 1-1: device descriptor read/64, error -71 [ 76.181848][ T5884] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 76.197443][ T5884] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 76.216517][ T5884] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.221075][ T9] usb usb1-port1: attempt power cycle [ 76.237408][ T5884] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ea.c3 [ 76.248762][ T5884] usb 4-1: New USB device strings: Mfr=126, Product=98, SerialNumber=26 [ 76.269481][ T5884] usb 4-1: Product: syz [ 76.279399][ T5884] usb 4-1: Manufacturer: syz [ 76.290587][ T5884] usb 4-1: SerialNumber: syz [ 76.299008][ T5884] usb 4-1: config 0 descriptor?? [ 76.371803][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 76.442692][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.159'. [ 76.580642][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 76.611041][ T9] usb 1-1: device descriptor read/8, error -71 [ 76.860656][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 76.869509][ T6481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.154'. [ 76.890879][ T9] usb 1-1: device descriptor read/8, error -71 [ 76.900563][ T5884] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.991987][ T5883] usb 4-1: USB disconnect, device number 8 [ 77.001873][ T9] usb usb1-port1: unable to enumerate USB device [ 77.051268][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 77.062889][ T5884] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.077054][ T5884] usb 6-1: config 179 has no interface number 0 [ 77.084485][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.103358][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.120072][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.132815][ T5884] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.143989][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 77.145976][ T5884] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.167494][ T5884] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.178915][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.196618][ T6479] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 77.434136][ T5883] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input8 [ 77.533020][ T6498] Zero length message leads to an empty skb [ 77.605883][ T5903] ljca 3-1:0.66: probe with driver ljca failed with error -71 [ 77.650769][ T5903] usb 3-1: USB disconnect, device number 4 [ 77.732681][ T6508] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.172'. [ 77.744172][ T6508] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.172'. [ 77.751612][ T6507] FAULT_INJECTION: forcing a failure. [ 77.751612][ T6507] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.754096][ T6508] netlink: 332 bytes leftover after parsing attributes in process `syz.4.172'. [ 77.775808][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.2.173 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 77.775828][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.775837][ T6507] Call Trace: [ 77.775841][ T6507] [ 77.775846][ T6507] dump_stack_lvl+0x241/0x360 [ 77.775870][ T6507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.775885][ T6507] ? __pfx__printk+0x10/0x10 [ 77.775906][ T6507] ? rcu_is_watching+0x15/0xb0 [ 77.775922][ T6507] ? lock_acquire+0xe3/0x550 [ 77.775943][ T6507] should_fail_ex+0x3b0/0x4e0 [ 77.775962][ T6507] prepare_alloc_pages+0x1da/0x5b0 [ 77.775985][ T6507] __alloc_pages_noprof+0x16f/0x710 [ 77.776006][ T6507] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 77.776025][ T6507] ? trace_contention_end+0x3c/0x120 [ 77.776041][ T6507] ? __mutex_lock+0x397/0x1010 [ 77.776061][ T6507] ? __pfx_lock_release+0x10/0x10 [ 77.776084][ T6507] alloc_pages_mpol_noprof+0x3e1/0x780 [ 77.776108][ T6507] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 77.776132][ T6507] ? alloc_pages_noprof+0xef/0x170 [ 77.776147][ T6507] pipe_write+0x652/0x1a30 [ 77.776178][ T6507] ? __pfx_pipe_write+0x10/0x10 [ 77.776198][ T6507] ? common_file_perm+0x1a6/0x210 [ 77.776217][ T6507] ? bpf_lsm_file_permission+0x9/0x10 [ 77.776236][ T6507] vfs_write+0xacf/0xd10 [ 77.776255][ T6507] ? __pfx_pipe_write+0x10/0x10 [ 77.776275][ T6507] ? __pfx_vfs_write+0x10/0x10 [ 77.776291][ T6507] ? do_sys_openat2+0x17a/0x1d0 [ 77.776303][ T6507] ? __fget_files+0x2a/0x410 [ 77.776316][ T6507] ? __fget_files+0x2a/0x410 [ 77.776330][ T6507] ksys_write+0x18f/0x2b0 [ 77.776345][ T6507] ? __pfx_ksys_write+0x10/0x10 [ 77.776370][ T6507] ? rcu_is_watching+0x15/0xb0 [ 77.776383][ T6507] ? rcu_is_watching+0x15/0xb0 [ 77.776395][ T6507] do_syscall_64+0xf3/0x230 [ 77.776410][ T6507] ? clear_bhb_loop+0x35/0x90 [ 77.776428][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.776444][ T6507] RIP: 0033:0x7fe1ecd8cd29 [ 77.776455][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.776465][ T6507] RSP: 002b:00007fe1edb38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.776479][ T6507] RAX: ffffffffffffffda RBX: 00007fe1ecfa5fa0 RCX: 00007fe1ecd8cd29 [ 77.776488][ T6507] RDX: 000000000000002c RSI: 0000000020000380 RDI: 0000000000000006 [ 77.776496][ T6507] RBP: 00007fe1edb38090 R08: 0000000000000000 R09: 0000000000000000 [ 77.776504][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.776511][ T6507] R13: 0000000000000000 R14: 00007fe1ecfa5fa0 R15: 00007fe1ed0cfa28 [ 77.776524][ T6507] [ 78.080453][ T5884] usb 6-1: USB disconnect, device number 3 [ 78.086361][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.086403][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.149109][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.331486][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.450769][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.458304][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.466459][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.471389][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.485615][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.496236][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.503670][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.566409][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.686388][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 78.736789][ T6535] FAULT_INJECTION: forcing a failure. [ 78.736789][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.770385][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.5.185 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 78.770412][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.770421][ T6535] Call Trace: [ 78.770427][ T6535] [ 78.770433][ T6535] dump_stack_lvl+0x241/0x360 [ 78.770456][ T6535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.770471][ T6535] ? __pfx__printk+0x10/0x10 [ 78.770490][ T6535] ? lock_acquire+0xe3/0x550 [ 78.770510][ T6535] ? __pfx_lock_release+0x10/0x10 [ 78.770528][ T6535] ? aa_file_perm+0x137/0xf50 [ 78.770548][ T6535] ? aa_file_perm+0x3ef/0xf50 [ 78.770569][ T6535] should_fail_ex+0x3b0/0x4e0 [ 78.770587][ T6535] _copy_from_user+0x2d/0xb0 [ 78.770603][ T6535] kstrtouint_from_user+0xc6/0x190 [ 78.770623][ T6535] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 78.770644][ T6535] ? __pfx_lock_acquire+0x10/0x10 [ 78.770663][ T6535] ? __pfx___might_resched+0x10/0x10 [ 78.770684][ T6535] proc_fail_nth_write+0xaa/0x2d0 [ 78.770706][ T6535] ? common_file_perm+0x1a6/0x210 [ 78.770724][ T6535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.770745][ T6535] ? bpf_lsm_file_permission+0x9/0x10 [ 78.770763][ T6535] ? preempt_count_add+0x93/0x190 [ 78.770779][ T6535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.770801][ T6535] vfs_write+0x29f/0xd10 [ 78.770820][ T6535] ? fdget_pos+0x254/0x320 [ 78.770834][ T6535] ? __mutex_unlock_slowpath+0x227/0x800 [ 78.770853][ T6535] ? __pfx_vfs_write+0x10/0x10 [ 78.770871][ T6535] ? do_sys_openat2+0x17a/0x1d0 [ 78.770887][ T6535] ? __fget_files+0x2a/0x410 [ 78.770902][ T6535] ? __fget_files+0x395/0x410 [ 78.770915][ T6535] ? __fget_files+0x2a/0x410 [ 78.770933][ T6535] ksys_write+0x18f/0x2b0 [ 78.770951][ T6535] ? __pfx_ksys_write+0x10/0x10 [ 78.770968][ T6535] ? rcu_is_watching+0x15/0xb0 [ 78.770985][ T6535] ? rcu_is_watching+0x15/0xb0 [ 78.771000][ T6535] do_syscall_64+0xf3/0x230 [ 78.771017][ T6535] ? clear_bhb_loop+0x35/0x90 [ 78.771047][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.771066][ T6535] RIP: 0033:0x7f7d0638b7df [ 78.771080][ T6535] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 78.771092][ T6535] RSP: 002b:00007f7d0711e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 78.771109][ T6535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d0638b7df [ 78.771120][ T6535] RDX: 0000000000000001 RSI: 00007f7d0711e0a0 RDI: 000000000000000b [ 78.771130][ T6535] RBP: 00007f7d0711e090 R08: 0000000000000000 R09: 0000000000000000 [ 78.771139][ T6535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 78.771149][ T6535] R13: 0000000000000000 R14: 00007f7d065a5fa0 R15: 00007f7d066cfa28 [ 78.771165][ T6535] [ 79.070897][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.078202][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.089118][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.097466][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.117909][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.136669][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.165376][ T81] bridge_slave_1: left allmulticast mode [ 79.171186][ T81] bridge_slave_1: left promiscuous mode [ 79.176892][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.200162][ T81] bridge_slave_0: left allmulticast mode [ 79.222369][ T81] bridge_slave_0: left promiscuous mode [ 79.228084][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.395373][ T6561] FAULT_INJECTION: forcing a failure. [ 79.395373][ T6561] name failslab, interval 1, probability 0, space 0, times 0 [ 79.408696][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.5.188 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 79.408719][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.408727][ T6561] Call Trace: [ 79.408732][ T6561] [ 79.408738][ T6561] dump_stack_lvl+0x241/0x360 [ 79.408761][ T6561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.408776][ T6561] ? __pfx__printk+0x10/0x10 [ 79.408799][ T6561] ? __pfx___might_resched+0x10/0x10 [ 79.408817][ T6561] ? rcu_is_watching+0x15/0xb0 [ 79.408834][ T6561] should_fail_ex+0x3b0/0x4e0 [ 79.408852][ T6561] should_failslab+0xac/0x100 [ 79.408874][ T6561] kmem_cache_alloc_node_noprof+0x77/0x380 [ 79.408892][ T6561] ? dup_task_struct+0x57/0x8c0 [ 79.408909][ T6561] dup_task_struct+0x57/0x8c0 [ 79.408925][ T6561] ? rcu_is_watching+0x15/0xb0 [ 79.408940][ T6561] copy_process+0x5d1/0x3d50 [ 79.408974][ T6561] ? __asan_memset+0x23/0x50 [ 79.408994][ T6561] ? lockdep_init_map_type+0xa1/0x910 [ 79.409015][ T6561] ? __pfx_copy_process+0x10/0x10 [ 79.409033][ T6561] ? __raw_spin_lock_init+0x45/0x100 [ 79.409052][ T6561] vhost_task_create+0x236/0x300 [ 79.409071][ T6561] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 79.409092][ T6561] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 79.409112][ T6561] ? __pfx_vhost_task_create+0x10/0x10 [ 79.409133][ T6561] ? __pfx_vhost_task_fn+0x10/0x10 [ 79.409153][ T6561] ? kasan_save_track+0x3f/0x80 [ 79.409172][ T6561] ? kasan_save_free_info+0x40/0x50 [ 79.409188][ T6561] ? __kasan_slab_free+0x59/0x70 [ 79.409206][ T6561] ? kfree+0x196/0x430 [ 79.409220][ T6561] ? security_file_ioctl+0xc6/0x2a0 [ 79.409237][ T6561] ? __se_sys_ioctl+0x46/0x170 [ 79.409254][ T6561] ? do_syscall_64+0xf3/0x230 [ 79.409272][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.409293][ T6561] kvm_mmu_post_init_vm+0x180/0x2e0 [ 79.409316][ T6561] kvm_arch_vcpu_ioctl_run+0xea/0x1940 [ 79.409335][ T6561] ? __mutex_trylock_common+0x183/0x2e0 [ 79.409352][ T6561] ? __pfx___might_resched+0x10/0x10 [ 79.409370][ T6561] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 79.409386][ T6561] ? __pfx___mutex_trylock_common+0x10/0x10 [ 79.409401][ T6561] ? lock_release+0xbf/0xa30 [ 79.409425][ T6561] ? rcu_is_watching+0x15/0xb0 [ 79.409439][ T6561] ? lock_release+0xbf/0xa30 [ 79.409456][ T6561] ? __pfx_lock_acquire+0x10/0x10 [ 79.409475][ T6561] ? __pfx_lock_release+0x10/0x10 [ 79.409492][ T6561] ? do_raw_write_lock+0x148/0x4f0 [ 79.409511][ T6561] ? __pfx_do_raw_write_lock+0x10/0x10 [ 79.409532][ T6561] kvm_vcpu_ioctl+0x996/0x1020 [ 79.409551][ T6561] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.409572][ T6561] ? fput+0x21b/0x290 [ 79.409585][ T6561] ? __fget_files+0x2a/0x410 [ 79.409601][ T6561] ? __fget_files+0x2a/0x410 [ 79.409612][ T6561] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.409628][ T6561] __se_sys_ioctl+0xf5/0x170 [ 79.409646][ T6561] do_syscall_64+0xf3/0x230 [ 79.409664][ T6561] ? clear_bhb_loop+0x35/0x90 [ 79.409684][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.409703][ T6561] RIP: 0033:0x7f7d0638cd29 [ 79.409717][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.409731][ T6561] RSP: 002b:00007f7d0711e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.409748][ T6561] RAX: ffffffffffffffda RBX: 00007f7d065a5fa0 RCX: 00007f7d0638cd29 [ 79.409759][ T6561] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.409768][ T6561] RBP: 00007f7d0711e090 R08: 0000000000000000 R09: 0000000000000000 [ 79.409779][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.409788][ T6561] R13: 0000000000000000 R14: 00007f7d065a5fa0 R15: 00007f7d066cfa28 [ 79.409804][ T6561] [ 79.958422][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.969138][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.985402][ T81] bond0 (unregistering): Released all slaves [ 80.012374][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.019488][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.064259][ T6527] bridge_slave_0: entered allmulticast mode [ 80.093240][ T6527] bridge_slave_0: entered promiscuous mode [ 80.109553][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.153522][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.163950][ T6527] bridge_slave_1: entered allmulticast mode [ 80.164960][ T6527] bridge_slave_1: entered promiscuous mode [ 80.193299][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.223933][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.239388][ T6585] FAULT_INJECTION: forcing a failure. [ 80.239388][ T6585] name failslab, interval 1, probability 0, space 0, times 0 [ 80.253488][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: syz.0.196 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 80.253511][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.253521][ T6585] Call Trace: [ 80.253526][ T6585] [ 80.253533][ T6585] dump_stack_lvl+0x241/0x360 [ 80.253555][ T6585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.253571][ T6585] ? __pfx__printk+0x10/0x10 [ 80.253593][ T6585] ? rcu_is_watching+0x15/0xb0 [ 80.253609][ T6585] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.253628][ T6585] should_fail_ex+0x3b0/0x4e0 [ 80.253645][ T6585] should_failslab+0xac/0x100 [ 80.253667][ T6585] kmem_cache_alloc_node_noprof+0x77/0x380 [ 80.253683][ T6585] ? __alloc_skb+0x1c3/0x440 [ 80.253701][ T6585] ? lock_release+0xbf/0xa30 [ 80.253722][ T6585] __alloc_skb+0x1c3/0x440 [ 80.253764][ T6585] ? rcu_is_watching+0x15/0xb0 [ 80.253780][ T6585] ? __pfx___alloc_skb+0x10/0x10 [ 80.253798][ T6585] ? notifier_call_chain+0x3cc/0x3f0 [ 80.253820][ T6585] __neigh_notify+0x81/0x140 [ 80.253838][ T6585] __neigh_update+0xd57/0x24c0 [ 80.253859][ T6585] ? arp_req_dev+0x29a/0x4f0 [ 80.253882][ T6585] arp_invalidate+0x196/0x310 [ 80.253903][ T6585] ? __pfx_arp_invalidate+0x10/0x10 [ 80.253923][ T6585] ? arp_ioctl+0x371/0x530 [ 80.253951][ T6585] ? __pfx___mutex_lock+0x10/0x10 [ 80.253969][ T6585] arp_req_delete+0xef/0x280 [ 80.253989][ T6585] ? __pfx_arp_req_delete+0x10/0x10 [ 80.254008][ T6585] ? __might_fault+0xaa/0x120 [ 80.254030][ T6585] arp_ioctl+0x380/0x530 [ 80.254050][ T6585] ? __pfx_arp_ioctl+0x10/0x10 [ 80.254072][ T6585] ? rcu_is_watching+0x15/0xb0 [ 80.254089][ T6585] inet_ioctl+0x2b5/0x4f0 [ 80.254110][ T6585] ? __pfx_inet_ioctl+0x10/0x10 [ 80.254132][ T6585] ? tomoyo_path_number_perm+0x679/0x860 [ 80.254155][ T6585] ? tomoyo_path_number_perm+0x206/0x860 [ 80.254175][ T6585] sock_do_ioctl+0x158/0x460 [ 80.254193][ T6585] ? __pfx_sock_do_ioctl+0x10/0x10 [ 80.254215][ T6585] sock_ioctl+0x626/0x8e0 [ 80.254230][ T6585] ? __pfx_sock_ioctl+0x10/0x10 [ 80.254244][ T6585] ? fput+0x21b/0x290 [ 80.254259][ T6585] ? __fget_files+0x2a/0x410 [ 80.254276][ T6585] ? __fget_files+0x2a/0x410 [ 80.254292][ T6585] ? __pfx_sock_ioctl+0x10/0x10 [ 80.254308][ T6585] __se_sys_ioctl+0xf5/0x170 [ 80.254327][ T6585] do_syscall_64+0xf3/0x230 [ 80.254344][ T6585] ? clear_bhb_loop+0x35/0x90 [ 80.254364][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.254382][ T6585] RIP: 0033:0x7f843718cd29 [ 80.254396][ T6585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.254409][ T6585] RSP: 002b:00007f8437f75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.254426][ T6585] RAX: ffffffffffffffda RBX: 00007f84373a6080 RCX: 00007f843718cd29 [ 80.254438][ T6585] RDX: 0000000020000300 RSI: 0000000000008953 RDI: 0000000000000004 [ 80.254447][ T6585] RBP: 00007f8437f75090 R08: 0000000000000000 R09: 0000000000000000 [ 80.254457][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.254466][ T6585] R13: 0000000000000000 R14: 00007f84373a6080 R15: 00007f84374cfa28 [ 80.254483][ T6585] [ 80.330123][ T6590] FAULT_INJECTION: forcing a failure. [ 80.330123][ T6590] name failslab, interval 1, probability 0, space 0, times 0 [ 80.331656][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.336253][ T6590] CPU: 1 UID: 0 PID: 6590 Comm: syz.5.199 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 80.336274][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.336284][ T6590] Call Trace: [ 80.336291][ T6590] [ 80.336297][ T6590] dump_stack_lvl+0x241/0x360 [ 80.336319][ T6590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.336335][ T6590] ? __pfx__printk+0x10/0x10 [ 80.336359][ T6590] ? __pfx___might_resched+0x10/0x10 [ 80.336379][ T6590] should_fail_ex+0x3b0/0x4e0 [ 80.336398][ T6590] should_failslab+0xac/0x100 [ 80.336420][ T6590] __kmalloc_cache_noprof+0x70/0x390 [ 80.336437][ T6590] ? call_usermodehelper_setup+0x8e/0x270 [ 80.336454][ T6590] ? trace_kmalloc+0x1f/0xd0 [ 80.336470][ T6590] call_usermodehelper_setup+0x8e/0x270 [ 80.336487][ T6590] ? __pfx_free_modprobe_argv+0x10/0x10 [ 80.336509][ T6590] __request_module+0x3cd/0x640 [ 80.336529][ T6590] ? lock_release+0xbf/0xa30 [ 80.336548][ T6590] ? lock_release+0xb0/0xa30 [ 80.336568][ T6590] ? __pfx___request_module+0x10/0x10 [ 80.336589][ T6590] ? __pfx_lock_release+0x10/0x10 [ 80.336611][ T6590] ? nfnetlink_rcv_msg+0x225/0x1180 [ 80.336630][ T6590] nfnetlink_rcv_msg+0x438/0x1180 [ 80.336645][ T6590] ? nfnetlink_rcv_msg+0x225/0x1180 [ 80.336663][ T6590] ? unwind_get_return_address+0x4d/0x90 [ 80.336689][ T6590] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.336704][ T6590] ? stack_trace_save+0x118/0x1d0 [ 80.336721][ T6590] ? __pfx_stack_trace_save+0x10/0x10 [ 80.336739][ T6590] ? stack_depot_save_flags+0x37/0x940 [ 80.336758][ T6590] ? kasan_save_track+0x51/0x80 [ 80.336777][ T6590] ? kasan_save_track+0x3f/0x80 [ 80.336795][ T6590] ? kasan_save_free_info+0x40/0x50 [ 80.336810][ T6590] ? __kasan_slab_free+0x59/0x70 [ 80.336829][ T6590] ? kmem_cache_free+0x195/0x410 [ 80.336844][ T6590] ? nlmon_xmit+0xaf/0x100 [ 80.336862][ T6590] ? dev_hard_start_xmit+0x27a/0x7d0 [ 80.336882][ T6590] ? __dev_queue_xmit+0x1b73/0x3f50 [ 80.336902][ T6590] ? __netlink_deliver_tap+0x56b/0x7f0 [ 80.336922][ T6590] ? netlink_deliver_tap+0x19d/0x1b0 [ 80.336941][ T6590] ? netlink_unicast+0x7c4/0x990 [ 80.336958][ T6590] ? netlink_sendmsg+0x8e4/0xcb0 [ 80.336977][ T6590] ? __sock_sendmsg+0x221/0x270 [ 80.336993][ T6590] ? sock_sendmsg+0x134/0x200 [ 80.337007][ T6590] ? splice_to_socket+0xa10/0x10b0 [ 80.337026][ T6590] ? do_splice+0xd68/0x18b0 [ 80.337045][ T6590] ? __se_sys_splice+0x2e0/0x450 [ 80.337064][ T6590] ? do_syscall_64+0xf3/0x230 [ 80.337082][ T6590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.337105][ T6590] netlink_rcv_skb+0x1e3/0x430 [ 80.337125][ T6590] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.337141][ T6590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.337166][ T6590] ? apparmor_capable+0x13b/0x1b0 [ 80.337195][ T6590] ? bpf_lsm_capable+0x9/0x10 [ 80.337212][ T6590] ? security_capable+0x7e/0x2d0 [ 80.337232][ T6590] nfnetlink_rcv+0x297/0x2ab0 [ 80.337249][ T6590] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 80.337269][ T6590] ? __dev_queue_xmit+0x2f4/0x3f50 [ 80.337294][ T6590] ? __dev_queue_xmit+0x1775/0x3f50 [ 80.337313][ T6590] ? kasan_save_track+0x51/0x80 [ 80.337333][ T6590] ? sock_sendmsg+0x134/0x200 [ 80.337349][ T6590] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 80.337364][ T6590] ? __dev_queue_xmit+0x2f4/0x3f50 [ 80.337386][ T6590] ? __pfx___dev_queue_xmit+0x10/0x10 [ 80.337412][ T6590] ? ref_tracker_free+0x643/0x7e0 [ 80.337428][ T6590] ? __asan_memcpy+0x40/0x70 [ 80.337446][ T6590] ? __pfx_ref_tracker_free+0x10/0x10 [ 80.337463][ T6590] ? rcu_is_watching+0x15/0xb0 [ 80.337479][ T6590] ? lock_release+0xbf/0xa30 [ 80.337499][ T6590] ? skb_clone+0x240/0x390 [ 80.337520][ T6590] ? __pfx_lock_release+0x10/0x10 [ 80.337540][ T6590] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 80.337564][ T6590] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.337585][ T6590] netlink_unicast+0x7f6/0x990 [ 80.337605][ T6590] ? __pfx_netlink_unicast+0x10/0x10 [ 80.337623][ T6590] ? __virt_addr_valid+0x45f/0x530 [ 80.337644][ T6590] ? __phys_addr_symbol+0x2f/0x70 [ 80.337664][ T6590] ? __check_object_size+0x47a/0x730 [ 80.337688][ T6590] netlink_sendmsg+0x8e4/0xcb0 [ 80.337712][ T6590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.337734][ T6590] ? aa_sock_msg_perm+0x91/0x160 [ 80.337753][ T6590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.337772][ T6590] __sock_sendmsg+0x221/0x270 [ 80.337790][ T6590] sock_sendmsg+0x134/0x200 [ 80.337807][ T6590] ? __pfx_sock_sendmsg+0x10/0x10 [ 80.337827][ T6590] ? lock_release+0xbf/0xa30 [ 80.337847][ T6590] ? iov_iter_bvec+0x4e/0x180 [ 80.337868][ T6590] splice_to_socket+0xa10/0x10b0 [ 80.337887][ T6590] ? __pfx_lock_release+0x10/0x10 [ 80.337914][ T6590] ? __pfx_splice_to_socket+0x10/0x10 [ 80.337942][ T6590] ? fsnotify_pre_content+0x3ce/0x5b0 [ 80.337968][ T6590] ? rw_verify_area+0x239/0x630 [ 80.337985][ T6590] ? rcu_is_watching+0x15/0xb0 [ 80.338000][ T6590] ? __pfx_splice_to_socket+0x10/0x10 [ 80.338019][ T6590] do_splice+0xd68/0x18b0 [ 80.338040][ T6590] ? sb_end_write+0xe9/0x1c0 [ 80.338056][ T6590] ? __pfx_lock_release+0x10/0x10 [ 80.338074][ T6590] ? vfs_write+0x7fa/0xd10 [ 80.338092][ T6590] ? __mutex_unlock_slowpath+0x227/0x800 [ 80.338113][ T6590] ? pipe_clear_nowait+0x196/0x220 [ 80.338136][ T6590] ? __pfx_do_splice+0x10/0x10 [ 80.338154][ T6590] ? __fget_files+0x2a/0x410 [ 80.338173][ T6590] __se_sys_splice+0x2e0/0x450 [ 80.338200][ T6590] ? __pfx___se_sys_splice+0x10/0x10 [ 80.338221][ T6590] ? rcu_is_watching+0x15/0xb0 [ 80.338237][ T6590] ? __x64_sys_splice+0x21/0xf0 [ 80.338258][ T6590] do_syscall_64+0xf3/0x230 [ 80.338276][ T6590] ? clear_bhb_loop+0x35/0x90 [ 80.338296][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.338316][ T6590] RIP: 0033:0x7f7d0638cd29 [ 80.338330][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.338342][ T6590] RSP: 002b:00007f7d041f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 80.338360][ T6590] RAX: ffffffffffffffda RBX: 00007f7d065a6080 RCX: 00007f7d0638cd29 [ 80.338371][ T6590] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 80.338381][ T6590] RBP: 00007f7d041f6090 R08: 001100000000f336 R09: 0000000000000000 [ 80.338392][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.338401][ T6590] R13: 0000000000000000 R14: 00007f7d065a6080 R15: 00007f7d066cfa28 [ 80.338418][ T6590] [ 81.204490][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.210469][ C0] hrtimer: interrupt took 950067688 ns [ 81.235178][ T5838] Bluetooth: hci2: command tx timeout [ 81.240612][ T5838] Bluetooth: hci4: command tx timeout [ 81.294226][ T6594] __nla_validate_parse: 4 callbacks suppressed [ 81.294244][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 81.310512][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.339674][ T6596] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 81.377424][ T6527] team0: Port device team_slave_0 added [ 81.384968][ T6527] team0: Port device team_slave_1 added [ 81.399483][ T6598] FAULT_INJECTION: forcing a failure. [ 81.399483][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 81.412627][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.0.203 Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 81.412650][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.412660][ T6598] Call Trace: [ 81.412666][ T6598] [ 81.412672][ T6598] dump_stack_lvl+0x241/0x360 [ 81.412695][ T6598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.412711][ T6598] ? __pfx__printk+0x10/0x10 [ 81.412736][ T6598] ? __pfx___might_resched+0x10/0x10 [ 81.412753][ T6598] ? dev_prep_valid_name+0x80d/0xa40 [ 81.412772][ T6598] should_fail_ex+0x3b0/0x4e0 [ 81.412792][ T6598] should_failslab+0xac/0x100 [ 81.412814][ T6598] __kmalloc_cache_noprof+0x70/0x390 [ 81.412830][ T6598] ? register_netdevice+0x59c/0x1b10 [ 81.412853][ T6598] register_netdevice+0x59c/0x1b10 [ 81.412877][ T6598] ? trace_kmalloc+0x1f/0xd0 [ 81.412893][ T6598] ? __pfx_register_netdevice+0x10/0x10 [ 81.412913][ T6598] ? sized_strscpy+0x9a/0x2b0 [ 81.412934][ T6598] ? alloc_netdev_mqs+0xde1/0x1110 [ 81.412958][ T6598] mif6_add+0x429/0xd60 [ 81.412983][ T6598] ? __pfx_mif6_add+0x10/0x10 [ 81.413004][ T6598] ? __might_fault+0xc6/0x120 [ 81.413023][ T6598] ? _copy_from_user+0x95/0xb0 [ 81.413040][ T6598] ip6_mroute_setsockopt+0xfad/0x12a0 [ 81.413065][ T6598] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 81.413091][ T6598] ? lock_release+0xbf/0xa30 [ 81.413116][ T6598] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 81.413138][ T6598] ? __might_fault+0xaa/0x120 [ 81.413159][ T6598] do_ipv6_setsockopt+0x490/0x3640 [ 81.413180][ T6598] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 81.413199][ T6598] ? aa_label_sk_perm+0x4f3/0x6c0 [ 81.413216][ T6598] ? get_pid_task+0x23/0x1f0 [ 81.413237][ T6598] ? rcu_is_watching+0x15/0xb0 [ 81.413255][ T6598] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 81.413273][ T6598] ? __pfx_lock_release+0x10/0x10 [ 81.413292][ T6598] ? kstrtouint_from_user+0x128/0x190 [ 81.413315][ T6598] ? __pfx___might_resched+0x10/0x10 [ 81.413332][ T6598] ? rcu_is_watching+0x15/0xb0 [ 81.413347][ T6598] ? lock_release+0xbf/0xa30 [ 81.413366][ T6598] ? __pfx_lock_release+0x10/0x10 [ 81.413386][ T6598] ? proc_fail_nth_write+0x24f/0x2d0 [ 81.413411][ T6598] ipv6_setsockopt+0x5d/0x170 [ 81.413430][ T6598] rawv6_setsockopt+0x327/0x740 [ 81.413447][ T6598] ? __pfx_aa_sk_perm+0x10/0x10 [ 81.413464][ T6598] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 81.413481][ T6598] ? __pfx_lock_acquire+0x10/0x10 [ 81.413500][ T6598] ? aa_sock_opt_perm+0x79/0x120 [ 81.413523][ T6598] ? sock_common_setsockopt+0x37/0xc0 [ 81.413539][ T6598] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 81.413555][ T6598] do_sock_setsockopt+0x3af/0x720 [ 81.413577][ T6598] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 81.413597][ T6598] ? __fget_files+0x395/0x410 [ 81.413611][ T6598] ? __fget_files+0x2a/0x410 [ 81.413650][ T6598] __x64_sys_setsockopt+0x1ee/0x280 [ 81.413672][ T6598] do_syscall_64+0xf3/0x230 [ 81.413690][ T6598] ? clear_bhb_loop+0x35/0x90 [ 81.413712][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.413732][ T6598] RIP: 0033:0x7f843718cd29 [ 81.413746][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.413759][ T6598] RSP: 002b:00007f8437f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.413777][ T6598] RAX: ffffffffffffffda RBX: 00007f84373a5fa0 RCX: 00007f843718cd29 [ 81.413790][ T6598] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000003 [ 81.413800][ T6598] RBP: 00007f8437f96090 R08: 000000000000000c R09: 0000000000000000 [ 81.413808][ T6598] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 81.413817][ T6598] R13: 0000000000000000 R14: 00007f84373a5fa0 R15: 00007f84374cfa28 [ 81.413832][ T6598] [ 81.477251][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 81.481449][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.817582][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.832802][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.858706][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.877853][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.889518][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.896802][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.922722][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.930451][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.942672][ T25] cfg80211: failed to load regulatory.db [ 82.155221][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 82.330542][ T5881] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 82.482771][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.490915][ T5881] usb 6-1: not running at top speed; connect to a high speed hub [ 82.499488][ T5881] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 82.514516][ T5881] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 82.523717][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.532907][ T5881] usb 6-1: Product: syz [ 82.537057][ T5881] usb 6-1: Manufacturer: syz [ 82.542785][ T5881] usb 6-1: SerialNumber: syz [ 82.756124][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.764741][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.776529][ T5881] usbsevseg 6-1:129.0: USB 7 Segment device now attached [ 82.785229][ T5881] usb 6-1: USB disconnect, device number 4 [ 82.791473][ T5881] usbsevseg 6-1:129.0: USB 7 Segment now disconnected [ 83.260550][ T5833] Bluetooth: hci4: command 0x041b tx timeout [ 83.260638][ T5838] Bluetooth: hci2: command tx timeout [ 85.340681][ T5838] Bluetooth: hci2: command tx timeout [ 85.351074][ T5838] Bluetooth: hci4: command 0x041b tx timeout [ 87.420637][ T5838] Bluetooth: hci4: command 0x041b tx timeout [ 87.420933][ T54] Bluetooth: hci2: command tx timeout [ 89.500821][ T54] Bluetooth: hci4: command 0x041b tx timeout [ 98.040051][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.047553][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.054753][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.062693][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.070185][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.077538][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.564105][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.569026][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.571785][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.578547][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.588999][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.593354][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.600245][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.607054][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.615805][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.622602][ T5836] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.628116][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.635103][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.150651][ T5836] Bluetooth: hci3: command tx timeout [ 100.700624][ T5836] Bluetooth: hci5: command tx timeout [ 100.700629][ T5833] Bluetooth: hci6: command tx timeout [ 102.220499][ T5833] Bluetooth: hci3: command tx timeout [ 102.780514][ T5833] Bluetooth: hci5: command tx timeout [ 102.780547][ T5836] Bluetooth: hci6: command tx timeout [ 104.300556][ T5836] Bluetooth: hci3: command tx timeout [ 104.860472][ T5836] Bluetooth: hci6: command tx timeout [ 104.870493][ T5836] Bluetooth: hci5: command tx timeout [ 106.380613][ T5836] Bluetooth: hci3: command tx timeout [ 106.940506][ T5836] Bluetooth: hci5: command tx timeout [ 106.940543][ T5833] Bluetooth: hci6: command tx timeout [ 133.112041][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.118381][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.668312][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.675596][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.682985][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.691001][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.698417][ T5833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 138.705705][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.603602][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 139.610983][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 139.618198][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 139.626144][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 139.633615][ T5836] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 139.641043][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 140.780475][ T5833] Bluetooth: hci7: command tx timeout [ 141.660530][ T5833] Bluetooth: hci8: command tx timeout [ 142.860508][ T5833] Bluetooth: hci7: command tx timeout [ 143.740511][ T5833] Bluetooth: hci8: command tx timeout [ 144.940458][ T5833] Bluetooth: hci7: command tx timeout [ 145.820671][ T5833] Bluetooth: hci8: command tx timeout [ 147.020567][ T5833] Bluetooth: hci7: command tx timeout [ 147.900546][ T5833] Bluetooth: hci8: command tx timeout [ 158.738377][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 158.747612][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 158.755411][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 158.764894][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 158.772732][ T5836] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 158.780024][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 158.820587][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 158.828977][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 158.838449][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 158.846815][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 158.856231][ T5833] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 158.862588][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 158.863557][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 158.871595][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 158.887361][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 158.895306][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 158.902903][ T5838] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 158.910213][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 160.860530][ T5838] Bluetooth: hci9: command tx timeout [ 160.940524][ T5838] Bluetooth: hci11: command tx timeout [ 160.940619][ T54] Bluetooth: hci10: command tx timeout [ 162.940477][ T54] Bluetooth: hci9: command tx timeout [ 163.020510][ T54] Bluetooth: hci10: command tx timeout [ 163.020900][ T5838] Bluetooth: hci11: command tx timeout [ 165.020467][ T5838] Bluetooth: hci9: command tx timeout [ 165.100691][ T5838] Bluetooth: hci10: command tx timeout [ 165.103076][ T54] Bluetooth: hci11: command tx timeout [ 167.100472][ T54] Bluetooth: hci9: command tx timeout [ 167.180926][ T54] Bluetooth: hci11: command tx timeout [ 167.191231][ T54] Bluetooth: hci10: command tx timeout [ 176.140496][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 186.380582][ T5838] Bluetooth: hci1: command 0x0419 tx timeout [ 194.551938][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.558300][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.684570][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 198.691962][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 198.699264][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 198.707874][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 198.715339][ T5838] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 198.722684][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 199.720527][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 199.727820][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 199.735369][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 199.743661][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 199.751256][ T5836] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 199.758510][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 200.780602][ T5836] Bluetooth: hci12: command tx timeout [ 201.740529][ T5833] Bluetooth: hci4: command 0x041b tx timeout [ 201.745640][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 201.820733][ T5838] Bluetooth: hci13: command tx timeout [ 202.860677][ T5838] Bluetooth: hci12: command tx timeout [ 203.900819][ T5838] Bluetooth: hci13: command tx timeout [ 204.940841][ T5838] Bluetooth: hci12: command tx timeout [ 205.980584][ T5838] Bluetooth: hci13: command tx timeout [ 207.020590][ T5838] Bluetooth: hci12: command tx timeout [ 208.060518][ T5838] Bluetooth: hci13: command tx timeout [ 218.835049][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 218.844363][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 218.851726][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 218.859331][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 218.867389][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 218.874730][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 218.927544][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 218.935261][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 218.943158][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 218.950881][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 218.959806][ T5833] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 218.962996][ T5836] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 218.967455][ T5833] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 218.976411][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 218.982423][ T5833] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 218.996736][ T5833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 219.004227][ T5833] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 219.011543][ T5833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 220.940540][ T5838] Bluetooth: hci14: command tx timeout [ 221.020435][ T5838] Bluetooth: hci15: command tx timeout [ 221.100507][ T5838] Bluetooth: hci16: command tx timeout [ 222.221032][ T5838] Bluetooth: hci6: command 0x0406 tx timeout [ 222.221093][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 222.227048][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 223.020471][ T5833] Bluetooth: hci14: command tx timeout [ 223.100443][ T5833] Bluetooth: hci15: command tx timeout [ 223.180519][ T5833] Bluetooth: hci16: command tx timeout [ 225.100499][ T5833] Bluetooth: hci14: command tx timeout [ 225.180950][ T5833] Bluetooth: hci15: command tx timeout [ 225.260503][ T5833] Bluetooth: hci16: command tx timeout [ 227.180608][ T5833] Bluetooth: hci14: command tx timeout [ 227.260490][ T5833] Bluetooth: hci15: command tx timeout [ 227.340416][ T5833] Bluetooth: hci16: command tx timeout [ 235.500439][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 235.508110][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 235.516182][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.526463][ T30] task:kworker/u8:1 state:D stack:22264 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 235.536721][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 235.543779][ T30] Call Trace: [ 235.547092][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.550024][ T30] __schedule+0x186c/0x4be0 [ 235.554720][ T30] ? schedule+0x90/0x320 [ 235.558981][ T30] ? schedule+0x90/0x320 [ 235.563485][ T30] ? __pfx___schedule+0x10/0x10 [ 235.568358][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.594313][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.599119][ T30] ? kthread_data+0x52/0xd0 [ 235.604438][ T30] ? schedule+0x90/0x320 [ 235.608704][ T30] ? wq_worker_sleeping+0x66/0x240 [ 235.613887][ T30] ? schedule+0x90/0x320 [ 235.618130][ T30] schedule+0x14b/0x320 [ 235.622356][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.628828][ T30] __mutex_lock+0x817/0x1010 [ 235.633466][ T30] ? __mutex_lock+0x602/0x1010 [ 235.638217][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 235.644673][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.649721][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.654544][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 235.660851][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 235.666516][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.671593][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 235.677667][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 235.684549][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.689313][ T30] ? process_scheduled_works+0x976/0x1840 [ 235.695066][ T30] process_scheduled_works+0xa66/0x1840 [ 235.700795][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.706783][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 235.712354][ T30] ? assign_work+0x364/0x3d0 [ 235.716950][ T30] worker_thread+0x870/0xd30 [ 235.721598][ T30] ? __kthread_parkme+0x169/0x1d0 [ 235.726625][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.732182][ T30] kthread+0x7a9/0x920 [ 235.736261][ T30] ? __pfx_kthread+0x10/0x10 [ 235.740907][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.746030][ T30] ? __pfx_kthread+0x10/0x10 [ 235.750681][ T30] ? __pfx_kthread+0x10/0x10 [ 235.755285][ T30] ? __pfx_kthread+0x10/0x10 [ 235.759877][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.765106][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.770338][ T30] ? __pfx_kthread+0x10/0x10 [ 235.774936][ T30] ret_from_fork+0x4b/0x80 [ 235.779361][ T30] ? __pfx_kthread+0x10/0x10 [ 235.784019][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.788796][ T30] [ 235.791878][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 235.799504][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 235.806829][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.815637][ T30] task:kworker/1:0 state:D stack:23504 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 235.825846][ T30] Workqueue: events reg_todo [ 235.830486][ T30] Call Trace: [ 235.834067][ T30] [ 235.837007][ T30] __schedule+0x186c/0x4be0 [ 235.841572][ T30] ? schedule+0x90/0x320 [ 235.845817][ T30] ? schedule+0x90/0x320 [ 235.850042][ T30] ? __pfx___schedule+0x10/0x10 [ 235.854907][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 235.860023][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.865094][ T30] ? kick_pool+0x1bd/0x620 [ 235.869511][ T30] ? schedule+0x90/0x320 [ 235.873803][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.878580][ T30] ? schedule+0x90/0x320 [ 235.882876][ T30] schedule+0x14b/0x320 [ 235.887127][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.892693][ T30] __mutex_lock+0x817/0x1010 [ 235.897288][ T30] ? __mutex_lock+0x602/0x1010 [ 235.902144][ T30] ? reg_process_self_managed_hints+0xb9/0x1c0 [ 235.908301][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.913346][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.919330][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 235.925235][ T30] ? reg_todo+0x7cd/0x8d0 [ 235.929579][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.934815][ T30] reg_process_self_managed_hints+0xb9/0x1c0 [ 235.941254][ T30] reg_todo+0x7d2/0x8d0 [ 235.945420][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.950162][ T30] ? process_scheduled_works+0x976/0x1840 [ 235.955920][ T30] process_scheduled_works+0xa66/0x1840 [ 235.961499][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.967466][ T30] ? assign_work+0x364/0x3d0 [ 235.972088][ T30] worker_thread+0x870/0xd30 [ 235.976687][ T30] ? __kthread_parkme+0x169/0x1d0 [ 235.981750][ T30] ? __pfx_worker_thread+0x10/0x10 [ 235.986863][ T30] kthread+0x7a9/0x920 [ 235.990979][ T30] ? __pfx_kthread+0x10/0x10 [ 235.995574][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.000730][ T30] ? __pfx_kthread+0x10/0x10 [ 236.005335][ T30] ? __pfx_kthread+0x10/0x10 [ 236.009931][ T30] ? __pfx_kthread+0x10/0x10 [ 236.014574][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.019777][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.025015][ T30] ? __pfx_kthread+0x10/0x10 [ 236.029616][ T30] ret_from_fork+0x4b/0x80 [ 236.034168][ T30] ? __pfx_kthread+0x10/0x10 [ 236.039149][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.043983][ T30] [ 236.047022][ T30] INFO: task kworker/1:1:46 blocked for more than 143 seconds. [ 236.054639][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 236.062008][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.070731][ T30] task:kworker/1:1 state:D stack:22096 pid:46 tgid:46 ppid:2 flags:0x00004000 [ 236.080956][ T30] Workqueue: events_power_efficient crda_timeout_work [ 236.087733][ T30] Call Trace: [ 236.091044][ T30] [ 236.093976][ T30] __schedule+0x186c/0x4be0 [ 236.098466][ T30] ? schedule+0x90/0x320 [ 236.102741][ T30] ? schedule+0x90/0x320 [ 236.106988][ T30] ? __pfx___schedule+0x10/0x10 [ 236.111868][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 236.116979][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.122053][ T30] ? kick_pool+0x1bd/0x620 [ 236.126478][ T30] ? schedule+0x90/0x320 [ 236.130764][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.135540][ T30] ? schedule+0x90/0x320 [ 236.139787][ T30] schedule+0x14b/0x320 [ 236.145006][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.150761][ T30] __mutex_lock+0x817/0x1010 [ 236.155365][ T30] ? __mutex_lock+0x602/0x1010 [ 236.160115][ T30] ? crda_timeout_work+0x15/0x50 [ 236.165094][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.170125][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 236.176152][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.180959][ T30] ? process_scheduled_works+0x976/0x1840 [ 236.186684][ T30] crda_timeout_work+0x15/0x50 [ 236.191486][ T30] process_scheduled_works+0xa66/0x1840 [ 236.197050][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.203071][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 236.208619][ T30] ? assign_work+0x364/0x3d0 [ 236.213237][ T30] worker_thread+0x870/0xd30 [ 236.217836][ T30] ? __kthread_parkme+0x169/0x1d0 [ 236.223145][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.228271][ T30] kthread+0x7a9/0x920 [ 236.232435][ T30] ? __pfx_kthread+0x10/0x10 [ 236.237038][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.242184][ T30] ? __pfx_kthread+0x10/0x10 [ 236.247122][ T30] ? __pfx_kthread+0x10/0x10 [ 236.251879][ T30] ? __pfx_kthread+0x10/0x10 [ 236.256479][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.261745][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.266951][ T30] ? __pfx_kthread+0x10/0x10 [ 236.271574][ T30] ret_from_fork+0x4b/0x80 [ 236.275993][ T30] ? __pfx_kthread+0x10/0x10 [ 236.280622][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.285395][ T30] [ 236.288413][ T30] INFO: task kworker/u8:4:81 blocked for more than 144 seconds. [ 236.296295][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 236.304967][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.313681][ T30] task:kworker/u8:4 state:D stack:24400 pid:81 tgid:81 ppid:2 flags:0x00004000 [ 236.323896][ T30] Workqueue: netns cleanup_net [ 236.328652][ T30] Call Trace: [ 236.331955][ T30] [ 236.334896][ T30] __schedule+0x186c/0x4be0 [ 236.339384][ T30] ? schedule+0x90/0x320 [ 236.343678][ T30] ? schedule+0x90/0x320 [ 236.348241][ T30] ? __pfx___schedule+0x10/0x10 [ 236.353142][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.358210][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.363130][ T30] ? kthread_data+0x52/0xd0 [ 236.367647][ T30] ? schedule+0x90/0x320 [ 236.371907][ T30] ? wq_worker_sleeping+0x66/0x240 [ 236.377025][ T30] ? schedule+0x90/0x320 [ 236.381346][ T30] schedule+0x14b/0x320 [ 236.385505][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.391005][ T30] __mutex_lock+0x817/0x1010 [ 236.395610][ T30] ? __mutex_lock+0x602/0x1010 [ 236.400513][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 236.407035][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.412111][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.417405][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 236.423952][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.428715][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 236.435256][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 236.441634][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.446408][ T30] ? lock_release+0xbf/0xa30 [ 236.451440][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.457785][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 236.464639][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.469406][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.474577][ T30] unregister_netdevice_queue+0x303/0x370 [ 236.480371][ T30] ? __pfx_up_write+0x10/0x10 [ 236.485051][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 236.491319][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 236.497041][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 236.502703][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 236.508525][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 236.514902][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.519669][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 236.525068][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 236.530665][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 236.536750][ T30] hwsim_exit_net+0x5c1/0x670 [ 236.541477][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 236.546685][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 236.552924][ T30] cleanup_net+0x812/0xd60 [ 236.557350][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 236.562317][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.567254][ T30] ? process_scheduled_works+0x976/0x1840 [ 236.573012][ T30] process_scheduled_works+0xa66/0x1840 [ 236.578567][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.584695][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 236.590243][ T30] ? assign_work+0x364/0x3d0 [ 236.594866][ T30] worker_thread+0x870/0xd30 [ 236.599460][ T30] ? __kthread_parkme+0x169/0x1d0 [ 236.604520][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.609639][ T30] kthread+0x7a9/0x920 [ 236.613734][ T30] ? __pfx_kthread+0x10/0x10 [ 236.618341][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.623548][ T30] ? __pfx_kthread+0x10/0x10 [ 236.628141][ T30] ? __pfx_kthread+0x10/0x10 [ 236.632745][ T30] ? __pfx_kthread+0x10/0x10 [ 236.637334][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.642570][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.647768][ T30] ? __pfx_kthread+0x10/0x10 [ 236.652770][ T30] ret_from_fork+0x4b/0x80 [ 236.657208][ T30] ? __pfx_kthread+0x10/0x10 [ 236.661840][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.666611][ T30] [ 236.670850][ T30] INFO: task kworker/u8:7:2953 blocked for more than 144 seconds. [ 236.678688][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 236.686024][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.694854][ T30] task:kworker/u8:7 state:D stack:21392 pid:2953 tgid:2953 ppid:2 flags:0x00004000 [ 236.705096][ T30] Workqueue: events_unbound linkwatch_event [ 236.711120][ T30] Call Trace: [ 236.714395][ T30] [ 236.717326][ T30] __schedule+0x186c/0x4be0 [ 236.721882][ T30] ? schedule+0x90/0x320 [ 236.726129][ T30] ? schedule+0x90/0x320 [ 236.730490][ T30] ? __pfx___schedule+0x10/0x10 [ 236.735345][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.740408][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.745174][ T30] ? kthread_data+0x52/0xd0 [ 236.749658][ T30] ? schedule+0x90/0x320 [ 236.753922][ T30] ? wq_worker_sleeping+0x66/0x240 [ 236.759368][ T30] ? schedule+0x90/0x320 [ 236.763679][ T30] schedule+0x14b/0x320 [ 236.767836][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.773323][ T30] __mutex_lock+0x817/0x1010 [ 236.777924][ T30] ? __mutex_lock+0x602/0x1010 [ 236.782787][ T30] ? linkwatch_event+0xe/0x60 [ 236.787568][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.792642][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 236.798637][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.803570][ T30] ? process_scheduled_works+0x976/0x1840 [ 236.809315][ T30] linkwatch_event+0xe/0x60 [ 236.813883][ T30] process_scheduled_works+0xa66/0x1840 [ 236.819455][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.825486][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 236.831065][ T30] ? assign_work+0x364/0x3d0 [ 236.835643][ T30] worker_thread+0x870/0xd30 [ 236.840219][ T30] ? __kthread_parkme+0x169/0x1d0 [ 236.845281][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.850437][ T30] kthread+0x7a9/0x920 [ 236.854510][ T30] ? __pfx_kthread+0x10/0x10 [ 236.859415][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.864592][ T30] ? __pfx_kthread+0x10/0x10 [ 236.869204][ T30] ? __pfx_kthread+0x10/0x10 [ 236.873830][ T30] ? __pfx_kthread+0x10/0x10 [ 236.878427][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.883656][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.888883][ T30] ? __pfx_kthread+0x10/0x10 [ 236.893614][ T30] ret_from_fork+0x4b/0x80 [ 236.898925][ T30] ? __pfx_kthread+0x10/0x10 [ 236.903567][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.908338][ T30] [ 236.911528][ T30] INFO: task kworker/u8:9:3578 blocked for more than 144 seconds. [ 236.919331][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 236.926673][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.935411][ T30] task:kworker/u8:9 state:D stack:21360 pid:3578 tgid:3578 ppid:2 flags:0x00004000 [ 236.945738][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 236.951798][ T30] Call Trace: [ 236.955087][ T30] [ 236.958014][ T30] __schedule+0x186c/0x4be0 [ 236.962966][ T30] ? schedule+0x90/0x320 [ 236.967239][ T30] ? schedule+0x90/0x320 [ 236.971537][ T30] ? __pfx___schedule+0x10/0x10 [ 236.976402][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.981474][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.986279][ T30] ? kthread_data+0x52/0xd0 [ 236.990820][ T30] ? schedule+0x90/0x320 [ 236.995064][ T30] ? wq_worker_sleeping+0x66/0x240 [ 237.000156][ T30] ? schedule+0x90/0x320 [ 237.004422][ T30] schedule+0x14b/0x320 [ 237.008586][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.014110][ T30] __mutex_lock+0x817/0x1010 [ 237.018702][ T30] ? __mutex_lock+0x602/0x1010 [ 237.023610][ T30] ? addrconf_dad_work+0x10e/0x16a0 [ 237.028813][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.033868][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.039073][ T30] addrconf_dad_work+0x10e/0x16a0 [ 237.044150][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.049189][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 237.054675][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.061040][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.066675][ T30] ? process_scheduled_works+0x976/0x1840 [ 237.072482][ T30] process_scheduled_works+0xa66/0x1840 [ 237.078049][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.084070][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 237.089600][ T30] ? assign_work+0x364/0x3d0 [ 237.094234][ T30] worker_thread+0x870/0xd30 [ 237.098829][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 237.104892][ T30] ? __kthread_parkme+0x169/0x1d0 [ 237.109924][ T30] ? __pfx_worker_thread+0x10/0x10 [ 237.115116][ T30] kthread+0x7a9/0x920 [ 237.119191][ T30] ? __pfx_kthread+0x10/0x10 [ 237.123815][ T30] ? __pfx_worker_thread+0x10/0x10 [ 237.128934][ T30] ? __pfx_kthread+0x10/0x10 [ 237.133663][ T30] ? __pfx_kthread+0x10/0x10 [ 237.138264][ T30] ? __pfx_kthread+0x10/0x10 [ 237.142904][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.148116][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 237.153356][ T30] ? __pfx_kthread+0x10/0x10 [ 237.157949][ T30] ret_from_fork+0x4b/0x80 [ 237.162406][ T30] ? __pfx_kthread+0x10/0x10 [ 237.167322][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.172129][ T30] [ 237.175152][ T30] INFO: task dhcpcd:5501 blocked for more than 145 seconds. [ 237.182712][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 237.190046][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.200668][ T30] task:dhcpcd state:D stack:19984 pid:5501 tgid:5501 ppid:5500 flags:0x00000002 [ 237.211001][ T30] Call Trace: [ 237.214301][ T30] [ 237.217216][ T30] __schedule+0x186c/0x4be0 [ 237.221765][ T30] ? schedule+0x90/0x320 [ 237.226012][ T30] ? schedule+0x90/0x320 [ 237.230235][ T30] ? __pfx___schedule+0x10/0x10 [ 237.235112][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.240151][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.244930][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 237.250896][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 237.257224][ T30] ? schedule+0x90/0x320 [ 237.261596][ T30] schedule+0x14b/0x320 [ 237.265755][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.271816][ T30] __mutex_lock+0x817/0x1010 [ 237.276417][ T30] ? __mutex_lock+0x602/0x1010 [ 237.281208][ T30] ? rtnl_dumpit+0x99/0x200 [ 237.285709][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.290762][ T30] ? __build_skb_around+0x245/0x3d0 [ 237.295963][ T30] ? __alloc_skb+0x28f/0x440 [ 237.300613][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 237.305567][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 237.312645][ T30] rtnl_dumpit+0x99/0x200 [ 237.316981][ T30] netlink_dump+0x64d/0xe10 [ 237.321513][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 237.326538][ T30] ? __netlink_lookup+0x780/0x890 [ 237.331673][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 237.336711][ T30] ? stack_trace_save+0x118/0x1d0 [ 237.341932][ T30] __netlink_dump_start+0x5a2/0x790 [ 237.347147][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 237.352556][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 237.357502][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.363001][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 237.367937][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 237.373924][ T30] ? lock_acquire+0xe3/0x550 [ 237.378530][ T30] netlink_rcv_skb+0x1e3/0x430 [ 237.383385][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.388887][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.394215][ T30] ? net_generic+0x1f/0x240 [ 237.398720][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.403940][ T30] netlink_unicast+0x7f6/0x990 [ 237.408706][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 237.414014][ T30] ? __virt_addr_valid+0x45f/0x530 [ 237.419129][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 237.424325][ T30] ? __check_object_size+0x47a/0x730 [ 237.429623][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 237.434530][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.439831][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.444643][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 237.449595][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.454952][ T30] __sock_sendmsg+0x221/0x270 [ 237.459630][ T30] __sys_sendto+0x363/0x4c0 [ 237.464163][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 237.469194][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.476151][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.482523][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.487289][ T30] __x64_sys_sendto+0xde/0x100 [ 237.492099][ T30] do_syscall_64+0xf3/0x230 [ 237.496609][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.501321][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.507215][ T30] RIP: 0033:0x7f2b163a2ad7 [ 237.511673][ T30] RSP: 002b:00007ffec3b6b738 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.520087][ T30] RAX: ffffffffffffffda RBX: 00007ffec3b6c860 RCX: 00007f2b163a2ad7 [ 237.528082][ T30] RDX: 0000000000000014 RSI: 00007ffec3b6c780 RDI: 0000000000000017 [ 237.536075][ T30] RBP: 00007ffec3b6c7f0 R08: 00007ffec3b6c764 R09: 000000000000000c [ 237.544063][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 237.552063][ T30] R13: 00007ffec3b6c764 R14: 00007ffec3b6c780 R15: 0000000000000105 [ 237.560032][ T30] [ 237.563257][ T30] INFO: task syz-executor:6527 blocked for more than 145 seconds. [ 237.571112][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 237.578922][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.587629][ T30] task:syz-executor state:D stack:22096 pid:6527 tgid:6527 ppid:1 flags:0x00000004 [ 237.597827][ T30] Call Trace: [ 237.601140][ T30] [ 237.604093][ T30] __schedule+0x186c/0x4be0 [ 237.608597][ T30] ? schedule+0x90/0x320 [ 237.612852][ T30] ? schedule+0x90/0x320 [ 237.617097][ T30] ? __pfx___schedule+0x10/0x10 [ 237.621982][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.627007][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.631786][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 237.637679][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 237.644054][ T30] ? schedule+0x90/0x320 [ 237.648296][ T30] schedule+0x14b/0x320 [ 237.652479][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.657950][ T30] __mutex_lock+0x817/0x1010 [ 237.662591][ T30] ? __mutex_lock+0x602/0x1010 [ 237.667409][ T30] ? rtnl_newlink+0xce2/0x2210 [ 237.672223][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.677818][ T30] ? ns_capable+0x8a/0xf0 [ 237.682221][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 237.688032][ T30] rtnl_newlink+0xce2/0x2210 [ 237.692681][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.697723][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.702548][ T30] ? lock_release+0xbf/0xa30 [ 237.707149][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.711975][ T30] ? lock_release+0xbf/0xa30 [ 237.716675][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 237.721717][ T30] ? lock_release+0xbf/0xa30 [ 237.726413][ T30] ? deref_stack_reg+0x17c/0x210 [ 237.731384][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.736499][ T30] ? stack_trace_save+0x118/0x1d0 [ 237.741617][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 237.746918][ T30] ? deref_stack_reg+0x17c/0x210 [ 237.752140][ T30] ? preempt_count_add+0x93/0x190 [ 237.757168][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 237.762480][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 237.767681][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 237.773878][ T30] ? kernel_text_address+0xa7/0xe0 [ 237.779549][ T30] ? __kernel_text_address+0xd/0x40 [ 237.784789][ T30] ? unwind_get_return_address+0x4d/0x90 [ 237.790471][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.795238][ T30] ? lock_release+0xbf/0xa30 [ 237.799820][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.804873][ T30] ? apparmor_capable+0x13b/0x1b0 [ 237.809922][ T30] ? bpf_lsm_capable+0x9/0x10 [ 237.814645][ T30] ? security_capable+0x7e/0x2d0 [ 237.819587][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.824666][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 237.829628][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 237.834792][ T30] ? lock_release+0xbf/0xa30 [ 237.839395][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.844902][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 237.849931][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.854721][ T30] ? lock_acquire+0xe3/0x550 [ 237.859315][ T30] netlink_rcv_skb+0x1e3/0x430 [ 237.864133][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.869593][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.874926][ T30] ? net_generic+0x1f/0x240 [ 237.879431][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.885256][ T30] netlink_unicast+0x7f6/0x990 [ 237.890036][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 237.895378][ T30] ? __virt_addr_valid+0x45f/0x530 [ 237.900617][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 237.905665][ T30] ? __check_object_size+0x47a/0x730 [ 237.910985][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 237.915759][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.921072][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 237.926014][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.931356][ T30] __sock_sendmsg+0x221/0x270 [ 237.936036][ T30] __sys_sendto+0x363/0x4c0 [ 237.940575][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 237.945699][ T30] ? xfd_validate_state+0x6e/0x150 [ 237.950837][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.957177][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.961994][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.968343][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.973138][ T30] __x64_sys_sendto+0xde/0x100 [ 237.977937][ T30] do_syscall_64+0xf3/0x230 [ 237.982481][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.987699][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.993656][ T30] RIP: 0033:0x7f3d2898ebbc [ 237.998243][ T30] RSP: 002b:00007f3d28ccf630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 238.006688][ T30] RAX: ffffffffffffffda RBX: 00007f3d296d4620 RCX: 00007f3d2898ebbc [ 238.014675][ T30] RDX: 0000000000000020 RSI: 00007f3d296d4670 RDI: 0000000000000003 [ 238.022672][ T30] RBP: 0000000000000000 R08: 00007f3d28ccf684 R09: 000000000000000c [ 238.030676][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 238.038643][ T30] R13: 0000000000000000 R14: 00007f3d296d4670 R15: 0000000000000000 [ 238.046663][ T30] [ 238.049693][ T30] INFO: task syz-executor:6546 blocked for more than 145 seconds. [ 238.057524][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 238.065058][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.073872][ T30] task:syz-executor state:D stack:22128 pid:6546 tgid:6546 ppid:1 flags:0x00000004 [ 238.084213][ T30] Call Trace: [ 238.087996][ T30] [ 238.090996][ T30] __schedule+0x186c/0x4be0 [ 238.095522][ T30] ? schedule+0x90/0x320 [ 238.099770][ T30] ? schedule+0x90/0x320 [ 238.104078][ T30] ? __pfx___schedule+0x10/0x10 [ 238.108944][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.114002][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.118773][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.124821][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.131202][ T30] ? schedule+0x90/0x320 [ 238.135444][ T30] schedule+0x14b/0x320 [ 238.139582][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.145160][ T30] __mutex_lock+0x817/0x1010 [ 238.149757][ T30] ? __mutex_lock+0x602/0x1010 [ 238.154598][ T30] ? rtnl_newlink+0xce2/0x2210 [ 238.159386][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.164434][ T30] ? ns_capable+0x8a/0xf0 [ 238.168788][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 238.174650][ T30] rtnl_newlink+0xce2/0x2210 [ 238.179240][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.184283][ T30] ? __set_page_owner+0x671/0x800 [ 238.189641][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.194719][ T30] ? page_ext_get+0x20/0x2a0 [ 238.199314][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.204111][ T30] ? lock_release+0xbf/0xa30 [ 238.208734][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.213786][ T30] ? lock_release+0xbf/0xa30 [ 238.218384][ T30] ? deref_stack_reg+0x17c/0x210 [ 238.223985][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.229133][ T30] ? stack_trace_save+0x118/0x1d0 [ 238.234317][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 238.239670][ T30] ? deref_stack_reg+0x17c/0x210 [ 238.244643][ T30] ? preempt_count_add+0x93/0x190 [ 238.249671][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 238.255001][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 238.260203][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 238.266393][ T30] ? kernel_text_address+0xa7/0xe0 [ 238.271554][ T30] ? __kernel_text_address+0xd/0x40 [ 238.276774][ T30] ? unwind_get_return_address+0x4d/0x90 [ 238.282438][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.287202][ T30] ? lock_release+0xbf/0xa30 [ 238.292301][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.297436][ T30] ? bpf_lsm_capable+0x9/0x10 [ 238.302297][ T30] ? security_capable+0x7e/0x2d0 [ 238.307278][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.312390][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 238.317326][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 238.322479][ T30] ? lock_release+0xbf/0xa30 [ 238.327076][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.332571][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.337684][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.342575][ T30] ? lock_acquire+0xe3/0x550 [ 238.347174][ T30] netlink_rcv_skb+0x1e3/0x430 [ 238.351985][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.357452][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.362798][ T30] ? net_generic+0x1f/0x240 [ 238.367303][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.372552][ T30] netlink_unicast+0x7f6/0x990 [ 238.377318][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 238.382842][ T30] ? __virt_addr_valid+0x45f/0x530 [ 238.388024][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 238.394021][ T30] ? __check_object_size+0x47a/0x730 [ 238.399331][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 238.404158][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.409467][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 238.414451][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.419753][ T30] __sock_sendmsg+0x221/0x270 [ 238.424493][ T30] __sys_sendto+0x363/0x4c0 [ 238.429001][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 238.434073][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.440473][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.446808][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.451602][ T30] __x64_sys_sendto+0xde/0x100 [ 238.456374][ T30] do_syscall_64+0xf3/0x230 [ 238.460973][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.465667][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.471642][ T30] RIP: 0033:0x7f9b8f18ebbc [ 238.476152][ T30] RSP: 002b:00007f9b8f4cf6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 238.484612][ T30] RAX: ffffffffffffffda RBX: 00007f9b8fed4620 RCX: 00007f9b8f18ebbc [ 238.492617][ T30] RDX: 0000000000000044 RSI: 00007f9b8fed4670 RDI: 0000000000000003 [ 238.501271][ T30] RBP: 0000000000000000 R08: 00007f9b8f4cf704 R09: 000000000000000c [ 238.509249][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 238.517253][ T30] R13: 0000000000000000 R14: 00007f9b8fed4670 R15: 0000000000000000 [ 238.525252][ T30] [ 238.528324][ T30] INFO: task syz.4.209:6628 blocked for more than 146 seconds. [ 238.535884][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 238.543175][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.551866][ T30] task:syz.4.209 state:D stack:26832 pid:6628 tgid:6627 ppid:5848 flags:0x00000004 [ 238.562103][ T30] Call Trace: [ 238.565367][ T30] [ 238.568292][ T30] __schedule+0x186c/0x4be0 [ 238.572826][ T30] ? schedule+0x90/0x320 [ 238.577071][ T30] ? schedule+0x90/0x320 [ 238.581348][ T30] ? __pfx___schedule+0x10/0x10 [ 238.586205][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.591275][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.596040][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.602545][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.608891][ T30] ? schedule+0x90/0x320 [ 238.613153][ T30] schedule+0x14b/0x320 [ 238.617311][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.622851][ T30] __mutex_lock+0x817/0x1010 [ 238.627451][ T30] ? __mutex_lock+0x602/0x1010 [ 238.632270][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 238.637480][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.642542][ T30] ? __pfx___futex_wait+0x10/0x10 [ 238.647582][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 238.652906][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 238.657934][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 238.663324][ T30] ? aa_sk_perm+0x96d/0xab0 [ 238.667829][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.672617][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.677469][ T30] ? lock_release+0xbf/0xa30 [ 238.682105][ T30] ip_setsockopt+0x63/0x100 [ 238.686612][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.692562][ T30] do_sock_setsockopt+0x3af/0x720 [ 238.697593][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 238.703898][ T30] ? __fget_files+0x395/0x410 [ 238.708588][ T30] ? __fget_files+0x2a/0x410 [ 238.713201][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 238.718408][ T30] do_syscall_64+0xf3/0x230 [ 238.722932][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.727614][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.733540][ T30] RIP: 0033:0x7f8ffed8cd29 [ 238.737987][ T30] RSP: 002b:00007f8fffb26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.746436][ T30] RAX: ffffffffffffffda RBX: 00007f8ffefa5fa0 RCX: 00007f8ffed8cd29 [ 238.754445][ T30] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 238.762470][ T30] RBP: 00007f8ffee0e2a0 R08: 0000000000000088 R09: 0000000000000000 [ 238.770487][ T30] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 238.778459][ T30] R13: 0000000000000000 R14: 00007f8ffefa5fa0 R15: 00007f8fff0cfa28 [ 238.786528][ T30] [ 238.789553][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 238.798615][ T30] INFO: task syz.4.209:6635 blocked for more than 146 seconds. [ 238.806690][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 238.814007][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.822714][ T30] task:syz.4.209 state:D stack:28176 pid:6635 tgid:6627 ppid:5848 flags:0x00000004 [ 238.832901][ T30] Call Trace: [ 238.836181][ T30] [ 238.839094][ T30] __schedule+0x186c/0x4be0 [ 238.843622][ T30] ? schedule+0x90/0x320 [ 238.847875][ T30] ? schedule+0x90/0x320 [ 238.852164][ T30] ? __pfx___schedule+0x10/0x10 [ 238.857017][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.862069][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.866836][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.872754][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.879082][ T30] ? cgroup_rstat_updated+0x13b/0xc30 [ 238.884496][ T30] ? schedule+0x90/0x320 [ 238.888751][ T30] schedule+0x14b/0x320 [ 238.892961][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.898433][ T30] __mutex_lock+0x817/0x1010 [ 238.903074][ T30] ? __mutex_lock+0x602/0x1010 [ 238.908381][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 238.913694][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.918723][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.923528][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.928558][ T30] ? __count_memcg_events+0x1e6/0x3d0 [ 238.933949][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.940291][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 238.945451][ T30] ? count_memcg_event_mm+0x94/0x420 [ 238.950801][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.955831][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 238.961240][ T30] ? aa_sk_perm+0x96d/0xab0 [ 238.965743][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.970529][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.975376][ T30] ? lock_release+0xbf/0xa30 [ 238.979979][ T30] ip_setsockopt+0x63/0x100 [ 238.984617][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.990550][ T30] do_sock_setsockopt+0x3af/0x720 [ 238.995577][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 239.001162][ T30] ? __fget_files+0x395/0x410 [ 239.005845][ T30] ? __fget_files+0x2a/0x410 [ 239.011146][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 239.016378][ T30] do_syscall_64+0xf3/0x230 [ 239.020907][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.025617][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.031555][ T30] RIP: 0033:0x7f8ffed8cd29 [ 239.035970][ T30] RSP: 002b:00007f8fffb05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 239.044401][ T30] RAX: ffffffffffffffda RBX: 00007f8ffefa6080 RCX: 00007f8ffed8cd29 [ 239.052394][ T30] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.060393][ T30] RBP: 00007f8ffee0e2a0 R08: 0000000000000210 R09: 0000000000000000 [ 239.068366][ T30] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000000 [ 239.076364][ T30] R13: 0000000000000001 R14: 00007f8ffefa6080 R15: 00007f8fff0cfa28 [ 239.084368][ T30] [ 239.087369][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 239.096405][ T30] INFO: task syz.4.209:6638 blocked for more than 146 seconds. [ 239.104026][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 239.111940][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.120641][ T30] task:syz.4.209 state:D stack:26800 pid:6638 tgid:6627 ppid:5848 flags:0x00000004 [ 239.130835][ T30] Call Trace: [ 239.134120][ T30] [ 239.137060][ T30] __schedule+0x186c/0x4be0 [ 239.141627][ T30] ? schedule+0x90/0x320 [ 239.145884][ T30] ? schedule+0x90/0x320 [ 239.150122][ T30] ? __pfx___schedule+0x10/0x10 [ 239.155008][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.160043][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.164831][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 239.170771][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.177127][ T30] ? arch_stack_walk+0xfd/0x150 [ 239.182392][ T30] ? schedule+0x90/0x320 [ 239.186649][ T30] schedule+0x14b/0x320 [ 239.190837][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.196297][ T30] __mutex_lock+0x817/0x1010 [ 239.200927][ T30] ? __mutex_lock+0x602/0x1010 [ 239.205697][ T30] ? arp_ioctl+0x356/0x530 [ 239.210124][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.215837][ T30] ? __might_fault+0xaa/0x120 [ 239.220590][ T30] arp_ioctl+0x356/0x530 [ 239.224839][ T30] ? __pfx_arp_ioctl+0x10/0x10 [ 239.229618][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.234405][ T30] inet_ioctl+0x2b5/0x4f0 [ 239.238744][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 239.243630][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 239.249270][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 239.254939][ T30] sock_do_ioctl+0x158/0x460 [ 239.259532][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 239.265003][ T30] sock_ioctl+0x626/0x8e0 [ 239.269479][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 239.274506][ T30] ? __fget_files+0x2a/0x410 [ 239.279133][ T30] ? __fget_files+0x2a/0x410 [ 239.283758][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 239.288607][ T30] __se_sys_ioctl+0xf5/0x170 [ 239.293226][ T30] do_syscall_64+0xf3/0x230 [ 239.297732][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.302431][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.308326][ T30] RIP: 0033:0x7f8ffed8cd29 [ 239.312759][ T30] RSP: 002b:00007f8ffcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.321918][ T30] RAX: ffffffffffffffda RBX: 00007f8ffefa6160 RCX: 00007f8ffed8cd29 [ 239.329904][ T30] RDX: 0000000020000300 RSI: 0000000000008955 RDI: 0000000000000005 [ 239.337932][ T30] RBP: 00007f8ffee0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.346245][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.354264][ T30] R13: 0000000000000000 R14: 00007f8ffefa6160 R15: 00007f8fff0cfa28 [ 239.362270][ T30] [ 239.365273][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 239.374330][ T30] INFO: task syz.0.217:6658 blocked for more than 147 seconds. [ 239.381915][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 239.389189][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.397888][ T30] task:syz.0.217 state:D stack:26256 pid:6658 tgid:6657 ppid:5846 flags:0x00000004 [ 239.408111][ T30] Call Trace: [ 239.411432][ T30] [ 239.414363][ T30] __schedule+0x186c/0x4be0 [ 239.419347][ T30] ? schedule+0x90/0x320 [ 239.423744][ T30] ? schedule+0x90/0x320 [ 239.427993][ T30] ? __pfx___schedule+0x10/0x10 [ 239.432877][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.437908][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.442714][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 239.448609][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.454963][ T30] ? schedule+0x90/0x320 [ 239.459201][ T30] schedule+0x14b/0x320 [ 239.463412][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.468873][ T30] __mutex_lock+0x817/0x1010 [ 239.473495][ T30] ? __mutex_lock+0x602/0x1010 [ 239.478261][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 239.482952][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.487979][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 239.492762][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 239.498314][ T30] ? dev_ethtool+0x145/0x1bc0 [ 239.503186][ T30] dev_ethtool+0x21e/0x1bc0 [ 239.507703][ T30] ? lock_release+0xbf/0xa30 [ 239.512466][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.517506][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 239.522933][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.527986][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 239.533690][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 239.539327][ T30] ? dev_load+0x21/0x1f0 [ 239.543626][ T30] dev_ioctl+0x785/0x1340 [ 239.547963][ T30] sock_do_ioctl+0x240/0x460 [ 239.552588][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 239.557702][ T30] sock_ioctl+0x626/0x8e0 [ 239.562057][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 239.566934][ T30] ? __fget_files+0x2a/0x410 [ 239.571652][ T30] ? __fget_files+0x2a/0x410 [ 239.576245][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 239.581244][ T30] __se_sys_ioctl+0xf5/0x170 [ 239.585841][ T30] do_syscall_64+0xf3/0x230 [ 239.590427][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.595112][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.601043][ T30] RIP: 0033:0x7f843718cd29 [ 239.605455][ T30] RSP: 002b:00007f8437f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.613891][ T30] RAX: ffffffffffffffda RBX: 00007f84373a5fa0 RCX: 00007f843718cd29 [ 239.622270][ T30] RDX: 00000000200000c0 RSI: 0000000000008946 RDI: 0000000000000009 [ 239.630246][ T30] RBP: 00007f843720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.638253][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.646272][ T30] R13: 0000000000000000 R14: 00007f84373a5fa0 R15: 00007f84374cfa28 [ 239.654297][ T30] [ 239.657324][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 239.666384][ T30] INFO: task syz.0.217:6659 blocked for more than 147 seconds. [ 239.673963][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 239.681268][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.689927][ T30] task:syz.0.217 state:D stack:26480 pid:6659 tgid:6657 ppid:5846 flags:0x00000004 [ 239.700247][ T30] Call Trace: [ 239.703556][ T30] [ 239.706472][ T30] __schedule+0x186c/0x4be0 [ 239.711016][ T30] ? schedule+0x90/0x320 [ 239.715262][ T30] ? schedule+0x90/0x320 [ 239.719488][ T30] ? __pfx___schedule+0x10/0x10 [ 239.724834][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.729877][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.734672][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 239.740657][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.746994][ T30] ? schedule+0x90/0x320 [ 239.751287][ T30] schedule+0x14b/0x320 [ 239.755477][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.760981][ T30] __mutex_lock+0x817/0x1010 [ 239.765578][ T30] ? __mutex_lock+0x602/0x1010 [ 239.770398][ T30] ? rtnl_newlink+0xce2/0x2210 [ 239.775255][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.780263][ T30] ? ns_capable+0x8a/0xf0 [ 239.784620][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 239.790477][ T30] rtnl_newlink+0xce2/0x2210 [ 239.795075][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 239.800077][ T30] ? __netlink_deliver_tap+0x56b/0x7f0 [ 239.805710][ T30] ? netlink_deliver_tap+0x19d/0x1b0 [ 239.811048][ T30] ? netlink_unicast+0x7c4/0x990 [ 239.816008][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 239.821003][ T30] ? __sock_sendmsg+0x221/0x270 [ 239.825859][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 239.831268][ T30] ? __sys_sendmsg+0x269/0x350 [ 239.836050][ T30] ? do_syscall_64+0xf3/0x230 [ 239.840756][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.846836][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.853219][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.857984][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.862791][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.869124][ T30] ? lock_release+0xbf/0xa30 [ 239.873760][ T30] ? nlmon_xmit+0xaf/0x100 [ 239.878181][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.882990][ T30] ? rcu_is_watching+0x15/0xb0 [ 239.887753][ T30] ? lock_release+0xbf/0xa30 [ 239.892383][ T30] ? __pfx_aa_get_newest_label+0x10/0x10 [ 239.898042][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.903117][ T30] ? bpf_lsm_capable+0x9/0x10 [ 239.907798][ T30] ? security_capable+0x7e/0x2d0 [ 239.912884][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 239.917917][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 239.922879][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 239.927993][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.933971][ T30] ? ref_tracker_free+0x643/0x7e0 [ 239.939010][ T30] netlink_rcv_skb+0x1e3/0x430 [ 239.943826][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 239.949311][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.954644][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.959850][ T30] netlink_unicast+0x7f6/0x990 [ 239.964639][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 239.969926][ T30] ? __virt_addr_valid+0x45f/0x530 [ 239.975072][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 239.980122][ T30] ? __check_object_size+0x47a/0x730 [ 239.985483][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 239.990287][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.995618][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 240.000596][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.005888][ T30] __sock_sendmsg+0x221/0x270 [ 240.010596][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 240.015365][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.020801][ T30] ? __fget_files+0x2a/0x410 [ 240.025399][ T30] ? __fget_files+0x2a/0x410 [ 240.029970][ T30] __sys_sendmsg+0x269/0x350 [ 240.035015][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.040171][ T30] ? lock_release+0xbf/0xa30 [ 240.044787][ T30] ? _raw_spin_unlock+0x28/0x50 [ 240.049645][ T30] ? __se_sys_futex+0x3f9/0x480 [ 240.054548][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.061011][ T30] ? rcu_is_watching+0x15/0xb0 [ 240.065784][ T30] ? rcu_is_watching+0x15/0xb0 [ 240.070606][ T30] do_syscall_64+0xf3/0x230 [ 240.075123][ T30] ? clear_bhb_loop+0x35/0x90 [ 240.079792][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.085760][ T30] RIP: 0033:0x7f843718cd29 [ 240.090180][ T30] RSP: 002b:00007f8437f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.098630][ T30] RAX: ffffffffffffffda RBX: 00007f84373a6080 RCX: 00007f843718cd29 [ 240.106634][ T30] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 240.114636][ T30] RBP: 00007f843720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 240.122640][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.130765][ T30] R13: 0000000000000000 R14: 00007f84373a6080 R15: 00007f84374cfa28 [ 240.139067][ T30] [ 240.142251][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 240.151342][ T30] INFO: task syz.5.218:6662 blocked for more than 148 seconds. [ 240.158866][ T30] Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 240.166177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.174864][ T30] task:syz.5.218 state:D stack:24368 pid:6662 tgid:6661 ppid:6003 flags:0x00000004 [ 240.185139][ T30] Call Trace: [ 240.188431][ T30] [ 240.191416][ T30] __schedule+0x186c/0x4be0 [ 240.195935][ T30] ? schedule+0x90/0x320 [ 240.200184][ T30] ? schedule+0x90/0x320 [ 240.204447][ T30] ? __pfx___schedule+0x10/0x10 [ 240.209296][ T30] ? __pfx_lock_release+0x10/0x10 [ 240.214358][ T30] ? rcu_is_watching+0x15/0xb0 [ 240.219131][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 240.225054][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.231433][ T30] ? schedule+0x90/0x320 [ 240.235675][ T30] schedule+0x14b/0x320 [ 240.240125][ T30] schedule_preempt_disabled+0x13/0x30 [ 240.245751][ T30] __mutex_lock+0x817/0x1010 [ 240.250384][ T30] ? __mutex_lock+0x602/0x1010 [ 240.255150][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 240.259812][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 240.264870][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 240.269640][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 240.275245][ T30] ? dev_ethtool+0x145/0x1bc0 [ 240.279952][ T30] dev_ethtool+0x21e/0x1bc0 [ 240.284528][ T30] ? lock_release+0xbf/0xa30 [ 240.289124][ T30] ? __pfx_lock_release+0x10/0x10 [ 240.294274][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 240.299213][ T30] ? __pfx_lock_release+0x10/0x10 [ 240.304646][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 240.310728][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 240.316378][ T30] ? dev_load+0x21/0x1f0 [ 240.320655][ T30] dev_ioctl+0x785/0x1340 [ 240.324995][ T30] sock_do_ioctl+0x240/0x460 [ 240.329591][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 240.334752][ T30] sock_ioctl+0x626/0x8e0 [ 240.339493][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 240.344434][ T30] ? __fget_files+0x2a/0x410 [ 240.349042][ T30] ? __fget_files+0x2a/0x410 [ 240.353807][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 240.358766][ T30] __se_sys_ioctl+0xf5/0x170 [ 240.363398][ T30] do_syscall_64+0xf3/0x230 [ 240.367904][ T30] ? clear_bhb_loop+0x35/0x90 [ 240.372621][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.378516][ T30] RIP: 0033:0x7f7d0638cd29 [ 240.383254][ T30] RSP: 002b:00007f7d0711e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.391911][ T30] RAX: ffffffffffffffda RBX: 00007f7d065a5fa0 RCX: 00007f7d0638cd29 [ 240.399865][ T30] RDX: 00000000200000c0 RSI: 0000000000008946 RDI: 0000000000000007 [ 240.407887][ T30] RBP: 00007f7d0640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 240.415913][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.423923][ T30] R13: 0000000000000000 R14: 00007f7d065a5fa0 R15: 00007f7d066cfa28 [ 240.431927][ T30] [ 240.434952][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 240.444525][ T30] INFO: lockdep is turned off. [ 240.449309][ T30] NMI backtrace for cpu 1 [ 240.449322][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 240.449338][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 240.449346][ T30] Call Trace: [ 240.449351][ T30] [ 240.449356][ T30] dump_stack_lvl+0x241/0x360 [ 240.449375][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.449388][ T30] ? __pfx__printk+0x10/0x10 [ 240.449407][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 240.449428][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 240.449449][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 240.449466][ T30] ? _printk+0xd5/0x120 [ 240.449482][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 240.449499][ T30] ? __pfx__printk+0x10/0x10 [ 240.449517][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 240.449533][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 240.449552][ T30] watchdog+0xff6/0x1040 [ 240.449568][ T30] ? watchdog+0x1ea/0x1040 [ 240.449584][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.449599][ T30] kthread+0x7a9/0x920 [ 240.449615][ T30] ? __pfx_kthread+0x10/0x10 [ 240.449632][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.449646][ T30] ? __pfx_kthread+0x10/0x10 [ 240.449662][ T30] ? __pfx_kthread+0x10/0x10 [ 240.449678][ T30] ? __pfx_kthread+0x10/0x10 [ 240.449693][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.449705][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 240.449719][ T30] ? __pfx_kthread+0x10/0x10 [ 240.449735][ T30] ret_from_fork+0x4b/0x80 [ 240.449750][ T30] ? __pfx_kthread+0x10/0x10 [ 240.449766][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.449784][ T30] [ 240.449791][ T30] Sending NMI from CPU 1 to CPUs 0: [ 240.617138][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 240.619498][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 240.634818][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07632-gaa22f4da2a46 #0 [ 240.644958][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 240.655011][ T30] Call Trace: [ 240.658277][ T30] [ 240.661191][ T30] dump_stack_lvl+0x241/0x360 [ 240.665852][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.671042][ T30] ? __pfx__printk+0x10/0x10 [ 240.675641][ T30] ? vscnprintf+0x5d/0x90 [ 240.679958][ T30] panic+0x349/0x880 [ 240.683842][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.689979][ T30] ? __pfx_panic+0x10/0x10 [ 240.694468][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 240.699823][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.705988][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 240.712134][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 240.718268][ T30] watchdog+0x1035/0x1040 [ 240.722590][ T30] ? watchdog+0x1ea/0x1040 [ 240.726999][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.731664][ T30] kthread+0x7a9/0x920 [ 240.735724][ T30] ? __pfx_kthread+0x10/0x10 [ 240.740301][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.744972][ T30] ? __pfx_kthread+0x10/0x10 [ 240.749552][ T30] ? __pfx_kthread+0x10/0x10 [ 240.754137][ T30] ? __pfx_kthread+0x10/0x10 [ 240.758717][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.763900][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 240.769081][ T30] ? __pfx_kthread+0x10/0x10 [ 240.773670][ T30] ret_from_fork+0x4b/0x80 [ 240.778094][ T30] ? __pfx_kthread+0x10/0x10 [ 240.782694][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.787455][ T30] [ 240.790729][ T30] Kernel Offset: disabled [ 240.795044][ T30] Rebooting in 86400 seconds..