last executing test programs: 2m28.430767785s ago: executing program 0 (id=158): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x84, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000010900020073797a320000000009000100"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close(0x3) (async) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1) 2m27.943082305s ago: executing program 4 (id=162): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xb0368e29}]}}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x149240) read$midi(r1, &(0x7f0000000180)=""/172, 0xac) 2m27.380651913s ago: executing program 4 (id=166): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001042abd7000feffffff00000000", @ANYRES32=r3, @ANYBLOB="82490000ca01070008002900eb5c0600050027000c"], 0x30}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000001c0)={[{0x6, 0x8, 0x7f, 0xb, 0x4e, 0x9, 0x4, 0x0, 0x40, 0x6, 0x94, 0x2f, 0xb}, {0x7ff, 0x8, 0x8f, 0x4, 0x24, 0x4e, 0x1, 0x7f, 0x6, 0x9, 0x5, 0x7, 0x2}, {0x8723, 0xfff, 0x7f, 0x15, 0xa, 0x6, 0x9, 0x2, 0xf7, 0x80, 0x81, 0x8, 0x5}], 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) r8 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_disconnect(r0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x3, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x7, 0x8], 0x2ffc, 0x304}) 2m27.145315546s ago: executing program 0 (id=169): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x280cc2, 0x0) fadvise64(r2, 0x6466, 0x5, 0x1) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000ffffff800002000100000000fffffffbfc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 2m27.075970234s ago: executing program 0 (id=171): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x1}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card2/oss_mixer\x00', 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0x0) keyctl$set_timeout(0xf, 0x0, 0x2) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) tee(r8, r9, 0x404, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x5e) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006003a0000000a00000400000000fc00000000000000000000000000000040000000000000000200010000000000000003080000000005000500000000000a000000ffffffffff010000000000000000000300000001d69e000000000000"], 0x70}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x100000, 0x0, {0x0, 0x0, 0x0, r4, 0x8a83}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xbd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 2m26.885312211s ago: executing program 0 (id=173): r0 = syz_open_dev$vim2m(&(0x7f00000010c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001100)={0x1, @pix_mp={0x81a, 0x8, 0x30324c4a, 0x0, 0xb, [{0x3f3b, 0x1}, {0xb, 0x9f}, {0x409, 0x38}, {0x6, 0x97e5}, {0xfffffffc, 0x2}, {0x80000002, 0x1800}, {0x5, 0xd397}, {0xa, 0x6}], 0x42, 0x5, 0x8, 0x0, 0x7}}) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}, {0x18, 0x110, 0x1, '\x00'}], 0x28}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x8, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002080001400000002108000b40000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x80b2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c) 2m26.077537769s ago: executing program 0 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x6, 0x803, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004d00)={0x2020}, 0x2043) lseek(r4, 0xfffffffffffffff5, 0x1) write$UHID_INPUT(r4, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xfff2}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1000, 0x9}}]}}}]}, 0x58}}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "18047d80edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d219622937291bf1a88f2a7e933b9de68b10c358ceb836b1269874d68178d5ca2a64891b8ac2b18bec75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b511416252a03ab78abf8be2fc6313a03763da61a574a9bc59b728aa3c02eedb176afb984194f31696e2b3357c5757fbf99bae1c8dde4cfedc5714471bdd688ce6ac6e3d2a149abd76a0fe9a448d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef00"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x12, 0x14, 0x6}}]}}]}, 0x14c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x3}, &(0x7f00000000c0)=0x10) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x178cba653bde3317, 0x5}, {0x1ffc8, 0xffe0}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 2m25.95392078s ago: executing program 4 (id=181): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f00000002c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x201}}], {0x95, 0x0, 0x1800}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.772855221s ago: executing program 4 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x33fe0}, 0x4000) 2m25.622453535s ago: executing program 4 (id=185): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00009e4000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x7f41f000) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m25.266160138s ago: executing program 1 (id=189): r0 = syz_open_dev$vim2m(&(0x7f00000010c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001100)={0x1, @pix_mp={0x81a, 0x8, 0x30324c4a, 0x0, 0xb, [{0x3f3b, 0x1}, {0xb, 0x9f}, {0x409, 0x38}, {0x6, 0x97e5}, {0xfffffffc, 0x2}, {0x80000002, 0x1800}, {0x5, 0xd397}, {0xa, 0x6}], 0x42, 0x5, 0x8, 0x0, 0x7}}) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}, {0x18, 0x110, 0x1, '\x00'}], 0x28}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x8, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x400000}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002080001400000002108000b40000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, 0x0, 0x0, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x80b2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c) 2m25.017033228s ago: executing program 3 (id=190): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rtst\xe3c*s\'rVdn\x1aDd', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4001) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000d9ff00000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a310000000014000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r1, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 2m24.840934615s ago: executing program 2 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async, rerun: 64) r1 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/60, 0x3c}, {0x0}], 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000800)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) (async, rerun: 64) pread64(r4, &(0x7f0000000340)=""/69, 0x45, 0x3) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x8, 0x4c, &(0x7f0000000200)="28bbf90c064d0e64", &(0x7f0000000280)=""/76, 0x8, 0x0, 0xc3, 0x2a, &(0x7f0000000440)="903c09a1d40aa622a6e38246c2e9105ee2b6f1a49871c346976e139894673d579b35a0ac1660bcf84286e1a7022e7bbbf6c711efce47dadcec5d41d02a7812eab98354b0442ee30eedd16a93d7fe6b083db47c0823743918b0ecf39da582883631875552543e8e1cc46dfffc75ff542f49c4432c909afc550abcdb23eef9c9d574f3121806c61b7a942ccab06276ca46c2760daea2138cd537c12c6351042ef388f416b80d9bd8a64ae2c3787bd0de1fab8a63bf152a5aff0a038171960da25f85edab", &(0x7f0000000540)="f0d50acc9af877c4981f93a581e11d57a05b46ace9eec36d866f77b2065b1fd4ceab182f79bf6e0ecab3", 0x2, 0x0, 0x4}, 0x50) (async, rerun: 64) listen(r7, 0x5) (async, rerun: 64) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500090008"], 0x4a) 2m24.840584632s ago: executing program 3 (id=192): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000040000000000000000000000ac1e000100000000000000000000000000000002000000000a0030"], 0xb8}}, 0x0) 2m24.669513698s ago: executing program 3 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000008c0)={{}, 'port1\x00', 0x10, 0x401, 0x0, 0x5, 0x4, 0xa, 0x101, 0x0, 0x2, 0x2a}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b37ae835f7bb904b8194489a49d4ec6b27434c59d432b232922faf3ce0f49f6a974bedbe3c64d8492b262f7625405c64f488431dc2686367b051485b41b7338f28a39c81107f423856ccfc232f20b571c8440ef8889a344e64fca4c6019a2ad18ebf50f2171e64864822df607627c06d6826e329fcbcc2e979b1717cb0961ad299994a48d8257a7b1b01cae345026b22607aa4755a310f987a4c4f5600c4d4d42eaa722df1455a731a", @ANYRES8=r3], 0x4c}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000240)={0x23, 0x3, 0x0, {0x5, 0x2, 0x0, '{.'}}, 0x23) 2m24.638143784s ago: executing program 0 (id=194): lsetxattr(&(0x7f0000000040)='./file0/file3/file0\x00', 0x0, 0x0, 0x0, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x98f4d03eb75dd597) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x2000000) syz_usb_connect(0x5, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) 2m24.512161575s ago: executing program 3 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a0104000e0000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 2m24.329976206s ago: executing program 3 (id=196): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x2000000, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x1, 0x0, 0x0, 0x2}]) 2m24.32602713s ago: executing program 4 (id=197): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="c74181d7a33c6e71c7f5dbafb8995615cb1cc06a2174773416bda48fadcd99c0d2c204a14536caa0b5412e087ea90744120bb3a2a045542e9e89e1afd4ffe0dbe1473b53ac3abd2bc4bda3e08b36428a1fef61c569ab2e595ce5187f14083c0869fe43bbf6657c5a31"], 0x0) 2m24.300530558s ago: executing program 2 (id=198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100001002abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2040080c00000140003006e657464657673696d300000000000000c0016800800018004000c800800"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 2m24.129524216s ago: executing program 2 (id=199): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002380)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="ad1142bbbc", 0x5}], 0x1}}], 0x2, 0x800) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m24.128670359s ago: executing program 1 (id=200): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0xffffffffffffff8c) 2m23.997420425s ago: executing program 3 (id=201): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)="3cee9b4d1804fd709205ca554c8185fc5f300558752dfe8ceef926d795656f09fac13c18505697689808672d1b443d5fa260d9ebb1a7174f849dacfba637c2adfce2b2aa82c1f26a078e5bcfa74175b22c89b111fc795eb636bfd606fce1650a3096eabe9f6efc8576491430a668222d18690c917335a7a5719ec528d75d062be0", 0x81, 0xfffffffffffffff9) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000840)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000380)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9f, 0x4}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3421}}, {0x2, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) 2m23.956497276s ago: executing program 1 (id=202): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={0x0, 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000080006400000040111000300686173683a6e65742c6e657400000000050004ff4336334ae05aca75e0df3b4994f27cd9be6da4efe5e3e59bdf30cc3bf3ba3b32f3e3f56c83285c196d98a01a"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20004000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r6 = syz_open_dev$loop(0x0, 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000180)={0x9, r1, 'id0\x00'}) writev(r8, &(0x7f0000000480)=[{&(0x7f0000000200)="7188cd98ecb7efee595f5af2afefdf5ec050a701a1883982bdb093966ec15be69e0651", 0x23}, {&(0x7f0000000400)="ffd3ed6519ad07e4feb0bb974006a0a30e7eff7de03e35143e5cf928fa474696ab6dd248050f19a043d87c6cdc1310252a3b10570f33d5590586c3a8d7c1c8713446a24ba045a9a02d42b55986f403014002e446dc92bb8f99f29608b6273fae87237de6c3758f80b86b12aa65385fe4004c81fb", 0x74}], 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x5, 0x0, 0xa, 0x20, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m23.917128282s ago: executing program 2 (id=203): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeid\xe5+\xf0', 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000610002000000119078000000000000000005d463edb3f7712900004e20004d90020000000007740000fdffffffffffffff9c152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af773530000000000"], 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x60000726) listen(r2, 0x401) syz_emit_ethernet(0x7e, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x2, [{@private=0xa010100, 0x7ff}, {@loopback, 0x65}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x1}, {@multicast1, 0x80}, {@remote, 0xffffff30}]}, @timestamp_prespec={0x44, 0x4, 0xd6, 0x3, 0xf}]}}}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x7cab, 0x410100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') readv(r4, &(0x7f0000000540)=[{0x0}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)={0x5, 0x0, [{0xeeee2fff, 0x4c, &(0x7f0000000240)=""/76}, {0xfec00000, 0x73, &(0x7f0000000680)=""/115}, {0x200000, 0xf5, &(0x7f0000000700)=""/245}, {0x200000, 0xb0, &(0x7f0000000800)=""/176}, {0xb000, 0x6, &(0x7f00000008c0)=""/6}]}) vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000100)='\x00', 0xfffffe03}, {&(0x7f0000000300)="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", 0x34}, {&(0x7f0000000180)="116f52aac45b0a46ca8ac054ce0df2f28eae35f5133e1879dd984ec25f28b33f4fd2f42304f3ec53b2df7b3d20abffe7fb0100000000000000d7fa83dcd160227ef91f7d66a982bc1a0bdb6aabecb09e9d9c203134faf4955ad57c0148745c37d0890d8e82b49198ed762f5b523716e91cafc2cf472169c0150400ec97df2a537129e002e0c1cfd0a6a1a85c9678e924bc3ec60291fde9d2244033cb07a2fbf05349314524ab322c9804fd3a55b63af674d179f5aeceffff", 0x2b}, {&(0x7f0000000580)="7cdcddfa13f6ae6ca6cbc2120b6c34f5e4b108e8e1847fe05a8f07f2d954a4dbfabc27b20da22216768752f4333955bb76705f2497f15a3202492b82e9f8bd805559af310bf73ee15b78f0d3733d1a33fe6ad037ab2ce74b591b637e3ca5faf4976959562c0da7a22bfbb442efb5810114a2c1d5bc1a857ab8a7100c1fcb3f75ceeb3c35961b5c7a7191"}], 0x3, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 2m23.7973275s ago: executing program 1 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0c0100001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000dc00128009000100766c616e00000000cc120280040004800600050088a800000c0002000b0000000700000006000500810000000600010003000000640003800c00010004000000030000000c000100208d0000090000000c000100010000000c0000000c000100050000002ceeffff0c00010001ffffff060000000c00010001000000040000000c00010001000000000040000c000100f9ffffff5d0a00000600010003000000340004800c00010007000000000000000c00010006000000090000000c00010003000000ff7fffff0c000100000001000900040008000500", @ANYRES32=r1], 0x10c}}, 0x0) 2m23.770920572s ago: executing program 1 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 2m23.720736773s ago: executing program 1 (id=206): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x1, 0x3, 0x50aa, 0x8}, 0x5, 0x10000000, 0x2, r0, 0x5, 0x54, 'syz1\x00', &(0x7f0000000140)=['/sys/kernel/debug/sync/sw_sync\x00', '\x9d\\(:\x00', '/sys/kernel/debug/sync/sw_sync\x00', '/sys/kernel/debug/sync/sw_sync\x00', '/sys/kernel/debug/sync/sw_sync\x00'], 0x81}) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x23}, {0xffffffffffffffff, 0x8110}], 0x2, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl(r5, 0x4048aec9, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r9, &(0x7f0000000240)="a3fc", 0x2) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async) sendmmsg$inet(r10, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x20000057) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0x4144, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000080)={0x0, 0xde91a7fae1a50c8d, 0x2, 0x0, 0x2}, 0xc) (async) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000c40)={0x14, &(0x7f0000000bc0)={0x40, 0x6, 0x35, {0x35, 0xb, "fb0655100b6657e9786223b2076b80f9b8c6acd5136f3ec5de3d73deb991c39d6e0d091b2ca52167b3968d321e53085d2dccbb"}}, &(0x7f0000000c00)={0x0, 0x3, 0x39, @string={0x39, 0x3, "7e6d017a3a94f43a7bcdf44e9441222a57b310447caffd496b40922784281e1d717635c85439e2318ae396948662c9e39ab6e77860f4cd"}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000c80)={0x0, 0x10, 0xfc, "8f2b3439ec411c472f0532daa3aca2eca960a9c8e918ea361b80c2746ff230cccf80301a2c093a1cd91c399415182cb43a045bc7690f4b89daa7c1a2a41f9bbc80cb04ae6598301155f441e2086175509aa30089a4011a657f960a34fd1ea7861abdbcdc7e1bc2812eb591f1638c1f7f8d8cb1b9394f3383a27cb477314f205c5a86b74903b0c18e4f61f3eaa8e1129d6184a6172c2c6d331f13afa7acd423e4692291d94b0732916e401fc47e15f4f2b9954167d253a4cadfc7558169a0eb02436a0892833dbe304e322f93ed044e5ecb59179c5c921455f2541cd69b79b33bb040e9cccac8d87180bc46f808787b764e85f94ace5d401a680bf88d"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000e40)={0x20, 0x81, 0x3, "76febe"}, &(0x7f0000000e80)={0x20, 0x82, 0x3, "d007d6"}, &(0x7f0000000ec0)={0x20, 0x83, 0x2, "8898"}, &(0x7f0000000f00)={0x20, 0x84, 0x1, "1c"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, "a75f17"}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r12, 0x11, 0x70bd2b, 0x25dfdbbd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="992e7bdf", @ANYRES16=r12, @ANYBLOB="04002bbd7000ffdbdf25100000000c0099000200000061000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000580)=ANY=[@ANYRES32=r3], 0x0) 2m22.957060363s ago: executing program 2 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000010000000000fdff7448d747eb065bf8a865da165f668b5cfffffe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) 2m22.922605123s ago: executing program 2 (id=208): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x40804) fsopen(&(0x7f00000000c0)='9p\x00', 0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x10002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (fail_nth: 54) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 1m50.969963456s ago: executing program 32 (id=194): lsetxattr(&(0x7f0000000040)='./file0/file3/file0\x00', 0x0, 0x0, 0x0, 0x3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x98f4d03eb75dd597) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x2000000) syz_usb_connect(0x5, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) 0s ago: executing program 33 (id=206): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x1, 0x3, 0x50aa, 0x8}, 0x5, 0x10000000, 0x2, r0, 0x5, 0x54, 'syz1\x00', &(0x7f0000000140)=['/sys/kernel/debug/sync/sw_sync\x00', '\x9d\\(:\x00', '/sys/kernel/debug/sync/sw_sync\x00', '/sys/kernel/debug/sync/sw_sync\x00', '/sys/kernel/debug/sync/sw_sync\x00'], 0x81}) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x23}, {0xffffffffffffffff, 0x8110}], 0x2, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl(r5, 0x4048aec9, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r9, &(0x7f0000000240)="a3fc", 0x2) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r10, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async) sendmmsg$inet(r10, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)='o', 0x1}], 0x1}}], 0x1, 0x20000057) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0x4144, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000080)={0x0, 0xde91a7fae1a50c8d, 0x2, 0x0, 0x2}, 0xc) (async) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000c40)={0x14, &(0x7f0000000bc0)={0x40, 0x6, 0x35, {0x35, 0xb, "fb0655100b6657e9786223b2076b80f9b8c6acd5136f3ec5de3d73deb991c39d6e0d091b2ca52167b3968d321e53085d2dccbb"}}, &(0x7f0000000c00)={0x0, 0x3, 0x39, @string={0x39, 0x3, "7e6d017a3a94f43a7bcdf44e9441222a57b310447caffd496b40922784281e1d717635c85439e2318ae396948662c9e39ab6e77860f4cd"}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000c80)={0x0, 0x10, 0xfc, "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"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000e40)={0x20, 0x81, 0x3, "76febe"}, &(0x7f0000000e80)={0x20, 0x82, 0x3, "d007d6"}, &(0x7f0000000ec0)={0x20, 0x83, 0x2, "8898"}, &(0x7f0000000f00)={0x20, 0x84, 0x1, "1c"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, "a75f17"}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r12, 0x11, 0x70bd2b, 0x25dfdbbd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="992e7bdf", @ANYRES16=r12, @ANYBLOB="04002bbd7000ffdbdf25100000000c0099000200000061000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000580)=ANY=[@ANYRES32=r3], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 73.199323][ T5602] cgroup: Unknown subsys name 'net' [ 73.273892][ T5602] cgroup: Unknown subsys name 'cpuset' [ 73.276738][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.846202][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.111006][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.112743][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.125180][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.126174][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.127636][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.130089][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.132728][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.136036][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.137305][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.139406][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.142828][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.144517][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.146472][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.147282][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.147646][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.148929][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.149788][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.151867][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.152274][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.152627][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.153206][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.155971][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.160466][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.160862][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.161337][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.362323][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.362503][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.362628][ T5631] bridge_slave_0: entered allmulticast mode [ 78.364589][ T5631] bridge_slave_0: entered promiscuous mode [ 78.398895][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.398959][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.399226][ T5634] bridge_slave_0: entered allmulticast mode [ 78.401063][ T5634] bridge_slave_0: entered promiscuous mode [ 78.405088][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.405191][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.405309][ T5634] bridge_slave_1: entered allmulticast mode [ 78.407086][ T5634] bridge_slave_1: entered promiscuous mode [ 78.446335][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.446445][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.447088][ T5631] bridge_slave_1: entered allmulticast mode [ 78.449585][ T5631] bridge_slave_1: entered promiscuous mode [ 78.524257][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.524323][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.524574][ T5630] bridge_slave_0: entered allmulticast mode [ 78.526271][ T5630] bridge_slave_0: entered promiscuous mode [ 78.565156][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.565334][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.566062][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566294][ T5630] bridge_slave_1: entered allmulticast mode [ 78.567406][ T5630] bridge_slave_1: entered promiscuous mode [ 78.572935][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.604884][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.633660][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.655972][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.656098][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.656174][ T5632] bridge_slave_0: entered allmulticast mode [ 78.658148][ T5632] bridge_slave_0: entered promiscuous mode [ 78.702284][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.702350][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.702636][ T5633] bridge_slave_0: entered allmulticast mode [ 78.703966][ T5633] bridge_slave_0: entered promiscuous mode [ 78.706393][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.706495][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.706607][ T5632] bridge_slave_1: entered allmulticast mode [ 78.710990][ T5632] bridge_slave_1: entered promiscuous mode [ 78.715320][ T5634] team0: Port device team_slave_0 added [ 78.720773][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.751251][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.751360][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.751482][ T5633] bridge_slave_1: entered allmulticast mode [ 78.756168][ T5633] bridge_slave_1: entered promiscuous mode [ 78.797039][ T5634] team0: Port device team_slave_1 added [ 78.810438][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.824666][ T5631] team0: Port device team_slave_0 added [ 78.840977][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.852863][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.852879][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.852900][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.858905][ T5631] team0: Port device team_slave_1 added [ 78.878605][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.919106][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.919123][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.919147][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.923534][ T5630] team0: Port device team_slave_0 added [ 78.961263][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.993823][ T5630] team0: Port device team_slave_1 added [ 79.004768][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.004784][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.004805][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.024675][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.026507][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.026521][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.026560][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.029860][ T5632] team0: Port device team_slave_0 added [ 79.031891][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.031903][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.031924][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.036721][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.036733][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.036754][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.057112][ T5632] team0: Port device team_slave_1 added [ 79.146596][ T5633] team0: Port device team_slave_0 added [ 79.177182][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.177200][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.177220][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.190124][ T5634] hsr_slave_0: entered promiscuous mode [ 79.191413][ T5634] hsr_slave_1: entered promiscuous mode [ 79.239688][ T5633] team0: Port device team_slave_1 added [ 79.243496][ T5618] Bluetooth: hci0: command tx timeout [ 79.243786][ T5620] Bluetooth: hci3: command tx timeout [ 79.250829][ T5618] Bluetooth: hci4: command tx timeout [ 79.251069][ T5620] Bluetooth: hci2: command tx timeout [ 79.261882][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.261896][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.261918][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.272563][ T5630] hsr_slave_0: entered promiscuous mode [ 79.273600][ T5630] hsr_slave_1: entered promiscuous mode [ 79.274422][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 79.274499][ T5630] Cannot create hsr debugfs directory [ 79.311130][ T5620] Bluetooth: hci1: command tx timeout [ 79.380868][ T5631] hsr_slave_0: entered promiscuous mode [ 79.381573][ T5631] hsr_slave_1: entered promiscuous mode [ 79.382041][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 79.382060][ T5631] Cannot create hsr debugfs directory [ 79.382920][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.382931][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.382951][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.386930][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.386942][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.386962][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.568217][ T5632] hsr_slave_0: entered promiscuous mode [ 79.568949][ T5632] hsr_slave_1: entered promiscuous mode [ 79.569424][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 79.569443][ T5632] Cannot create hsr debugfs directory [ 79.644057][ T5633] hsr_slave_0: entered promiscuous mode [ 79.644755][ T5633] hsr_slave_1: entered promiscuous mode [ 79.645190][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 79.645209][ T5633] Cannot create hsr debugfs directory [ 80.058873][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.074055][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.074980][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.078173][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.079018][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.089181][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.097107][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.105648][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.180703][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.192119][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.193187][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.202056][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.209480][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.221996][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.227851][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.237600][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.326744][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.334225][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.335061][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.342318][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.356981][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.367241][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.368272][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.378611][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.478652][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.491364][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.499510][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.505151][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.526391][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.529948][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.558870][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.566825][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.582843][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.658260][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.663017][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.663835][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.672595][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.687415][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.690937][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.703877][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.706634][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.718421][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.724501][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.752229][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.752344][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.786211][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.786275][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.815122][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.844934][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.845028][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.870865][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.870985][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.958787][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.014320][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.033044][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.074907][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.075023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.111980][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.115862][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.115958][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.119635][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.175497][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.175613][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.194951][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.212732][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.215592][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.215707][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.268681][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.268744][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.269943][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.270004][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.310892][ T5618] Bluetooth: hci4: command tx timeout [ 81.310929][ T5618] Bluetooth: hci3: command tx timeout [ 81.310951][ T5618] Bluetooth: hci0: command tx timeout [ 81.311165][ T5620] Bluetooth: hci2: command tx timeout [ 81.327337][ T5632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.362398][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.380851][ T5620] Bluetooth: hci1: command tx timeout [ 81.405680][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.440017][ T5634] veth0_vlan: entered promiscuous mode [ 81.464836][ T5634] veth1_vlan: entered promiscuous mode [ 81.504495][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.559335][ T5630] veth0_vlan: entered promiscuous mode [ 81.588736][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.633695][ T5634] veth0_macvtap: entered promiscuous mode [ 81.636844][ T5630] veth1_vlan: entered promiscuous mode [ 81.644997][ T5632] veth0_vlan: entered promiscuous mode [ 81.654025][ T5632] veth1_vlan: entered promiscuous mode [ 81.676361][ T5634] veth1_macvtap: entered promiscuous mode [ 81.761563][ T5632] veth0_macvtap: entered promiscuous mode [ 81.778846][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.813946][ T5632] veth1_macvtap: entered promiscuous mode [ 81.826445][ T5631] veth0_vlan: entered promiscuous mode [ 81.834027][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.895999][ T5630] veth0_macvtap: entered promiscuous mode [ 81.920016][ T5631] veth1_vlan: entered promiscuous mode [ 81.932513][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.947153][ T5630] veth1_macvtap: entered promiscuous mode [ 81.964864][ T5633] veth0_vlan: entered promiscuous mode [ 81.988828][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.046876][ T5633] veth1_vlan: entered promiscuous mode [ 82.125002][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125126][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125182][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125217][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125253][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125288][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125323][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.125357][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.134170][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.217285][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.266830][ T5631] veth0_macvtap: entered promiscuous mode [ 82.274273][ T5631] veth1_macvtap: entered promiscuous mode [ 82.304030][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.304070][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.312541][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.317038][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.341142][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.342824][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.342862][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.342893][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.411650][ T5633] veth0_macvtap: entered promiscuous mode [ 82.417473][ T313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.417494][ T313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.455087][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.455181][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.455214][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.484976][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.488317][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.488336][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.530421][ T5633] veth1_macvtap: entered promiscuous mode [ 82.586165][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.586188][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.664483][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.704824][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.741602][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.741631][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.789896][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.868947][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.868970][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.991172][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.991787][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.991965][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.992114][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.015751][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.015771][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.098600][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.098621][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.211431][ T30] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.239129][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.239161][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.373984][ T30] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 83.378783][ T30] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.378818][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.380893][ T52] Bluetooth: hci0: command tx timeout [ 83.380930][ T52] Bluetooth: hci3: command tx timeout [ 83.380953][ T52] Bluetooth: hci4: command tx timeout [ 83.383247][ T5620] Bluetooth: hci2: command tx timeout [ 83.445969][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.445998][ T30] usb 5-1: Product: syz [ 83.446012][ T30] usb 5-1: Manufacturer: syz [ 83.446026][ T30] usb 5-1: SerialNumber: syz [ 83.461364][ T5620] Bluetooth: hci1: command tx timeout [ 83.484527][ T30] usb 5-1: config 0 descriptor?? [ 83.499650][ T30] hub 5-1:0.0: bad descriptor, ignoring hub [ 83.499681][ T30] hub 5-1:0.0: probe with driver hub failed with error -5 [ 83.509548][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.509567][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.870360][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.979169][ T5713] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 83.979169][ T5713] Please contact the netfilter-devel mailing list or update your nftables rules. [ 84.021769][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 84.023574][ T30] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.023607][ T30] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 84.023645][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.026763][ T30] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 84.026790][ T30] usb 3-1: Product: syz [ 84.026804][ T30] usb 3-1: Manufacturer: syz [ 84.026817][ T30] usb 3-1: SerialNumber: syz [ 84.104580][ T30] usb 3-1: config 0 descriptor?? [ 84.106157][ T5722] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.146817][ T30] usb 3-1: selecting invalid altsetting 0 [ 84.206306][ T5727] bridge_slave_0: default FDB implementation only supports local addresses [ 84.221789][ T5734] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.280523][ T5732] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.380406][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 84.381296][ T5738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.381563][ T5734] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 84.383033][ T5734] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 84.383057][ T5734] usb 1-1: config 0 has no interface number 0 [ 84.383096][ T5734] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.383115][ T5734] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 84.383138][ T5734] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 84.383160][ T5734] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 84.383182][ T5734] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.387510][ T5738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.494697][ T5732] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 84.514110][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.514138][ T5734] usb 1-1: Product: syz [ 84.514183][ T5734] usb 1-1: Manufacturer: syz [ 84.514197][ T5734] usb 1-1: SerialNumber: syz [ 84.533539][ T5732] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.533569][ T5732] usb 4-1: config 0 has no interface number 0 [ 84.564371][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.564399][ T5732] usb 4-1: Product: syz [ 84.564413][ T5732] usb 4-1: Manufacturer: syz [ 84.564426][ T5732] usb 4-1: SerialNumber: syz [ 84.610765][ T5734] usb 1-1: config 0 descriptor?? [ 84.660019][ T5732] usb 4-1: config 0 descriptor?? [ 84.862309][ T5722] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 84.939762][ T5734] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 84.960326][ T5732] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 84.997899][ T5732] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 85.014976][ T5732] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 85.015050][ T5732] usb 4-1: media controller created [ 85.064078][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.103390][ T5721] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 85.124941][ T5704] usb 3-1: USB disconnect, device number 2 [ 85.461476][ T5618] Bluetooth: hci4: command tx timeout [ 85.461517][ T5618] Bluetooth: hci3: command tx timeout [ 85.461542][ T5618] Bluetooth: hci0: command tx timeout [ 85.461711][ T5620] Bluetooth: hci2: command tx timeout [ 85.550872][ T5620] Bluetooth: hci1: command tx timeout [ 86.047597][ T5746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'. [ 86.177252][ C0] iowarrior 1-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 86.190459][ T30] usb 1-1: USB disconnect, device number 2 [ 86.263066][ T5732] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 86.273708][ T5735] usb 4-1: dvb_usb_ec168: I2C read not implemented [ 86.403907][ T5732] usb 4-1: USB disconnect, device number 2 [ 86.637554][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 86.815806][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 86.829265][ T944] cfg80211: failed to load regulatory.db [ 86.961422][ T5613] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.030644][ T974] usb 5-1: USB disconnect, device number 2 [ 87.056746][ T5761] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 87.111865][ T5613] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 87.114064][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.122456][ T5762] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.135830][ T5613] usb 3-1: config 0 descriptor?? [ 87.214125][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.214672][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.313975][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 87.330891][ T1848] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.406615][ T5613] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 87.413938][ T5613] [drm:udl_init] *ERROR* Selecting channel failed [ 87.494086][ T1848] usb 4-1: Using ep0 maxpacket: 16 [ 87.496102][ T1848] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 87.501796][ T1848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.501839][ T1848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.521624][ T1848] usb 4-1: config 0 descriptor?? [ 87.583448][ T5781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 87.583473][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 87.604058][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 87.635974][ T5613] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 87.636002][ T5613] [drm] Initialized udl on minor 1 [ 87.675703][ T5613] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 87.678713][ T5684] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 87.681958][ T5613] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 87.690036][ T5684] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 87.706899][ T5613] usb 3-1: USB disconnect, device number 3 [ 87.708303][ T5684] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 87.741612][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.742997][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.897595][ T1848] usbhid 4-1:0.0: can't add hid device: -71 [ 87.897815][ T1848] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.918468][ T1848] usb 4-1: USB disconnect, device number 3 [ 87.954056][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.974862][ T5775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.107951][ T5788] Zero length message leads to an empty skb [ 88.255172][ T5785] syzkaller0: entered promiscuous mode [ 88.255194][ T5785] syzkaller0: entered allmulticast mode [ 88.257040][ T5786] tipc: Started in network mode [ 88.257068][ T5786] tipc: Node identity faf665e862d7, cluster identity 4711 [ 88.257278][ T5786] tipc: Enabled bearer , priority 0 [ 88.267132][ T5777] tipc: Resetting bearer [ 88.304156][ T5777] tipc: Disabling bearer [ 88.380309][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.393419][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.400711][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.400752][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.446716][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 88.651427][ T5804] syzkaller0: entered promiscuous mode [ 88.651452][ T5804] syzkaller0: entered allmulticast mode [ 88.657457][ T5804] tipc: Started in network mode [ 88.657490][ T5804] tipc: Node identity 6ec9703b06cc, cluster identity 4711 [ 88.658215][ T5804] tipc: Enabled bearer , priority 0 [ 88.694758][ T5801] tipc: Resetting bearer [ 88.739810][ T5801] tipc: Disabling bearer [ 89.036368][ T5815] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 89.369637][ T5825] mmap: syz.3.31 (5825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.582468][ T5684] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 89.711762][ T5684] usb 4-1: device descriptor read/64, error -71 [ 89.954910][ T5684] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 90.081370][ T5684] usb 4-1: device descriptor read/64, error -71 [ 90.192128][ T5684] usb usb4-port1: attempt power cycle [ 90.330258][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.481004][ T30] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 90.487752][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.487785][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 90.527113][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.527141][ T30] usb 5-1: Product: syz [ 90.527154][ T30] usb 5-1: Manufacturer: syz [ 90.527168][ T30] usb 5-1: SerialNumber: syz [ 90.544233][ T5684] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 90.566205][ T5684] usb 4-1: device descriptor read/8, error -71 [ 90.657500][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 90.788155][ T30] kaweth 5-1:1.0: Firmware present in device. [ 90.801466][ T5684] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 90.831230][ T5684] usb 4-1: device descriptor read/8, error -71 [ 90.941758][ T5684] usb usb4-port1: unable to enumerate USB device [ 90.977120][ T30] kaweth 5-1:1.0: Statistics collection: 0 [ 90.977146][ T30] kaweth 5-1:1.0: Multicast filter limit: 0 [ 90.977160][ T30] kaweth 5-1:1.0: MTU: 0 [ 90.977172][ T30] kaweth 5-1:1.0: Read MAC address 00:00:00:00:00:00 [ 91.632157][ T30] kaweth 5-1:1.0: kaweth interface created at eth1 [ 91.820738][ T5684] usb 5-1: USB disconnect, device number 3 [ 92.120959][ T5898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.668549][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 92.974484][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 92.974508][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 93.124038][ T5926] syzkaller0: entered promiscuous mode [ 93.124064][ T5926] syzkaller0: entered allmulticast mode [ 93.143498][ T5926] tipc: Started in network mode [ 93.143529][ T5926] tipc: Node identity e630e0085022, cluster identity 4711 [ 93.144524][ T5926] tipc: Enabled bearer , priority 0 [ 93.172253][ T5925] tipc: Resetting bearer [ 93.267862][ T5925] tipc: Disabling bearer [ 93.501193][ T5705] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.617923][ T5944] FAULT_INJECTION: forcing a failure. [ 93.617923][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.617962][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.1.67 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.617988][ T5944] Tainted: [L]=SOFTLOCKUP [ 93.617995][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.618006][ T5944] Call Trace: [ 93.618015][ T5944] [ 93.618024][ T5944] dump_stack_lvl+0xe8/0x150 [ 93.618062][ T5944] should_fail_ex+0x410/0x560 [ 93.618093][ T5944] _copy_from_user+0x2d/0xb0 [ 93.618119][ T5944] __mfill_atomic_pte+0x1c4/0x610 [ 93.618143][ T5944] ? mm_alloc_pmd+0x246/0x400 [ 93.618175][ T5944] mfill_atomic_copy+0x4c6/0x14b0 [ 93.618214][ T5944] ? lock_acquire+0x115/0x350 [ 93.618251][ T5944] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 93.618291][ T5944] userfaultfd_copy+0x413/0x7e0 [ 93.618326][ T5944] ? __pfx_userfaultfd_copy+0x10/0x10 [ 93.618350][ T5944] ? hook_file_ioctl+0x1f2/0x600 [ 93.618397][ T5944] userfaultfd_ioctl+0x49a/0x560 [ 93.618422][ T5944] ? __fget_files+0x2a/0x420 [ 93.618450][ T5944] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 93.618474][ T5944] ? __fget_files+0x2a/0x420 [ 93.618497][ T5944] ? __fget_files+0x3a2/0x420 [ 93.618521][ T5944] ? __fget_files+0x2a/0x420 [ 93.618547][ T5944] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.618574][ T5944] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 93.618600][ T5944] __se_sys_ioctl+0xfc/0x170 [ 93.618623][ T5944] do_syscall_64+0x166/0x520 [ 93.618644][ T5944] ? trace_irq_disable+0x3b/0x140 [ 93.618663][ T5944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.618685][ T5944] ? clear_bhb_loop+0x70/0xc0 [ 93.618710][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.618730][ T5944] RIP: 0033:0x7fa5ab59e159 [ 93.618747][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.618761][ T5944] RSP: 002b:00007fa5ac4b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.618784][ T5944] RAX: ffffffffffffffda RBX: 00007fa5ab825fa0 RCX: 00007fa5ab59e159 [ 93.618807][ T5944] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 93.618819][ T5944] RBP: 00007fa5ac4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 93.618828][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.618837][ T5944] R13: 00007fa5ab826038 R14: 00007fa5ab825fa0 R15: 00007fa5ab94fa48 [ 93.618866][ T5944] [ 93.627821][ T5940] netlink: 96 bytes leftover after parsing attributes in process `syz.0.66'. [ 93.669857][ T5705] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 93.675190][ T5705] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 93.675214][ T5705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.694496][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.694521][ T5705] usb 3-1: Product: syz [ 93.694534][ T5705] usb 3-1: Manufacturer: syz [ 93.694546][ T5705] usb 3-1: SerialNumber: syz [ 93.831668][ T5705] usb 3-1: 0:1 : does not exist [ 93.870304][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.945911][ T5705] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 93.955261][ T5705] usb 3-1: unit 13 not found! [ 93.994574][ T5950] syzkaller0: entered promiscuous mode [ 93.994597][ T5950] syzkaller0: entered allmulticast mode [ 94.025718][ T30] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.030258][ T30] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.030299][ T30] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.030334][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.089237][ T5950] tipc: Enabled bearer , priority 0 [ 94.091721][ T5940] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 94.105713][ T5949] tipc: Resetting bearer [ 94.195792][ T5949] tipc: Disabling bearer [ 94.197297][ T30] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.219320][ T5705] usb 3-1: USB disconnect, device number 4 [ 94.402419][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 94.623512][ T5736] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 94.756275][ T5970] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 94.756842][ T30] usb 1-1: USB disconnect, device number 3 [ 94.770283][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 94.771441][ T5736] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 94.774224][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.828039][ T5736] usb 4-1: config 0 descriptor?? [ 94.958610][ T5736] as10x_usb: device has been detected [ 94.978416][ T5736] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 95.123929][ T5736] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 95.237031][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.458871][ T5736] as10x_usb: error during firmware upload part1 [ 95.469476][ T5736] Registered device nBox DVB-T Dongle [ 95.652477][ T5684] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.790268][ T5684] usb 2-1: device descriptor read/64, error -71 [ 95.820905][ T944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.984119][ T944] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.984176][ T944] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 95.988591][ T944] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.988618][ T944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.988664][ T944] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.043477][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 96.043506][ T944] usb 3-1: Product: syz [ 96.043519][ T944] usb 3-1: Manufacturer: syz [ 96.053227][ T5684] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.085053][ T944] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 96.200282][ T5684] usb 2-1: device descriptor read/64, error -71 [ 96.286615][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 96.287165][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 96.287774][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 96.288312][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 96.289715][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 96.298295][ T30] usb 4-1: USB disconnect, device number 8 [ 96.313784][ T5684] usb usb2-port1: attempt power cycle [ 96.358365][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 96.359136][ T944] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 96.359619][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 96.360128][ T944] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 96.370649][ T5613] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.380793][ T944] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 96.415142][ T30] Unregistered device nBox DVB-T Dongle [ 96.432233][ T30] as10x_usb: device has been disconnected [ 96.461579][ T944] usb 3-1: USB disconnect, device number 5 [ 96.569587][ T5613] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.569643][ T5613] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 96.588880][ T5613] usb 1-1: config 0 has an invalid interface number: 59 but max is 2 [ 96.588908][ T5613] usb 1-1: config 0 has an invalid interface number: 59 but max is 2 [ 96.588926][ T5613] usb 1-1: config 0 has an invalid interface number: 56 but max is 2 [ 96.588944][ T5613] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 96.588963][ T5613] usb 1-1: config 0 has no interface number 0 [ 96.588979][ T5613] usb 1-1: config 0 has no interface number 1 [ 96.589046][ T5613] usb 1-1: config 0 interface 59 has no altsetting 0 [ 96.589063][ T5613] usb 1-1: config 0 interface 59 has no altsetting 1 [ 96.590516][ T5613] usb 1-1: config 0 interface 56 has no altsetting 0 [ 96.669835][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.669882][ T5613] usb 1-1: Product: syz [ 96.669896][ T5613] usb 1-1: Manufacturer: syz [ 96.669910][ T5613] usb 1-1: SerialNumber: syz [ 96.699257][ T5613] usb 1-1: config 0 descriptor?? [ 96.720325][ T5684] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.743609][ T5684] usb 2-1: device descriptor read/8, error -71 [ 96.900278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 96.956502][ T5613] rndis_host 1-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 96.957363][ T5613] cdc_acm 1-1:0.59: Zero length descriptor references [ 96.957390][ T5613] cdc_acm 1-1:0.59: probe with driver cdc_acm failed with error -22 [ 97.000487][ T5684] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.037784][ T5684] usb 2-1: device descriptor read/8, error -71 [ 97.038307][ T5613] usb 1-1: USB disconnect, device number 4 [ 97.141360][ T5684] usb usb2-port1: unable to enumerate USB device [ 97.237383][ T31] audit: type=1326 audit(1790132538.009:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.237441][ T31] audit: type=1326 audit(1790132538.009:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.239054][ T31] audit: type=1326 audit(1790132538.009:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.239104][ T31] audit: type=1326 audit(1790132538.009:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.239145][ T31] audit: type=1326 audit(1790132538.009:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.239187][ T31] audit: type=1326 audit(1790132538.009:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.239230][ T31] audit: type=1326 audit(1790132538.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.307156][ T31] audit: type=1326 audit(1790132538.009:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.307205][ T31] audit: type=1326 audit(1790132538.079:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.307256][ T31] audit: type=1326 audit(1790132538.079:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.2.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272ed9e159 code=0x7ffc0000 [ 97.413842][ T6000] bridge0: port 3(vlan2) entered blocking state [ 97.416941][ T6000] bridge0: port 3(vlan2) entered disabled state [ 97.419427][ T6000] vlan2: entered allmulticast mode [ 97.419444][ T6000] syz_tun: entered allmulticast mode [ 97.432711][ T6000] vlan2: entered promiscuous mode [ 97.432730][ T6000] syz_tun: entered promiscuous mode [ 97.440876][ T6000] bridge0: port 3(vlan2) entered blocking state [ 97.441029][ T6000] bridge0: port 3(vlan2) entered forwarding state [ 97.955798][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.561576][ T5684] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.646773][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 98.710378][ T5684] usb 3-1: Using ep0 maxpacket: 16 [ 98.711182][ T5684] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.713420][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.715852][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.715878][ T5684] usb 3-1: Product: syz [ 98.715892][ T5684] usb 3-1: Manufacturer: syz [ 98.715906][ T5684] usb 3-1: SerialNumber: syz [ 98.775411][ T5684] usb 3-1: config 0 descriptor?? [ 98.780082][ T5684] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.780104][ T5684] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 99.243549][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 99.392334][ T5684] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.415277][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'. [ 99.548675][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 99.833840][ T5684] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.833877][ T5684] em28xx 3-1:0.0: board has no eeprom [ 99.920301][ T5684] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 99.920333][ T5684] em28xx 3-1:0.0: dvb set to bulk mode. [ 99.925696][ T5613] em28xx 3-1:0.0: Binding DVB extension [ 99.957719][ T5684] usb 3-1: USB disconnect, device number 6 [ 99.959612][ T5684] em28xx 3-1:0.0: Disconnecting em28xx [ 100.195573][ T5613] em28xx 3-1:0.0: Registering input extension [ 100.199074][ T5684] em28xx 3-1:0.0: Closing input extension [ 100.272643][ T5684] em28xx: Freeing device [ 100.698426][ T6081] syzkaller0: entered promiscuous mode [ 100.698450][ T6081] syzkaller0: entered allmulticast mode [ 100.715513][ T6087] FAULT_INJECTION: forcing a failure. [ 100.715513][ T6087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.715539][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: syz.1.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.715555][ T6087] Tainted: [L]=SOFTLOCKUP [ 100.715560][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.715566][ T6087] Call Trace: [ 100.715572][ T6087] [ 100.715577][ T6087] dump_stack_lvl+0xe8/0x150 [ 100.715598][ T6087] should_fail_ex+0x410/0x560 [ 100.715615][ T6087] _copy_from_user+0x2d/0xb0 [ 100.715630][ T6087] __mfill_atomic_pte+0x1c4/0x610 [ 100.715644][ T6087] ? mm_alloc_pmd+0x246/0x400 [ 100.715663][ T6087] mfill_atomic_copy+0x4c6/0x14b0 [ 100.715685][ T6087] ? lock_acquire+0x115/0x350 [ 100.715704][ T6087] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 100.715727][ T6087] userfaultfd_copy+0x413/0x7e0 [ 100.715746][ T6087] ? __pfx_userfaultfd_copy+0x10/0x10 [ 100.715760][ T6087] ? hook_file_ioctl+0x1f2/0x600 [ 100.715785][ T6087] userfaultfd_ioctl+0x49a/0x560 [ 100.715800][ T6087] ? __fget_files+0x2a/0x420 [ 100.715819][ T6087] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 100.715833][ T6087] ? __fget_files+0x2a/0x420 [ 100.715847][ T6087] ? __fget_files+0x3a2/0x420 [ 100.715861][ T6087] ? __fget_files+0x2a/0x420 [ 100.715877][ T6087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 100.715893][ T6087] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 100.715908][ T6087] __se_sys_ioctl+0xfc/0x170 [ 100.715927][ T6087] do_syscall_64+0x166/0x520 [ 100.715941][ T6087] ? trace_irq_disable+0x3b/0x140 [ 100.715952][ T6087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.715964][ T6087] ? clear_bhb_loop+0x70/0xc0 [ 100.715978][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.715989][ T6087] RIP: 0033:0x7fa5ab59e159 [ 100.716001][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.716010][ T6087] RSP: 002b:00007fa5ac4b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.716024][ T6087] RAX: ffffffffffffffda RBX: 00007fa5ab825fa0 RCX: 00007fa5ab59e159 [ 100.716033][ T6087] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 100.716040][ T6087] RBP: 00007fa5ac4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 100.716047][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.716054][ T6087] R13: 00007fa5ab826038 R14: 00007fa5ab825fa0 R15: 00007fa5ab94fa48 [ 100.716073][ T6087] [ 100.908090][ T6081] tipc: Enabled bearer , priority 0 [ 100.927648][ T6079] tipc: Resetting bearer [ 100.975913][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.113'. [ 101.085504][ T6079] tipc: Disabling bearer [ 101.407523][ T6093] syzkaller0: entered promiscuous mode [ 101.407540][ T6093] syzkaller0: entered allmulticast mode [ 101.437923][ T6093] tipc: Started in network mode [ 101.437958][ T6093] tipc: Node identity 1e868f6c8e5e, cluster identity 4711 [ 101.457312][ T6093] tipc: Enabled bearer , priority 0 [ 101.478850][ T6092] tipc: Resetting bearer [ 101.557102][ T6092] tipc: Disabling bearer [ 101.782565][ T6100] process 'syz.2.117' launched './file0' with NULL argv: empty string added [ 101.887535][ T6104] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 102.083336][ T6104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.083653][ T6108] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 102.110662][ T30] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.267115][ T30] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 102.272075][ T30] usb 2-1: config index 0 descriptor too short (expected 45, got 32) [ 102.272100][ T30] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 102.272140][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.285747][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.285771][ T30] usb 2-1: Product: syz [ 102.285784][ T30] usb 2-1: Manufacturer: syz [ 102.285796][ T30] usb 2-1: SerialNumber: syz [ 102.597928][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 102.610894][ T5705] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.660419][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.771189][ T5705] usb 3-1: New USB device found, idVendor=052b, idProduct=1807, bcdDevice= 1.00 [ 102.773581][ T5705] usb 3-1: config 4 has an invalid interface number: 176 but max is 2 [ 102.773597][ T5705] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 102.773607][ T5705] usb 3-1: config 4 has an invalid interface number: 149 but max is 2 [ 102.773625][ T5705] usb 3-1: config 4 has an invalid interface number: 182 but max is 2 [ 102.773636][ T5705] usb 3-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 102.773645][ T5705] usb 3-1: config 4 has no interface number 0 [ 102.773654][ T5705] usb 3-1: config 4 has no interface number 1 [ 102.773662][ T5705] usb 3-1: config 4 has no interface number 2 [ 102.773696][ T5705] usb 3-1: config 4 interface 176 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 102.773725][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 102.773737][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 102.773749][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 102.773761][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 102.773772][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 102.773784][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 102.773801][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 102.773820][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 102.773835][ T5705] usb 3-1: config 4 interface 149 altsetting 128 endpoint 0x8E has invalid maxpacket 6677, setting to 64 [ 102.773849][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 102.773859][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 102.773875][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 102.773894][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 102.773913][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has an endpoint descriptor with address 0x62, changing to 0x2 [ 102.773927][ T5705] usb 3-1: config 4 interface 149 altsetting 128 endpoint 0x2 has an invalid bInterval 204, changing to 11 [ 102.773940][ T5705] usb 3-1: config 4 interface 149 altsetting 128 endpoint 0x2 has invalid maxpacket 24930, setting to 1024 [ 102.773954][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 102.774028][ T5705] usb 3-1: config 4 interface 149 altsetting 128 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 102.774051][ T5705] usb 3-1: config 4 interface 182 altsetting 251 has a duplicate endpoint with address 0xC, skipping [ 102.774062][ T5705] usb 3-1: config 4 interface 182 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.774076][ T5705] usb 3-1: config 4 interface 176 has no altsetting 0 [ 102.774085][ T5705] usb 3-1: config 4 interface 149 has no altsetting 0 [ 102.774095][ T5705] usb 3-1: config 4 interface 182 has no altsetting 0 [ 102.782216][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.782239][ T5705] usb 3-1: Product: 乢碚緙龩㠍聴฼顜Ȣ돆ౠ㥓ਦ縷询겓ᗨ紡쨄ᲄ䫄ꘃ㰗ꞽἲ刡ꁇ頻䢤왷엿餤ꂠ購筫蓘拻톆噙윏ᬼ㢘틎˯Պ㼲襸ન綬⽎粰캇 [ 102.782267][ T5705] usb 3-1: Manufacturer: ⫼᠕﨧렖鼍㪥▼夝㷃웁㻋鈏ꬩฺᵱ䆦ć셧鲠ཱུ̧⾾ꈒ꧶挻≌ﬦ磗䨗婥젯껤∻葁麯獁 [ 102.782284][ T5705] usb 3-1: SerialNumber: 豱᱿㿶࿐똾┆Ꟗꓯ뢞뫥쁄傫ƭ㿓ㆻ尀䆡튘ﱚ鼀刓㦍쵩燜婀搘ồ᫘饋꣝驪ီ衧ᭀꙔ닙暅헙ꐠ놡阝醠ꨈ㥊 [ 102.807588][ T5705] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 102.807616][ T5705] usb 3-1: no configuration chosen from 1 choice [ 102.810312][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 102.813349][ T30] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.818164][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.823279][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.823302][ T30] usb 1-1: Product: syz [ 102.823314][ T30] usb 1-1: Manufacturer: syz [ 102.823326][ T30] usb 1-1: SerialNumber: syz [ 102.856950][ T30] usb 1-1: config 0 descriptor?? [ 102.883133][ T30] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.883164][ T30] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 102.960292][ T5732] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.090353][ T5732] usb 4-1: device descriptor read/64, error -71 [ 103.332454][ T5732] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 103.462300][ T5732] usb 4-1: device descriptor read/64, error -71 [ 103.514967][ T30] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 103.572698][ T5732] usb usb4-port1: attempt power cycle [ 103.910687][ T5732] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 103.929838][ T30] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 103.929869][ T30] em28xx 1-1:0.0: board has no eeprom [ 103.939260][ T5732] usb 4-1: device descriptor read/8, error -71 [ 104.010880][ T30] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 104.010911][ T30] em28xx 1-1:0.0: dvb set to bulk mode. [ 104.011266][ T974] em28xx 1-1:0.0: Binding DVB extension [ 104.038043][ T30] usb 1-1: USB disconnect, device number 5 [ 104.048661][ T30] em28xx 1-1:0.0: Disconnecting em28xx [ 104.119209][ T974] em28xx 1-1:0.0: Registering input extension [ 104.121306][ T30] em28xx 1-1:0.0: Closing input extension [ 104.139617][ T30] em28xx: Freeing device [ 104.170810][ T5732] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 104.192090][ T5732] usb 4-1: device descriptor read/8, error -71 [ 104.302093][ T5732] usb usb4-port1: unable to enumerate USB device [ 104.352936][ T6149] netlink: 68 bytes leftover after parsing attributes in process `syz.1.119'. [ 104.352956][ T6149] tipc: Enabling of bearer rejected, media not registered [ 104.353659][ T6149] xt_LOG: level 64 >= 8 [ 104.420870][ T944] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.572197][ T944] usb 5-1: Using ep0 maxpacket: 16 [ 104.575048][ T944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.575100][ T944] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 104.577123][ T944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.577139][ T944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.583341][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.583364][ T944] usb 5-1: Product: syz [ 104.583376][ T944] usb 5-1: Manufacturer: syz [ 104.583388][ T944] usb 5-1: SerialNumber: syz [ 104.850371][ T5684] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.002396][ T5684] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 105.003507][ T5684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.003534][ T5684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.003578][ T5684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.003601][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.008080][ T6155] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 105.197327][ T30] usb 3-1: USB disconnect, device number 7 [ 105.324184][ T5684] usb 1-1: USB disconnect, device number 6 [ 105.324711][ T5620] Bluetooth: hci5: Reading Intel version command failed (-71) [ 105.483842][ T5613] usb 2-1: USB disconnect, device number 6 [ 105.485695][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 105.904352][ T6171] netlink: 56 bytes leftover after parsing attributes in process `syz.3.142'. [ 106.355788][ T6178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.460315][ T5613] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.611322][ T5613] usb 1-1: Using ep0 maxpacket: 16 [ 106.613169][ T5613] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.615746][ T5613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.651065][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.669430][ T5613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.669459][ T5613] usb 1-1: Product: syz [ 106.669471][ T5613] usb 1-1: Manufacturer: syz [ 106.669484][ T5613] usb 1-1: SerialNumber: syz [ 106.700454][ T5613] usb 1-1: config 0 descriptor?? [ 106.732867][ T5613] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.732905][ T5613] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 106.810270][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 106.811509][ T10] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 106.814768][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.814823][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 106.814886][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 59391, setting to 1024 [ 106.814914][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.820035][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.820059][ T10] usb 3-1: Product: syz [ 106.820073][ T10] usb 3-1: Manufacturer: syz [ 106.820086][ T10] usb 3-1: SerialNumber: syz [ 106.924844][ T6188] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.230311][ T944] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 107.230420][ T944] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 107.323515][ T5613] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.411581][ T944] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.432044][ T944] usb 5-1: USB disconnect, device number 4 [ 107.476591][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 107.534856][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.554891][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 107.792617][ T5613] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.792651][ T5613] em28xx 1-1:0.0: board has no eeprom [ 107.870444][ T5613] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.870475][ T5613] em28xx 1-1:0.0: dvb set to bulk mode. [ 107.872034][ T944] em28xx 1-1:0.0: Binding DVB extension [ 107.904521][ T5613] usb 1-1: USB disconnect, device number 7 [ 107.908699][ T5613] em28xx 1-1:0.0: Disconnecting em28xx [ 107.958705][ T6224] FAULT_INJECTION: forcing a failure. [ 107.958705][ T6224] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.958750][ T6224] CPU: 1 UID: 0 PID: 6224 Comm: syz.3.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.958778][ T6224] Tainted: [L]=SOFTLOCKUP [ 107.958785][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.958797][ T6224] Call Trace: [ 107.958805][ T6224] [ 107.958814][ T6224] dump_stack_lvl+0xe8/0x150 [ 107.958848][ T6224] should_fail_ex+0x410/0x560 [ 107.958877][ T6224] prepare_alloc_pages+0x223/0x600 [ 107.958906][ T6224] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 107.958933][ T6224] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.958959][ T6224] ? __pfx_policy_nodemask+0x10/0x10 [ 107.958993][ T6224] alloc_pages_mpol+0x21e/0x390 [ 107.959025][ T6224] folio_alloc_mpol_noprof+0x39/0x160 [ 107.959053][ T6224] vma_alloc_folio_noprof+0xe1/0x1e0 [ 107.959081][ T6224] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 107.959107][ T6224] ? __pfx_mfill_atomic_install_pte+0x10/0x10 [ 107.959144][ T6224] ? __pfx_anon_alloc_folio+0x10/0x10 [ 107.959171][ T6224] anon_alloc_folio+0x27/0x160 [ 107.959199][ T6224] ? __pfx_anon_alloc_folio+0x10/0x10 [ 107.959226][ T6224] __mfill_atomic_pte+0xe0/0x610 [ 107.959247][ T6224] ? mm_alloc_pmd+0x246/0x400 [ 107.959278][ T6224] mfill_atomic_copy+0x4c6/0x14b0 [ 107.959318][ T6224] ? lock_acquire+0x115/0x350 [ 107.959353][ T6224] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 107.959394][ T6224] userfaultfd_copy+0x413/0x7e0 [ 107.959428][ T6224] ? __pfx_userfaultfd_copy+0x10/0x10 [ 107.959453][ T6224] ? hook_file_ioctl+0x1f2/0x600 [ 107.959501][ T6224] userfaultfd_ioctl+0x49a/0x560 [ 107.959527][ T6224] ? __fget_files+0x2a/0x420 [ 107.959554][ T6224] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 107.959578][ T6224] ? __fget_files+0x2a/0x420 [ 107.959603][ T6224] ? __fget_files+0x3a2/0x420 [ 107.959627][ T6224] ? __fget_files+0x2a/0x420 [ 107.959656][ T6224] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.959683][ T6224] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 107.959709][ T6224] __se_sys_ioctl+0xfc/0x170 [ 107.959740][ T6224] do_syscall_64+0x166/0x520 [ 107.959765][ T6224] ? trace_irq_disable+0x3b/0x140 [ 107.959785][ T6224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.959805][ T6224] ? clear_bhb_loop+0x70/0xc0 [ 107.959830][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.959847][ T6224] RIP: 0033:0x7efc14d9e159 [ 107.959867][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.959882][ T6224] RSP: 002b:00007efc15bbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.959904][ T6224] RAX: ffffffffffffffda RBX: 00007efc15025fa0 RCX: 00007efc14d9e159 [ 107.959918][ T6224] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 107.959930][ T6224] RBP: 00007efc15bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 107.959942][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.959954][ T6224] R13: 00007efc15026038 R14: 00007efc15025fa0 R15: 00007efc1514fa48 [ 107.959986][ T6224] [ 108.307793][ T944] em28xx 1-1:0.0: Registering input extension [ 108.308113][ T5613] em28xx 1-1:0.0: Closing input extension [ 108.402227][ T6231] syzkaller0: entered promiscuous mode [ 108.402246][ T6231] syzkaller0: entered allmulticast mode [ 108.428302][ T6231] tipc: Enabled bearer , priority 0 [ 108.443920][ T6230] tipc: Resetting bearer [ 108.457234][ T5613] em28xx: Freeing device [ 108.565119][ T6230] tipc: Disabling bearer [ 108.679615][ T944] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.712888][ T944] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.996057][ T6240] fido_id[6240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.016458][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 109.154973][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 109.155009][ T6246] netlink: 'syz.4.162': attribute type 20 has an invalid length. [ 109.155024][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 109.231552][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.280538][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.281740][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.281788][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.281820][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.383412][ T10] usb 3-1: USB disconnect, device number 8 [ 109.442659][ T6251] syzkaller0: entered promiscuous mode [ 109.442684][ T6251] syzkaller0: entered allmulticast mode [ 109.488530][ T6251] tipc: Enabled bearer , priority 0 [ 109.498309][ T6250] tipc: Resetting bearer [ 109.591848][ T6256] netlink: 'syz.1.165': attribute type 2 has an invalid length. [ 109.617641][ T6250] tipc: Disabling bearer [ 109.634891][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.842701][ T6268] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 109.870457][ T974] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.876802][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.889186][ T6268] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 110.023184][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 110.030415][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 110.031454][ T974] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.034854][ T974] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 110.034891][ T974] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 110.034927][ T974] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 110.034949][ T974] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 110.034971][ T974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.037292][ T974] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.037312][ T974] usb 5-1: Product: syz [ 110.037324][ T974] usb 5-1: Manufacturer: syz [ 110.037335][ T974] usb 5-1: SerialNumber: syz [ 110.039323][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.146898][ T974] usb 5-1: config 0 descriptor?? [ 110.165551][ T974] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.185711][ T974] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.240273][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 110.241159][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.242826][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.248287][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.248312][ T10] usb 3-1: Product: syz [ 110.248327][ T10] usb 3-1: Manufacturer: syz [ 110.248341][ T10] usb 3-1: SerialNumber: syz [ 110.315455][ T10] usb 3-1: config 0 descriptor?? [ 110.330005][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.330042][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 110.444462][ T6280] macvlan0: entered promiscuous mode [ 110.681914][ T974] usb 5-1: USB disconnect, device number 5 [ 110.682002][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 110.714378][ T6259] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 110.714737][ T6280] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 110.727406][ T974] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 110.955166][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 110.976984][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.367557][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 111.430845][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 111.430876][ T10] em28xx 3-1:0.0: board has no eeprom [ 111.513101][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 111.513131][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 111.515439][ T944] em28xx 3-1:0.0: Binding DVB extension [ 111.573049][ T10] usb 3-1: USB disconnect, device number 9 [ 111.590941][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 111.689288][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.689313][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.762650][ T944] em28xx 3-1:0.0: Registering input extension [ 111.762872][ T10] em28xx 3-1:0.0: Closing input extension [ 111.786669][ T10] em28xx: Freeing device [ 112.620723][ T5732] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.750971][ T5732] usb 1-1: device descriptor read/64, error -71 [ 112.911222][ T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.002710][ T6353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'. [ 113.020287][ T5732] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.040527][ T974] usb 5-1: device descriptor read/64, error -71 [ 113.075194][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 113.075210][ T6358] netlink: 204 bytes leftover after parsing attributes in process `syz.1.204'. [ 113.161110][ T5732] usb 1-1: device descriptor read/64, error -71 [ 113.192323][ T30] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 113.314293][ T5732] usb usb1-port1: attempt power cycle [ 113.418295][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 113.435805][ T30] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.443290][ T974] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.470268][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.472437][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.553609][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.553637][ T30] usb 4-1: Product: syz [ 113.553652][ T30] usb 4-1: Manufacturer: syz [ 113.553666][ T30] usb 4-1: SerialNumber: syz [ 113.568071][ T30] usb 4-1: config 0 descriptor?? [ 113.600370][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.607694][ T30] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.607726][ T30] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 113.822917][ T974] usb 5-1: device descriptor read/64, error -71 [ 113.840274][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.892876][ T5732] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.971326][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.985959][ T5732] usb 1-1: device descriptor read/8, error -71 [ 114.008796][ T6370] FAULT_INJECTION: forcing a failure. [ 114.008796][ T6370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.008834][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.2.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.008860][ T6370] Tainted: [L]=SOFTLOCKUP [ 114.008867][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.008878][ T6370] Call Trace: [ 114.008886][ T6370] [ 114.008896][ T6370] dump_stack_lvl+0xe8/0x150 [ 114.008932][ T6370] should_fail_ex+0x410/0x560 [ 114.008962][ T6370] _copy_from_user+0x2d/0xb0 [ 114.008988][ T6370] __mfill_atomic_pte+0x1c4/0x610 [ 114.009012][ T6370] ? mm_alloc_pmd+0x246/0x400 [ 114.009045][ T6370] mfill_atomic_copy+0x4c6/0x14b0 [ 114.009085][ T6370] ? lock_acquire+0x115/0x350 [ 114.009122][ T6370] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 114.009163][ T6370] userfaultfd_copy+0x413/0x7e0 [ 114.009208][ T6370] ? __pfx_userfaultfd_copy+0x10/0x10 [ 114.009234][ T6370] ? hook_file_ioctl+0x1f2/0x600 [ 114.009280][ T6370] userfaultfd_ioctl+0x49a/0x560 [ 114.009306][ T6370] ? __fget_files+0x2a/0x420 [ 114.009335][ T6370] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 114.009361][ T6370] ? __fget_files+0x2a/0x420 [ 114.009385][ T6370] ? __fget_files+0x3a2/0x420 [ 114.009410][ T6370] ? __fget_files+0x2a/0x420 [ 114.009440][ T6370] ? bpf_lsm_file_ioctl+0x9/0x20 [ 114.009468][ T6370] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 114.009496][ T6370] __se_sys_ioctl+0xfc/0x170 [ 114.009520][ T6370] do_syscall_64+0x166/0x520 [ 114.009545][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.009565][ T6370] ? clear_bhb_loop+0x70/0xc0 [ 114.009589][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.009608][ T6370] RIP: 0033:0x7f272ed9e159 [ 114.009628][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.009644][ T6370] RSP: 002b:00007f272fc3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.009666][ T6370] RAX: ffffffffffffffda RBX: 00007f272f025fa0 RCX: 00007f272ed9e159 [ 114.009680][ T6370] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000004 [ 114.009692][ T6370] RBP: 00007f272fc3a090 R08: 0000000000000000 R09: 0000000000000000 [ 114.009703][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.009715][ T6370] R13: 00007f272f026038 R14: 00007f272f025fa0 R15: 00007f272f14fa48 [ 114.009749][ T6370] [ 114.087993][ T10] usb usb2-port1: attempt power cycle [ 114.177507][ T974] usb usb5-port1: attempt power cycle [ 114.639967][ T30] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 114.810044][ T5732] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.183958][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.383240][ T10] usb 2-1: device descriptor read/8, error -71 [ 116.957883][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.018619][ C1] sched: DL replenish lagged too much [ 122.752717][ T10] usb 2-1: device descriptor read/8, error -110 [ 122.766122][ T5732] usb 1-1: device descriptor read/8, error -110 [ 122.902445][ T10] usb usb2-port1: unable to enumerate USB device [ 124.715397][ T5732] usb usb1-port1: unable to enumerate USB device [ 133.948566][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.957199][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.977359][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.985904][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.843284][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 204.843333][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 204.843362][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 204.843387][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 204.843412][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 209.459088][ T30] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 209.459124][ T30] em28xx 4-1:0.0: board has no eeprom [ 256.682567][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.691115][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.249479][ T32] INFO: task kworker/0:2:944 blocked for more than 149 seconds. [ 283.249511][ T32] Tainted: G L syzkaller #0 [ 283.249524][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.249533][ T32] task:kworker/0:2 state:D stack:22304 pid:944 tgid:944 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 283.249596][ T32] Workqueue: events_power_efficient crda_timeout_work [ 283.249630][ T32] Call Trace: [ 283.249638][ T32] [ 283.249653][ T32] __schedule+0x17db/0x58f0 [ 283.249683][ T32] ? update_protect_slice+0x128/0x210 [ 283.249732][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 283.249778][ T32] ? __pfx___schedule+0x10/0x10 [ 283.249813][ T32] ? schedule+0x90/0x2b0 [ 283.249839][ T32] schedule+0x164/0x2b0 [ 283.249865][ T32] schedule_preempt_disabled+0x13/0x30 [ 283.249888][ T32] __mutex_lock+0x7c1/0x1550 [ 283.249920][ T32] ? __mutex_lock+0x5d4/0x1550 [ 283.249950][ T32] ? crda_timeout_work+0x16/0x80 [ 283.249976][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 283.250018][ T32] ? rcu_is_watching+0x16/0xb0 [ 283.250044][ T32] ? process_scheduled_works+0x97a/0x1630 [ 283.269518][ T32] crda_timeout_work+0x16/0x80 [ 283.269554][ T32] process_scheduled_works+0xc3d/0x1630 [ 283.269618][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.269653][ T32] ? assign_work+0x3cf/0x5d0 [ 283.269685][ T32] worker_thread+0xa47/0xfb0 [ 283.269728][ T32] ? __kthread_parkme+0x71/0x1f0 [ 283.269778][ T32] kthread+0x38b/0x480 [ 283.269799][ T32] ? __pfx_worker_thread+0x10/0x10 [ 283.269824][ T32] ? __pfx_kthread+0x10/0x10 [ 283.269846][ T32] ret_from_fork+0x514/0xb70 [ 283.269871][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 283.269891][ T32] ? __switch_to+0xc89/0x1420 [ 283.269922][ T32] ? __pfx_kthread+0x10/0x10 [ 283.269944][ T32] ret_from_fork_asm+0x1a/0x30 [ 283.269993][ T32] [ 283.287170][ T32] INFO: task kworker/0:4:5613 blocked for more than 149 seconds. [ 283.287196][ T32] Tainted: G L syzkaller #0 [ 283.287207][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.287217][ T32] task:kworker/0:4 state:D stack:21976 pid:5613 tgid:5613 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 283.287276][ T32] Workqueue: events reg_todo [ 283.287303][ T32] Call Trace: [ 283.287310][ T32] [ 283.287324][ T32] __schedule+0x17db/0x58f0 [ 283.287351][ T32] ? update_protect_slice+0x128/0x210 [ 283.287398][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 283.287434][ T32] ? __pfx___schedule+0x10/0x10 [ 283.287467][ T32] ? schedule+0x90/0x2b0 [ 283.287493][ T32] schedule+0x164/0x2b0 [ 283.287519][ T32] schedule_preempt_disabled+0x13/0x30 [ 283.287541][ T32] __mutex_lock+0x7c1/0x1550 [ 283.287572][ T32] ? __mutex_lock+0x5d4/0x1550 [ 283.287600][ T32] ? reg_process_self_managed_hints+0x8d/0x160 [ 283.287627][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 283.287650][ T32] ? reg_process_self_managed_hint+0x1ab/0x4d0 [ 283.287673][ T32] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 283.287706][ T32] ? reg_todo+0x8da/0xa40 [ 283.287736][ T32] reg_process_self_managed_hints+0x8d/0x160 [ 283.287761][ T32] reg_todo+0x8df/0xa40 [ 283.287797][ T32] ? process_scheduled_works+0x97a/0x1630 [ 283.287824][ T32] process_scheduled_works+0xc3d/0x1630 [ 283.287886][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.287920][ T32] ? assign_work+0x3cf/0x5d0 [ 283.287953][ T32] worker_thread+0xa47/0xfb0 [ 283.287996][ T32] ? __kthread_parkme+0x71/0x1f0 [ 283.288037][ T32] kthread+0x38b/0x480 [ 283.288058][ T32] ? __pfx_worker_thread+0x10/0x10 [ 283.288082][ T32] ? __pfx_kthread+0x10/0x10 [ 283.288104][ T32] ret_from_fork+0x514/0xb70 [ 283.288129][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 283.288149][ T32] ? __switch_to+0xc89/0x1420 [ 283.288180][ T32] ? __pfx_kthread+0x10/0x10 [ 283.288202][ T32] ret_from_fork_asm+0x1a/0x30 [ 283.288250][ T32] [ 283.288296][ T32] [ 283.288296][ T32] Showing all locks held in the system: [ 283.288305][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 283.288319][ T32] #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 283.288372][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 283.288425][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 283.288438][ T32] #0: ffff8880271c5940 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.288498][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.288563][ T32] #2: ffff888034865440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 283.288625][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 283.288638][ T32] #0: ffff88807f915540 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.288697][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.288763][ T32] #2: ffff88803379e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 283.288830][ T32] #3: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 283.288878][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 283.288892][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.288945][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.288999][ T32] #2: ffff888054620800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 283.289048][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 283.289061][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.289114][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.289167][ T32] #2: ffff8880547f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 283.289213][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 283.289227][ T32] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 283.289282][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 283.289296][ T32] #0: ffff888032cb5540 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.289355][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.289421][ T32] #2: ffff88807b7e34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 283.289479][ T32] locks held by kworker/1:1/30: 8, last CPU#1: [ 283.289492][ T32] #0: ffff888022e81940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.289544][ T32] #1: ffffc90000a57c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.289595][ T32] #2: ffff888029bfb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 283.289645][ T32] #3: ffff8880547ee1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 283.289695][ T32] #4: ffff88807f4f11a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 283.289744][ T32] #5: ffff888020ac1a68 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 283.289802][ T32] #6: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 283.289848][ T32] #7: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 283.289898][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 283.289911][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 283.289960][ T32] locks held by kworker/u8:2/43: 4, last CPU#1: [ 283.289973][ T32] #0: ffff88802c282140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.290031][ T32] #1: ffffc90000b37c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.300366][ T32] #2: ffff88803384d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 283.300427][ T32] #3: ffff88807b7e20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 283.300488][ T32] locks held by kworker/u8:3/50: 4, last CPU#1: [ 283.300502][ T32] #0: ffff88803394f140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 283.300561][ T32] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630