last executing test programs: 47.036472225s ago: executing program 3 (id=1537): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0201000000000000000000b7080000000000017baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 46.857130284s ago: executing program 3 (id=1539): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f00000014c0)=[{0x0}], 0x1, 0x1) 46.709406569s ago: executing program 3 (id=1540): prctl$PR_SVE_GET_VL(0x33, 0x78bf) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x6}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x1, 0x0, &(0x7f00000000c0)=[{0x3ff, 0x8b8}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004940)={0x2448, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x5b, 0x18, 0x0, 0x1, [@generic="8b5704a4beacbae607f03bb816566b98a6d8df9279923fbc538f0f75cf3653b537706938d92120fd2d3ac02406088b74bdbbaf9f8df85ea3809ca2531d105fc5dcab3a118f8b38bac0a2629cd915a998f786403689c5fc"]}, @nested={0x2174, 0x55, 0x0, 0x1, [@generic="57abe115f77070b1dca0790d4f0449d4a112f171ff807b49c0ce6276929586429a895325a1", @typed={0x8, 0x9b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="402760e4981ff459cce6ecb3ea41a463a735c533921b18828bbe569d02760ec0cb67bb13cc1424ee5d2246d3069dc12a046733841b1b91349d2eecba", @generic="d01b278203f5cb7fc8f776bc98f708096a11e815d9bd16b42c9ccfa7b922125a94dd295a31e110886b9845e88926b2a01a3bb71601fe2ab67ea500182ced64cb6e19d40c56a2879ddeec61fb3f29fe076db94b1587bf985f388c22bd9db3b0c251c279581e57e7292167c45a52d34485e2340a9dc00b1a25dd7a345e56f042a10993db8f6942509ca67cb922bbf883d244b9e6e674f3544a936db8fcc26b411d65dfefc29764b3ee1ab37c040ebf7a38985533c4302859401a12d63cae3ab18b4fe6c1484f8178bc6275515ced4c646d2ccd152b4a94697453fe978a96d09f", @typed={0x1004, 0x130, 0x0, 0x0, @binary="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"}, @generic="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", @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x19d, 0x31, 0x0, 0x1, [@generic="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", @typed={0x9, 0x42, 0x0, 0x0, @str='([.$\x00'}, @generic="ad09d106dba7a3a436d88b0487cf6110a0676922ed7c60818322235b5f92b5839237f0df44bea77b0a9852b9efec3e5e495ed997ac2185696649275f310b424fd59ae4c5e24783ab895c2351f9f03d60e93ce245b4bea9e417fbc644432b3420b8ef6a27d8dcfb71f781fe7ef6cac4cfd6bd836142ab91f641557f92f02260b32d7cb65739d58ab2bad0"]}, @generic="c6db22fd1bd41606c98f8cb6534b961bb6070c8467f1a709b18c0bb77bc9659f23e53c284d8b47824b3d6d46596e5cdc2869d52cf179009b54c9f6e4ed0f117b58fdb082891e93d38508d90b21c01ba6aa74e508dae8a2f201d40ff6416ceb2b88566b9897c5219781f968519cca8e167ca7f560e8de35bf4c374728645dcc229d6f4465971ab2575fc0e8418e98eb06b2c0a2f9e2274edd356cec3f044928b028314135b0e8b0d61617e59871f33cd983412840c0240d66cd7028e89333ffb11401"]}, 0x2448}, 0x1, 0x3000000}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000100)={0x0, 0x4, 0x8d, 0x88, 0x1, [0x0, 0x0, 0x0], [0x5, 0x8, 0x3, 0x9432], [0x6, 0x0, 0x9], [0x0, 0xfffffffffffeffff, 0x0, 0x1]}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000280)={'wg0\x00', {0x2, 0x4e23, @local}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f00000001c0)={r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000200)={0x0, 0x1, 0xa2, 0x8, 0x3, [r5, r6, r8], [0x0, 0x8, 0x7, 0xff], [0x71a0, 0x5, 0x5, 0x96], [0xfffffffffffffffa, 0xc, 0x5, 0x100000001]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b6e"], 0x0) 45.156759304s ago: executing program 3 (id=1547): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) unshare(0x400) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) listen(0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 44.269019155s ago: executing program 1 (id=1552): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000002500)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x12) shutdown(r5, 0x2) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 43.50786572s ago: executing program 3 (id=1554): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="0005bb000000bb08eb30030dd6f60792b37418f53c34d39b4444bd1bce25d6daa5f2942e47e87271747a9fa48d0416f3177679477e2f8a486dd30400d42013d04df422863272814f7735bbc6f3c88592306a53c9fd0e01b97c0c7a8f0941f76aea3662d8d8410a9bb69a5c4f9050eb400248c8e81e288e6df6a87e31bd18af9be8f26c7772ff81341d9dd631788a8372529d8b7e4b6bec930500000000000000763c6ba7ed4e815a8cf0f66546a210625c6c0954a5d1a69d5e2b7b489224c4ca50218d"], 0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1e3381, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08000500020000008c879ebf6463558ab37a2b695d3de0f0ea40e4d12bed52146767c1c8e27fb75584ba43517aec67cd34b5162ec309745a6976b938b93791"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @cf={0x4, 0x6, {0x3, 0x0, 0x3}}]}]}, 0x40}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0414f9f4070009040081000000000003400000000008000f0001000000", 0x24) r6 = socket$netlink(0x10, 0x3, 0x4) mlockall(0x2) brk(0x75555ede6001) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, 0xee01) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000214e224e0000", 0x58}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket(0x2, 0x80805, 0x0) dup2(r9, r8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x1000}, &(0x7f0000000640)=0x8) 42.74902662s ago: executing program 1 (id=1556): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf773, "00207d2000000000201b14700c1e0ac74f000000001200000022000900"}) 41.280462047s ago: executing program 1 (id=1562): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)}], 0x1, 0x1) 40.954949975s ago: executing program 1 (id=1563): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000200007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 40.83105619s ago: executing program 3 (id=1564): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) unshare(0x400) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) listen(0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 40.470966419s ago: executing program 1 (id=1565): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x100) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="ba4100ed660fddec0f2323660fc6acbd000066b93e0300000f32387c083c27660f3a0eda7c0f20e06635000004000f22e066ce", 0x33}], 0x1, 0x6, &(0x7f00000000c0)=[@cr0={0x0, 0x12}, @efer={0x2, 0x4801}], 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000000010000000900", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 40.470700868s ago: executing program 2 (id=1566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000002500)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x12) shutdown(r5, 0x2) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 36.698082018s ago: executing program 1 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103b83) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8}]}, 0x30}}, 0x40) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0) (async) write$apparmor_current(r5, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x9, 0x200000}) (async) setpriority(0x1, 0x0, 0x5) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000003c0)="9963a6d278cf18fdf7bfa9c084c471ff071849ae79373818b3349771a7408ea443442be60ec265012197e1cff41e71de588f4af540590a8a90343c8b6d942401c2b74883cf9192b908e864c2a8e2acc1e1febe055015d6c5245138715361c7e596942850c8bcab156dc4053b18954bf2b9ba23fbda19ac4bc66ebd3ffdd84197324d55489afcaec67e0b2bbb1c99", 0x8e, 0xfffffffffffffffc) (async) r8 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)="e98e0243043d633ee1c68863b5206767ea74a27f5f9a415dd66623e1c6", 0x1d, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r11 = add_key$keyring(&(0x7f0000000580), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0x0) (async) r12 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000400)={'fscrypt:', @auto=[0x64, 0x0, 0x0, 0x0, 0x31, 0x0, 0x50, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}, &(0x7f0000000440)={0x0, "550e8fa8ad9ebc90f37648b12d9d933517e3c5c648d1e97ef0fddb8aa2d9307f364ca459419865e1ee600d641e0ad6ca7dbe078a95cd5ffeb2e1130000000093"}, 0x48, r11) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r9, 0x1000000000000000) r13 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "87e41f3f2518cf22b058fe40b3bfb0888226e54e123436d75a884ae89b4b8ea5dc074df2550d8bfaf75fd05332be6fb3df1d0756f1193298e53b21d91ba047f0"}, 0x48, r11) keyctl$KEYCTL_WATCH_KEY(0x20, r13, r9, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000480)={r7, r8, r13}, &(0x7f00000004c0)=""/147, 0x93, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd88) 36.562977308s ago: executing program 2 (id=1570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000020010000a8d5b100bfa403010000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 36.240281998s ago: executing program 2 (id=1573): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)}], 0x1, 0x1) 36.011113493s ago: executing program 2 (id=1575): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000040)="53049b0e2f51791b2e3ab0b08c20b42b8061cfd778e09168b2b81445b72a025dc779c7f9", 0x0, 0x0, 0x0, 0xfffffffd}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca70d9683dda1af1ea89de2b7fb0a010000000000000000030000004100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 35.824562803s ago: executing program 2 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @local}, {0x0, 0x4e32, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', '\x00', {"00000000000000000000000300", "000000000000000000009b7e00"}}}}}}}, 0x0) 35.710674739s ago: executing program 2 (id=1577): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x8000, 0x8, 0x551, 0xfffffffc, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x39, 0x2, [{0x7, 0xa, "4e7a03e4f47bfa6b"}, {0x5, 0x10, "eda732f485583b08403709b9992b"}, {0x1, 0x7, "84c7937df9"}, {0x6, 0x6, "19142488"}, {0x6, 0xc, "601d4fdfc62906be3e7a"}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0xd, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@private=0xa010101, 0x8}, {@private=0xa010101, 0x7f}, {@empty, 0x7fff}]}, @rr={0x7, 0xf, 0xc4, [@dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xac, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffd0e, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4005}, 0x8091) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0xee020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x84}}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', r2, 0x4, 0x2, 0xdd, 0x7fff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x1, 0xdc7}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x6, 0xb86, 0x2}) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3, 0x4, 0x5, 0x4, 0x3}, @ipv6=@udp={0x4, 0x6, "1c2f6a", 0x1b7, 0x11, 0x0, @mcast1, @mcast1, {[@dstopts={0x2f, 0x8, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7f, 0xd69, [0x8000000000000001, 0x1]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0xffff, [0xe1a2, 0x0, 0x4]}}, @jumbo={0xc2, 0x4, 0x10001}, @enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x2b, 0x25, '\x00', [@generic={0x4, 0xae, "13294214bc8c3a186aa09b6dde1ec6a198069373d3c74daf565ec9d37cfa2bd277cad7169d05acd392b490204d33b0fdfab7b2b682f8ad7352b20175d688bd7c7877ee9dc9ccda5643b39da40a2efcb88f5a027e359ead18edac592c7dca7be70d0fc550e7ba537674fd0ee993e726790542e58ffb71e4f5fb41f7cc472610076389b6813faa627b935a225c72b2850a1c64a19113ed4a9cd7cc9efe03587a6bf8c3f99f223409c2c96e4269e4fc"}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0xffff}}, @jumbo={0xc2, 0x4, 0xe2b1}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8e, 0x1ff, [0xffffffffffffb543]}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x50, {0x1, 0x12, 0x9, 0x5, [0x90000000000, 0x7fffffffffffffff, 0x8, 0x9, 0x1000, 0x7, 0x7, 0xff, 0x7]}}]}], {0x4e21, 0x4e23, 0x2f, 0x0, @opaque="2eabde5481bf577d56ff44621e754449be3ea44c40e7225d4620639b54135fce84dc453fcdc5e8"}}}}, 0x1e9) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) 18.671265399s ago: executing program 0 (id=1595): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)="f7be", 0x2}], 0x1, 0x1) 18.42289933s ago: executing program 0 (id=1596): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = userfaultfd(0x1) syz_usb_connect$uac1(0x6, 0x8b, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102000000ff6b1d0101400001025858130301090279000301ad60160904000000010100000a2401ac12000201020f24060205040100010006000800090b2406060102000009040101010102000009050109080001070b07250102081000090402000001020000090402010101020000090582090800020001072501030600"/142], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000090780000090a0000000000000b0000985e561a89a37f9e8307f3743d402eb5c21c1314887aa0108009095d3c1f7e8c3ec2d97ee2847239322bcd5795516d140cc9c628d1708b10fef16b750031cd0947045a8752704e4ccef5f57437e3d664699aec49f63b823329669bf3a4347b79156f0db428e78673abc014a7645124a42b22be8b1be38813a05f31a7f690405d3045e907e567ef554a45c59582f087f4161107644dc5c7f20ad937a9c209ff63a7941e699212ab2a89e099f8392e6a6db0121ffe639f44d25e9446a713726a02a879dc302eedae1ae1816b30d9eb239649186e9fb2fee63e17b7b4e3625ab8f46771"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xf}, 0x1, 0x0, 0x80000, {0x4, 0x80}, 0x2, 0x8}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x0, 0x6, 0x1}) epoll_create(0x1084) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000180)={@loopback, @remote, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000019a80)=[{&(0x7f0000019680)="248b71c9662526ecb4634a0344ea7771bafb930eae53a65a48c4170add47649b22e42bef3b6b5509715b683ac99b1b912e00b8493e44cab0097a192c1ed7e2f3398873d1e11fb61366a65edf82edb83eb0b51de4bd7b0e2decb342a91beb21166f2b690739b2f55a82be5ffb559e8f7fb3a2c8efe129f7da251aa03704a7463f6ad1f620d588eae18613005961e8e25ee7ff2cc1d3183fead4249229a055266a632ff1fdbb22b1a3", 0xa8}, {&(0x7f0000000240)="f223e6242715fa40f28f0093aa437691ec191d9a5194e4934db1f412b46bd492337668a0273106c39e02a42e05403390aaf8dc1bc2d7a8a2025341ccb9fd77f1faa8952da7662fad300272c074ecd985ca29dd4d", 0x54}, {&(0x7f0000019840)="bc73bec71277ae060dcd4ca977b6077aa6fb6ce6c3aaf3a7d7884373a03a8ece101c894f642763512153295cd3a25dfc630e73aea487353fb2fe8c36b0275af4298abac955c9a1759d715debe02af8940fc6422f6b85085b1b95c3595122d89dfe142040ae389187a7e7de976436857ce092efc025a11b9665c34c7a43baa2712de3d2693d973a56c297c74505778554d9db87c4de35274ba88249e9dcf86fef6379869a0a", 0xa5}, {&(0x7f00000003c0)="cd5532a0b9cefe8298831066", 0xc}, {&(0x7f0000019900)="0f478d208e53d53935f9a492d4d2f13e891da55e34fe1cb8c4bd7f71483e2b220a869019b47f58dc15681e56f60b9f9ec41018de7819f467d54107d6ecb0258b2b88119f354f9b6e34518fad26b2a20948ee41033a4750b18e81eca1ab7562aa5b02cb4a27807ca0eb76f1063b118250f58eee491ccff8dcb732f6f8c63d2339e0d002", 0x83}, {&(0x7f00000199c0)="d07d6fa67dbbd48cb1c2b96c665924049363a93ca4f71c8a2eca6f3d1ae0289404b6695d76eb691c1fe9535e60803bca0c1d6cacad67c69bf7fca991852f4232871bb06b1bfd44ca97fc83d02e5f670b71bb5bbb6c279d1947115383e06eaa393ffff826bafa3ed844db852b2b6f02278cae8cd321f595c7f6fd07b5e94054b628f9688ad23505c1cef9e30a9d2cb00d06770224dbce89aef70cdfc0224ca57469edaee493085c29c4", 0xa9}], 0x6, &(0x7f0000019b00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @generic={0x89, 0x4, "e1e0"}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x7, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0xc3, [@local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0x11, "b28363897895344152b5e09f87ca64"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x88}, 0x4040040) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 14.806752958s ago: executing program 0 (id=1597): write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x3, 0x8864}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @arp=@generic={0x5, 0x201, 0x6, 0x0, 0x9, @random="a717748cdb9a", "", @broadcast}}, 0x22) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000000000030000000000000000000e0100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 14.546045335s ago: executing program 0 (id=1598): r0 = socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) (async) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYRES8=r0], 0x0) (async) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x2056, &(0x7f00000036c0)=ANY=[@ANYBLOB="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"], 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x6}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) (async) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) (async) prlimit64(0x0, 0x0, 0x0, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0xfe662ea3891defe0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000000200)) (async) syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0xffffffff, 0x40}, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000ce06bd3a09c2a14010000000000000000000800506a1e010000"], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000000008000001114952b5892eb260500000000000000223cfcff71b167cc0b6299c7544704b31b8cb40ce71345593df23d707cc436566ecf0824ca59508ad933ac4b1778c32411278801d5fba31413f6863de91dca1197650fe1b94c370721518fd11ca8aac7502991cd9100000000000000", @ANYRES32=0x0, @ANYRES16=0x0], 0x3c}}, 0x1) 14.132045469s ago: executing program 0 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x94, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 13.089572681s ago: executing program 0 (id=1600): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x8000, 0x8, 0x551, 0xfffffffc, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x39, 0x2, [{0x7, 0xa, "4e7a03e4f47bfa6b"}, {0x5, 0x10, "eda732f485583b08403709b9992b"}, {0x1, 0x7, "84c7937df9"}, {0x6, 0x6, "19142488"}, {0x6, 0xc, "601d4fdfc62906be3e7a"}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0xd, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@private=0xa010101, 0x8}, {@private=0xa010101, 0x7f}, {@empty, 0x7fff}]}, @rr={0x7, 0xf, 0xc4, [@dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xac, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffd0e, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4005}, 0x8091) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0xee020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x84}}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', r2, 0x4, 0x2, 0xdd, 0x7fff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x1, 0xdc7}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x6, 0xb86, 0x2}) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3, 0x4, 0x5, 0x4, 0x3}, @ipv6=@udp={0x4, 0x6, "1c2f6a", 0x1b7, 0x11, 0x0, @mcast1, @mcast1, {[@dstopts={0x2f, 0x8, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7f, 0xd69, [0x8000000000000001, 0x1]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0xffff, [0xe1a2, 0x0, 0x4]}}, @jumbo={0xc2, 0x4, 0x10001}, @enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x2b, 0x25, '\x00', [@generic={0x4, 0xae, "13294214bc8c3a186aa09b6dde1ec6a198069373d3c74daf565ec9d37cfa2bd277cad7169d05acd392b490204d33b0fdfab7b2b682f8ad7352b20175d688bd7c7877ee9dc9ccda5643b39da40a2efcb88f5a027e359ead18edac592c7dca7be70d0fc550e7ba537674fd0ee993e726790542e58ffb71e4f5fb41f7cc472610076389b6813faa627b935a225c72b2850a1c64a19113ed4a9cd7cc9efe03587a6bf8c3f99f223409c2c96e4269e4fc"}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0xffff}}, @jumbo={0xc2, 0x4, 0xe2b1}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8e, 0x1ff, [0xffffffffffffb543]}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x50, {0x1, 0x12, 0x9, 0x5, [0x90000000000, 0x7fffffffffffffff, 0x8, 0x9, 0x1000, 0x7, 0x7, 0xff, 0x7]}}]}], {0x4e21, 0x4e23, 0x2f, 0x0, @opaque="2eabde5481bf577d56ff44621e754449be3ea44c40e7225d4620639b54135fce84dc453fcdc5e8"}}}}, 0x1e9) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) 2.666843891s ago: executing program 4 (id=1610): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="0005bb000000bb08eb30030dd6f60792b37418f53c34d39b4444bd1bce25d6daa5f2942e47e87271747a9fa48d0416f3177679477e2f8a486dd30400d42013d04df422863272814f7735bbc6f3c88592306a53c9fd0e01b97c0c7a8f0941f76aea3662d8d8410a9bb69a5c4f9050eb400248c8e81e288e6df6a87e31bd18af9be8f26c7772ff81341d9dd631788a8372529d8b7e4b6bec930500000000000000763c6ba7ed4e815a8cf0f66546a210625c6c0954a5d1a69d5e2b7b489224c4ca50218d"], 0x0, 0x0, 0x0}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1e3381, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0414f9f4070009040081000000000003400000000008000f0001000000", 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300"/46, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x1dc}}, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3e0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, 0xee01) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000214e224e0000", 0x58}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) dup2(r8, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x1000}, &(0x7f0000000640)=0x8) 1.910315712s ago: executing program 4 (id=1611): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e"], 0x0) io_setup(0x589, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) (async, rerun: 64) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (rerun: 64) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) epoll_create(0x7) (async, rerun: 32) r5 = epoll_create1(0x0) (rerun: 32) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f00000000c0)) (async) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004805}, 0x24000804) (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, 0x0, 0x300, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) (async) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x57c3, 0x80}) (async) io_pgetevents(0x0, 0x4, 0x0, &(0x7f0000000280), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 608.573148ms ago: executing program 4 (id=1612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000300007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 436.221224ms ago: executing program 4 (id=1613): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0201000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x90) 197.293717ms ago: executing program 4 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x94, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 4 (id=1615): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x8000, 0x8, 0x551, 0xfffffffc, {{0x22, 0x4, 0x3, 0x0, 0x88, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x39, 0x2, [{0x7, 0xa, "4e7a03e4f47bfa6b"}, {0x5, 0x10, "eda732f485583b08403709b9992b"}, {0x1, 0x7, "84c7937df9"}, {0x6, 0x6, "19142488"}, {0x6, 0xc, "601d4fdfc62906be3e7a"}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0xd, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1}, {@private=0xa010101, 0x8}, {@private=0xa010101, 0x7f}, {@empty, 0x7fff}]}, @rr={0x7, 0xf, 0xc4, [@dev={0xac, 0x14, 0x14, 0x24}, @multicast2, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xac, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffd0e, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4005}, 0x8091) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0xee020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x84}}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', r2, 0x4, 0x2, 0xdd, 0x7fff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x1, 0xdc7}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x6, 0xb86, 0x2}) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3, 0x4, 0x5, 0x4, 0x3}, @ipv6=@udp={0x4, 0x6, "1c2f6a", 0x1b8, 0x11, 0x0, @mcast1, @mcast1, {[@dstopts={0x2f, 0x8, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7f, 0xd69, [0x8000000000000001, 0x1]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0xffff, [0xe1a2, 0x0, 0x4]}}, @jumbo={0xc2, 0x4, 0x10001}, @enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x2b, 0x25, '\x00', [@generic={0x4, 0xae, "13294214bc8c3a186aa09b6dde1ec6a198069373d3c74daf565ec9d37cfa2bd277cad7169d05acd392b490204d33b0fdfab7b2b682f8ad7352b20175d688bd7c7877ee9dc9ccda5643b39da40a2efcb88f5a027e359ead18edac592c7dca7be70d0fc550e7ba537674fd0ee993e726790542e58ffb71e4f5fb41f7cc472610076389b6813faa627b935a225c72b2850a1c64a19113ed4a9cd7cc9efe03587a6bf8c3f99f223409c2c96e4269e4fc"}, @calipso={0x7, 0x8, {0x0, 0x0, 0x5, 0xffff}}, @jumbo={0xc2, 0x4, 0xe2b1}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8e, 0x1ff, [0xffffffffffffb543]}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x50, {0x1, 0x12, 0x9, 0x5, [0x90000000000, 0x7fffffffffffffff, 0x8, 0x9, 0x1000, 0x7, 0x7, 0xff, 0x7]}}]}], {0x4e21, 0x4e23, 0x30, 0x0, @opaque="2eabde5481bf577d56ff44621e754449be3ea44c40e7225d4620639b54135fce84dc453fcdc5e855"}}}}, 0x1ea) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) kernel console output (not intermixed with test programs): riptor 200 [ 250.082225][ T5276] letsketch 0003:6161:4D15.0008: probe with driver letsketch failed with error -32 [ 250.183489][ T5276] usb 2-1: USB disconnect, device number 38 [ 251.179460][ T8884] loop0: detected capacity change from 0 to 7 [ 251.222599][ T8884] Dev loop0: unable to read RDB block 7 [ 251.250107][ T8884] loop0: unable to read partition table [ 251.281452][ T8884] loop0: partition table beyond EOD, truncated [ 251.308626][ T8884] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 251.308626][ T8884] ) failed (rc=-5) [ 251.408668][ T4680] Dev loop0: unable to read RDB block 7 [ 251.414626][ T4680] loop0: unable to read partition table [ 251.420638][ T4680] loop0: partition table beyond EOD, truncated [ 251.687562][ T8891] ipt_REJECT: TCP_RESET invalid for non-tcp [ 252.162101][ T8900] loop9: detected capacity change from 0 to 7 [ 252.210474][ T8900] Dev loop9: unable to read RDB block 7 [ 252.252584][ T8900] loop9: unable to read partition table [ 252.280617][ T8900] loop9: partition table beyond EOD, truncated [ 252.311626][ T8900] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 252.311626][ T8900] ) failed (rc=-5) [ 252.970017][ T8918] FAULT_INJECTION: forcing a failure. [ 252.970017][ T8918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.021567][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.4.1181 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 253.032081][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.043512][ T8918] Call Trace: [ 253.046945][ T8918] [ 253.050018][ T8918] dump_stack_lvl+0x241/0x360 [ 253.054750][ T8918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.060163][ T8918] ? __pfx__printk+0x10/0x10 [ 253.064838][ T8918] ? __pfx_lock_release+0x10/0x10 [ 253.070366][ T8918] should_fail_ex+0x3b0/0x4e0 [ 253.075662][ T8918] _copy_from_user+0x2f/0xe0 [ 253.080425][ T8918] sctp_getsockopt_enable_strreset+0xd8/0x5b0 [ 253.086571][ T8918] ? __local_bh_enable_ip+0x168/0x200 [ 253.092100][ T8918] ? __pfx_sctp_getsockopt_enable_strreset+0x10/0x10 [ 253.099201][ T8918] sctp_getsockopt+0x884/0xbb0 [ 253.104342][ T8918] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 253.110469][ T8918] do_sock_getsockopt+0x3c4/0x7e0 [ 253.116413][ T8918] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 253.122387][ T8918] ? __fget_files+0x3f3/0x470 [ 253.127116][ T8918] ? __fget_files+0x29/0x470 [ 253.131862][ T8918] __sys_getsockopt+0x26b/0x330 [ 253.137125][ T8918] ? __pfx___sys_getsockopt+0x10/0x10 [ 253.143234][ T8918] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.149728][ T8918] ? do_syscall_64+0x100/0x230 [ 253.154550][ T8918] __x64_sys_getsockopt+0xb5/0xd0 [ 253.159630][ T8918] do_syscall_64+0xf3/0x230 [ 253.164170][ T8918] ? clear_bhb_loop+0x35/0x90 [ 253.168876][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.175315][ T8918] RIP: 0033:0x7f98d317def9 [ 253.179847][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.199659][ T8918] RSP: 002b:00007f98d3f7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 253.208098][ T8918] RAX: ffffffffffffffda RBX: 00007f98d3335f80 RCX: 00007f98d317def9 [ 253.216091][ T8918] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000006 [ 253.224074][ T8918] RBP: 00007f98d3f7d090 R08: 0000000020000640 R09: 0000000000000000 [ 253.232151][ T8918] R10: 0000000020000600 R11: 0000000000000246 R12: 0000000000000001 [ 253.240140][ T8918] R13: 0000000000000000 R14: 00007f98d3335f80 R15: 00007f98d345fa28 [ 253.248255][ T8918] [ 253.548342][ T8931] ipt_REJECT: TCP_RESET invalid for non-tcp [ 253.635638][ T5276] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 253.797702][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 253.807774][ T5276] usb 1-1: config 0 has an invalid interface number: 215 but max is 0 [ 253.821033][ T5276] usb 1-1: config 0 has no interface number 0 [ 253.836018][ T5276] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 253.851464][ T5276] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0xE has invalid maxpacket 49340, setting to 1024 [ 253.863775][ T5276] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x7 has invalid maxpacket 2023, setting to 64 [ 253.875801][ T5276] usb 1-1: config 0 interface 215 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.887279][ T5276] usb 1-1: config 0 interface 215 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.901688][ T5276] usb 1-1: config 0 interface 215 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 253.913122][ T5276] usb 1-1: config 0 interface 215 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 253.929813][ T5276] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0126, bcdDevice=a5.72 [ 253.958751][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.970110][ T5276] usb 1-1: Product: syz [ 253.974631][ T5276] usb 1-1: Manufacturer: syz [ 253.983300][ T5276] usb 1-1: SerialNumber: syz [ 254.006479][ T5276] usb 1-1: config 0 descriptor?? [ 254.031487][ T5276] ftdi_sio 1-1:0.215: FTDI USB Serial Device converter detected [ 254.052823][ T5276] ftdi_sio ttyUSB0: unknown device type: 0xa572 [ 254.242370][ T5276] usb 1-1: USB disconnect, device number 29 [ 254.258289][ T5276] ftdi_sio 1-1:0.215: device disconnected [ 254.314788][ T8946] loop9: detected capacity change from 0 to 6 [ 254.323393][ T8946] Dev loop9: unable to read RDB block 6 [ 254.330125][ T8946] loop9: unable to read partition table [ 254.336746][ T8946] loop9: partition table beyond EOD, truncated [ 254.343186][ T8946] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 254.343186][ T8946] ) failed (rc=-5) [ 254.364477][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1193'. [ 254.510077][ T8948] loop4: detected capacity change from 0 to 7 [ 254.516865][ T8948] buffer_io_error: 4 callbacks suppressed [ 254.516879][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.539754][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.556946][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.565819][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.574083][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.582410][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.590767][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.608071][ T8948] ldm_validate_partition_table(): Disk read failed. [ 254.625130][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.643218][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.672019][ T8948] Buffer I/O error on dev loop4, logical block 0, async page read [ 254.692338][ T8948] Dev loop4: unable to read RDB block 0 [ 254.709113][ T8948] loop4: unable to read partition table [ 254.722334][ T8948] loop4: partition table beyond EOD, truncated [ 254.730054][ T8948] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 254.730054][ T8948] ) failed (rc=-5) [ 255.426660][ T5276] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 255.485622][ T5275] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 255.587481][ T5276] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.605706][ T5276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.627439][ T5276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.657462][ T5275] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 255.675817][ T5276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.677501][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.707908][ T5276] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.720159][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.738088][ T5276] usb 1-1: Product: syz [ 255.742565][ T5276] usb 1-1: Manufacturer: syz [ 255.750331][ T5275] usb 2-1: config 0 has no interface number 0 [ 255.760206][ T5276] cdc_wdm 1-1:1.0: skipping garbage [ 255.769262][ T5276] cdc_wdm 1-1:1.0: skipping garbage [ 255.775725][ T5276] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 255.783442][ T5276] cdc_wdm 1-1:1.0: Unknown control protocol [ 255.798264][ T5275] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 255.814310][ T5275] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 255.829154][ T5275] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 255.863216][ T5275] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 255.889404][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.904670][ T5275] usb 2-1: config 0 descriptor?? [ 255.918671][ T8969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 255.965875][ T5275] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 255.999572][ T8967] fuse: Bad value for 'fd' [ 256.032487][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038988][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.072996][ T8] usb 1-1: USB disconnect, device number 30 [ 257.111615][ T4505] usb 2-1: Failed to submit usb control message: -110 [ 257.119274][ T4505] usb 2-1: unable to send the bmi data to the device: -110 [ 257.135661][ T4505] usb 2-1: unable to get target info from device [ 257.142276][ T4505] usb 2-1: could not get target info (-110) [ 257.149079][ T4505] usb 2-1: could not probe fw (-110) [ 258.184126][ T9] usb 2-1: USB disconnect, device number 39 [ 258.493220][ T9003] loop4: detected capacity change from 0 to 7 [ 258.503161][ T9003] ldm_validate_partition_table(): Disk read failed. [ 258.515453][ T9003] Dev loop4: unable to read RDB block 0 [ 258.522486][ T9003] loop4: unable to read partition table [ 258.530939][ T9003] loop4: partition table beyond EOD, truncated [ 258.538476][ T9003] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 258.538476][ T9003] ) failed (rc=-5) [ 258.929141][ T9014] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.945228][ T9019] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 259.095660][ T5275] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 259.259602][ T5275] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.284262][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.301849][ T9033] loop0: detected capacity change from 0 to 7 [ 259.327550][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.347504][ T9033] Dev loop0: unable to read RDB block 7 [ 259.353233][ T9033] loop0: unable to read partition table [ 259.363106][ T5275] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.386037][ T9033] loop0: partition table beyond EOD, truncated [ 259.399628][ T9033] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 259.399628][ T9033] ) failed (rc=-5) [ 259.413971][ T9027] veth1_macvtap: entered promiscuous mode [ 259.415694][ T5275] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.436416][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.458366][ T5275] usb 4-1: Product: syz [ 259.478533][ T9027] veth1_macvtap: left promiscuous mode [ 259.484928][ T5275] usb 4-1: Manufacturer: syz [ 259.521897][ T5275] cdc_wdm 4-1:1.0: skipping garbage [ 259.541810][ T5275] cdc_wdm 4-1:1.0: skipping garbage [ 259.600763][ T5275] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 259.634248][ T5275] cdc_wdm 4-1:1.0: Unknown control protocol [ 259.808643][ T9016] fuse: Bad value for 'fd' [ 259.921922][ T8] usb 4-1: USB disconnect, device number 27 [ 260.322706][ T9060] loop9: detected capacity change from 0 to 7 [ 260.343468][ T9060] Dev loop9: unable to read RDB block 7 [ 260.375871][ T9060] loop9: unable to read partition table [ 260.396160][ T9060] loop9: partition table beyond EOD, truncated [ 260.423085][ T9060] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 260.423085][ T9060] ) failed (rc=-5) [ 261.348546][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 261.380157][ T9082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 261.766627][ T9088] FAULT_INJECTION: forcing a failure. [ 261.766627][ T9088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.809631][ T9088] CPU: 1 UID: 0 PID: 9088 Comm: syz.3.1234 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 261.820791][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 261.831834][ T9088] Call Trace: [ 261.835235][ T9088] [ 261.838275][ T9088] dump_stack_lvl+0x241/0x360 [ 261.843189][ T9088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.848406][ T9088] ? __pfx__printk+0x10/0x10 [ 261.853026][ T9088] ? snprintf+0xda/0x120 [ 261.857301][ T9088] should_fail_ex+0x3b0/0x4e0 [ 261.862468][ T9088] _copy_to_user+0x2f/0xb0 [ 261.867126][ T9088] simple_read_from_buffer+0xca/0x150 [ 261.872647][ T9088] proc_fail_nth_read+0x1e9/0x250 [ 261.877711][ T9088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.883580][ T9088] ? rw_verify_area+0x55e/0x6f0 [ 261.888475][ T9088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.894237][ T9088] vfs_read+0x201/0xbc0 [ 261.898538][ T9088] ? __pfx_lock_release+0x10/0x10 [ 261.903608][ T9088] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 261.909638][ T9088] ? __pfx_vfs_read+0x10/0x10 [ 261.914546][ T9088] ? __fget_files+0x3f3/0x470 [ 261.919347][ T9088] ? __fdget_pos+0x24e/0x320 [ 261.924031][ T9088] ksys_read+0x1a0/0x2c0 [ 261.928427][ T9088] ? __pfx_ksys_read+0x10/0x10 [ 261.933224][ T9088] ? do_syscall_64+0x100/0x230 [ 261.938022][ T9088] ? do_syscall_64+0xb6/0x230 [ 261.942739][ T9088] do_syscall_64+0xf3/0x230 [ 261.947459][ T9088] ? clear_bhb_loop+0x35/0x90 [ 261.952165][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.958080][ T9088] RIP: 0033:0x7fa999d7c93c [ 261.962505][ T9088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 261.982222][ T9088] RSP: 002b:00007fa99aaf5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.990709][ T9088] RAX: ffffffffffffffda RBX: 00007fa999f35f80 RCX: 00007fa999d7c93c [ 261.998690][ T9088] RDX: 000000000000000f RSI: 00007fa99aaf50a0 RDI: 0000000000000009 [ 262.006704][ T9088] RBP: 00007fa99aaf5090 R08: 0000000000000000 R09: 0000000000000000 [ 262.014727][ T9088] R10: 0000000020000600 R11: 0000000000000246 R12: 0000000000000001 [ 262.023267][ T9088] R13: 0000000000000000 R14: 00007fa999f35f80 R15: 00007fa99a05fa28 [ 262.031271][ T9088] [ 263.137712][ T9109] loop4: detected capacity change from 0 to 7 [ 263.175350][ T9109] buffer_io_error: 18 callbacks suppressed [ 263.175372][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.214044][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.239921][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.249606][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.261020][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.271517][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.283944][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.293537][ T9109] ldm_validate_partition_table(): Disk read failed. [ 263.305335][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.333492][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.375669][ T9109] Buffer I/O error on dev loop4, logical block 0, async page read [ 263.408215][ T9109] Dev loop4: unable to read RDB block 0 [ 263.414745][ T9109] loop4: unable to read partition table [ 263.459941][ T9109] loop4: partition table beyond EOD, truncated [ 263.484275][ T9109] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 263.484275][ T9109] ) failed (rc=-5) [ 263.877368][ T9123] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 263.897699][ T9123] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 264.586078][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 264.755127][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.773431][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.795412][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 264.831780][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.852857][ T9] usb 5-1: config 0 descriptor?? [ 265.142246][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.244325][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.463346][ T5275] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 265.667443][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 265.735108][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.867478][ T9] usb 5-1: USB disconnect, device number 27 [ 265.953775][ T5233] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 266.043934][ T9167] loop4: detected capacity change from 0 to 7 [ 266.127734][ T9167] ldm_validate_partition_table(): Disk read failed. [ 266.142508][ T9167] Dev loop4: unable to read RDB block 0 [ 266.159476][ T9167] loop4: unable to read partition table [ 266.193372][ T9167] loop4: partition table beyond EOD, truncated [ 266.213718][ T9167] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 266.213718][ T9167] ) failed (rc=-5) [ 266.636591][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 266.825734][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 266.860410][ T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 266.905241][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 266.938161][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 266.958871][ T9179] loop0: detected capacity change from 0 to 7 [ 266.986891][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 267.015770][ T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 267.024976][ T9179] Dev loop0: unable to read RDB block 7 [ 267.059337][ T9179] loop0: unable to read partition table [ 267.065666][ T8] usb 1-1: Product: syz [ 267.071061][ T9179] loop0: partition table beyond EOD, truncated [ 267.078357][ T8] usb 1-1: Manufacturer: syz [ 267.093982][ T8] usb 1-1: SerialNumber: syz [ 267.110571][ T9179] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 267.110571][ T9179] ) failed (rc=-5) [ 267.125799][ T8] usb 1-1: config 0 descriptor?? [ 267.144381][ T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 267.183913][ T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 267.268395][ T9183] Cannot find set identified by id 0 to match [ 267.361700][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.435935][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.552867][ T9191] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 267.753889][ T5275] usb 1-1: USB disconnect, device number 31 [ 267.766431][ T5275] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 268.650774][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.911909][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.993819][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.006004][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.019400][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.028709][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.048168][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.057683][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.192819][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.455790][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.944157][ T9228] loop4: detected capacity change from 0 to 7 [ 270.018775][ T5443] buffer_io_error: 18 callbacks suppressed [ 270.018795][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.040118][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.050185][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.059089][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.068301][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.078412][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.087039][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.108657][ T5443] ldm_validate_partition_table(): Disk read failed. [ 270.122691][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.151132][ T52] bridge_slave_1: left allmulticast mode [ 270.165075][ T52] bridge_slave_1: left promiscuous mode [ 270.165151][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.179496][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.211349][ T52] bridge_slave_0: left allmulticast mode [ 270.229013][ T5443] Buffer I/O error on dev loop4, logical block 0, async page read [ 270.244222][ T52] bridge_slave_0: left promiscuous mode [ 270.254045][ T5443] Dev loop4: unable to read RDB block 0 [ 270.264979][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.291081][ T5443] loop4: unable to read partition table [ 270.298121][ T5443] loop4: partition table beyond EOD, truncated [ 270.309240][ T9228] ldm_validate_partition_table(): Disk read failed. [ 270.332110][ T9228] Dev loop4: unable to read RDB block 0 [ 270.351952][ T9228] loop4: unable to read partition table [ 270.367234][ T9228] loop4: partition table beyond EOD, truncated [ 270.391228][ T9228] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 270.391228][ T9228] ) failed (rc=-5) [ 271.236948][ T5231] Bluetooth: hci3: command tx timeout [ 271.873453][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.934213][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.997215][ T52] bond0 (unregistering): Released all slaves [ 272.059057][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 272.255912][ T9255] hsr_slave_1 (unregistering): left promiscuous mode [ 272.530129][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 272.565722][ T5276] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 272.755222][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.802751][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.855214][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.878337][ T52] hsr_slave_0: left promiscuous mode [ 272.916810][ T5276] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.937574][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.972972][ T5276] usb 3-1: config 0 descriptor?? [ 272.986330][ T52] hsr_slave_1: left promiscuous mode [ 273.199925][ T52] veth0_macvtap: left promiscuous mode [ 273.235285][ T52] veth1_vlan: left promiscuous mode [ 273.252617][ T52] veth0_vlan: left promiscuous mode [ 273.306108][ T5231] Bluetooth: hci3: command tx timeout [ 274.166883][ T5277] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 274.355621][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 274.382977][ T5277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 274.400498][ T5277] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 274.423054][ T5277] usb 4-1: config 12 has no interface number 0 [ 274.442997][ T5277] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 274.466139][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.489490][ T5277] usb 4-1: Product: syz [ 274.493836][ T5277] usb 4-1: Manufacturer: syz [ 274.510862][ T5277] usb 4-1: SerialNumber: syz [ 274.770944][ T5277] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.817015][ T52] team0 (unregistering): Port device team_slave_1 removed [ 274.913094][ T52] team0 (unregistering): Port device team_slave_0 removed [ 274.987763][ T5277] snd-usb-audio 4-1:12.184: probe with driver snd-usb-audio failed with error -2 [ 275.014246][ T5277] usb 4-1: USB disconnect, device number 29 [ 275.064555][ T5222] udevd[5222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.122147][ T5276] usbhid 3-1:0.0: can't add hid device: -71 [ 275.134505][ T5276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 275.170536][ T5276] usb 3-1: USB disconnect, device number 26 [ 275.386927][ T5231] Bluetooth: hci3: command tx timeout [ 275.442495][ T9309] CUSE: info not properly terminated [ 275.454714][ T9308] loop4: detected capacity change from 0 to 7 [ 275.471936][ T9308] buffer_io_error: 28 callbacks suppressed [ 275.471956][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.486588][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.494559][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.504337][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.513165][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.521805][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.529893][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.567572][ T9308] ldm_validate_partition_table(): Disk read failed. [ 275.574983][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.583452][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.594543][ T9308] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.604815][ T9308] Dev loop4: unable to read RDB block 0 [ 275.611301][ T9308] loop4: unable to read partition table [ 275.618645][ T9308] loop4: partition table beyond EOD, truncated [ 275.625030][ T9308] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 275.625030][ T9308] ) failed (rc=-5) [ 276.159890][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.167410][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.174757][ T9218] bridge_slave_0: entered allmulticast mode [ 276.182675][ T9218] bridge_slave_0: entered promiscuous mode [ 276.192855][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.200630][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.207913][ T9218] bridge_slave_1: entered allmulticast mode [ 276.216676][ T9218] bridge_slave_1: entered promiscuous mode [ 276.371233][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.393301][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.615649][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 276.635180][ T9218] team0: Port device team_slave_0 added [ 276.666702][ T9218] team0: Port device team_slave_1 added [ 276.749744][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.761469][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.803097][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.817837][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.835642][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.852205][ T8] usb 1-1: config 0 descriptor?? [ 276.864525][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.876486][ T8] cp210x 1-1:0.0: cp210x converter detected [ 276.891889][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.924796][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.054638][ T9218] hsr_slave_0: entered promiscuous mode [ 277.063153][ T9218] hsr_slave_1: entered promiscuous mode [ 277.084719][ T8] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 277.093274][ T9218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.101488][ T9218] Cannot create hsr debugfs directory [ 277.107302][ T8] cp210x 1-1:0.0: querying part number failed [ 277.144317][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 277.165781][ T8] usb 1-1: USB disconnect, device number 32 [ 277.322734][ T9339] loop0: detected capacity change from 0 to 7 [ 277.327887][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 277.356397][ T8] cp210x 1-1:0.0: device disconnected [ 277.362918][ T9339] Dev loop0: unable to read RDB block 7 [ 277.395693][ T9339] loop0: unable to read partition table [ 277.421607][ T9339] loop0: partition table beyond EOD, truncated [ 277.438928][ T9339] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 277.438928][ T9339] ) failed (rc=-5) [ 277.465808][ T5231] Bluetooth: hci3: command tx timeout [ 277.915690][ T5277] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 278.046012][ T9368] loop9: detected capacity change from 0 to 7 [ 278.098210][ T9368] Dev loop9: unable to read RDB block 7 [ 278.104227][ T9368] loop9: unable to read partition table [ 278.169369][ T9368] loop9: partition table beyond EOD, truncated [ 278.174277][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 278.183543][ T9368] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 278.183543][ T9368] ) failed (rc=-5) [ 278.302814][ T5277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 278.318816][ T5277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 8383, setting to 1024 [ 278.407586][ T5277] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 278.454513][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.478612][ T5277] usb 5-1: Product: ☜è断鯿⎎緱殘꧃å«×œáŸˆêšï´å›ºì£æ–ˆï²©ä“™æ•¥í‘ꇖ橨駳蓅᧡㮱䔎﷯㔛嚴惶浞ౚᎮ屫㳛ㄛ쓉åºé¯‰èŽ„éšá½‰ç µï ´Ú™áŽ¸ë«¸é¨¸á±šæ¢® [ 278.572773][ T5277] usb 5-1: Manufacturer: Т [ 278.585438][ T5277] usb 5-1: SerialNumber: syz [ 278.841017][ T9398] loop4: detected capacity change from 0 to 7 [ 278.864884][ T9218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.874158][ T9398] ldm_validate_partition_table(): Disk read failed. [ 278.903715][ T9398] Dev loop4: unable to read RDB block 0 [ 278.928598][ T9218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.934784][ T9398] loop4: unable to read partition table [ 278.944194][ T9398] loop4: partition table beyond EOD, truncated [ 278.964195][ T9218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.973393][ T9398] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 278.973393][ T9398] ) failed (rc=-5) [ 278.998445][ T9218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.201691][ T5277] usbhid 5-1:1.0: can't add hid device: -71 [ 279.203745][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.232944][ T5277] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 279.269905][ T5277] usb 5-1: USB disconnect, device number 28 [ 279.294280][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.331903][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.339164][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.401375][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.408599][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.463598][ T9218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.515593][ T9218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.642944][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.751535][ T9218] veth0_vlan: entered promiscuous mode [ 279.763717][ T9218] veth1_vlan: entered promiscuous mode [ 279.788256][ T9218] veth0_macvtap: entered promiscuous mode [ 279.800020][ T9218] veth1_macvtap: entered promiscuous mode [ 279.819612][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.830262][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.840619][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.851176][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.861203][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.872033][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.882256][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.893271][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.906506][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.963887][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.975403][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.985882][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.043000][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.053854][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.065040][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.075088][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.095687][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.109792][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.117714][ T9421] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 280.279318][ T9218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.305601][ T9218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.323251][ T9218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.335794][ T9218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.557366][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.565437][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.585725][ T5274] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 280.717570][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.746448][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.748157][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 280.778672][ T5274] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 280.802046][ T5274] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.839768][ T5274] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.886067][ T5274] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.913879][ T5274] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.943166][ T9447] loop4: detected capacity change from 0 to 7 [ 280.959704][ T5274] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.983896][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.992470][ T9447] buffer_io_error: 18 callbacks suppressed [ 280.992492][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 280.992588][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 280.992669][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 280.992743][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 280.992835][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 280.992923][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.005339][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.134139][ T9447] ldm_validate_partition_table(): Disk read failed. [ 281.161743][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.181745][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.210982][ T9447] Buffer I/O error on dev loop4, logical block 0, async page read [ 281.255133][ T9447] Dev loop4: unable to read RDB block 0 [ 281.282479][ T9447] loop4: unable to read partition table [ 281.302664][ T9447] loop4: partition table beyond EOD, truncated [ 281.323637][ T5274] usb 1-1: usb_control_msg returned -32 [ 281.336015][ T9447] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 281.336015][ T9447] ) failed (rc=-5) [ 281.345064][ T5274] usbtmc 1-1:16.0: can't read capabilities [ 281.975922][ T8] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 282.116008][ T9478] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 282.145678][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 282.166647][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.212057][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.239300][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.283174][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.316998][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.349967][ T8] usb 2-1: config 0 descriptor?? [ 282.591691][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.608696][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.625443][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.651212][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.688374][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.710155][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.745940][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.753449][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.775837][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.788570][ T8] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 282.814124][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input14 [ 282.892292][ T8] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 282.943042][ T5274] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 283.133967][ T937] usb 2-1: USB disconnect, device number 40 [ 283.166379][ T9508] loop0: detected capacity change from 0 to 7 [ 283.184770][ T9508] Dev loop0: unable to read RDB block 7 [ 283.190535][ T9508] loop0: unable to read partition table [ 283.196851][ T9508] loop0: partition table beyond EOD, truncated [ 283.203103][ T9508] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 283.203103][ T9508] ) failed (rc=-5) [ 283.539697][ T5276] usb 1-1: USB disconnect, device number 33 [ 283.728064][ T9528] loop9: detected capacity change from 0 to 7 [ 283.737191][ T9525] validate_nla: 5 callbacks suppressed [ 283.743917][ T9525] netlink: 'syz.4.1342': attribute type 12 has an invalid length. [ 283.758626][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.770006][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.778638][ T9528] Dev loop9: unable to read RDB block 7 [ 283.780114][ T5274] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 283.795107][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.797342][ T9528] loop9: unable to read partition table [ 283.825384][ T9525] netlink: 'syz.4.1342': attribute type 1 has an invalid length. [ 283.835949][ T5274] usb 3-1: config 0 descriptor?? [ 283.871727][ T9528] loop9: partition table beyond EOD, truncated [ 283.889146][ T9533] netlink: 'syz.1.1345': attribute type 5 has an invalid length. [ 283.899083][ T9528] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 283.899083][ T9528] ) failed (rc=-5) [ 283.928762][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 284.042092][ T9541] loop4: detected capacity change from 0 to 7 [ 284.083057][ T9541] ldm_validate_partition_table(): Disk read failed. [ 284.209498][ T9541] Dev loop4: unable to read RDB block 0 [ 284.221240][ T9541] loop4: unable to read partition table [ 284.243340][ T9541] loop4: partition table beyond EOD, truncated [ 284.281748][ T9541] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 284.281748][ T9541] ) failed (rc=-5) [ 284.414259][ T9549] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.629003][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 284.872706][ T5231] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 285.544608][ T5274] usbhid 3-1:0.0: can't add hid device: -71 [ 285.565358][ T5274] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.616704][ T5274] usb 3-1: USB disconnect, device number 27 [ 285.800849][ T9596] loop4: detected capacity change from 0 to 7 [ 285.825045][ T9596] ldm_validate_partition_table(): Disk read failed. [ 285.863600][ T9596] Dev loop4: unable to read RDB block 0 [ 285.910799][ T9596] loop4: unable to read partition table [ 285.941578][ T9596] loop4: partition table beyond EOD, truncated [ 285.974507][ T9596] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 285.974507][ T9596] ) failed (rc=-5) [ 286.019067][ T5222] buffer_io_error: 32 callbacks suppressed [ 286.020351][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.066233][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.094089][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.121001][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.138034][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.221547][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.251709][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.263445][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.293814][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.311071][ T5222] Buffer I/O error on dev loop4, logical block 0, async page read [ 286.558261][ T9625] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 286.757818][ T9629] loop0: detected capacity change from 0 to 7 [ 286.823599][ T9629] Dev loop0: unable to read RDB block 7 [ 286.901264][ T9629] loop0: unable to read partition table [ 286.935801][ T9629] loop0: partition table beyond EOD, truncated [ 286.961862][ T9629] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 286.961862][ T9629] ) failed (rc=-5) [ 287.115605][ T937] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 287.299967][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 287.357379][ T937] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 287.396023][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.417105][ T937] usb 5-1: Product: syz [ 287.421337][ T937] usb 5-1: Manufacturer: syz [ 287.435079][ T937] usb 5-1: SerialNumber: syz [ 287.450864][ T937] usb 5-1: config 0 descriptor?? [ 287.488918][ T937] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 288.015635][ T5277] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 288.123905][ T9652] loop9: detected capacity change from 0 to 7 [ 288.131855][ T9652] Dev loop9: unable to read RDB block 7 [ 288.138443][ T9652] loop9: unable to read partition table [ 288.145027][ T9652] loop9: partition table beyond EOD, truncated [ 288.151892][ T9652] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 288.151892][ T9652] ) failed (rc=-5) [ 288.188600][ T5277] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 288.220897][ T5277] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 288.237482][ T5277] usb 2-1: Manufacturer: syz [ 288.257268][ T5277] usb 2-1: config 0 descriptor?? [ 288.457159][ T9659] loop4: detected capacity change from 0 to 7 [ 288.474463][ T9659] ldm_validate_partition_table(): Disk read failed. [ 288.485424][ T9659] Dev loop4: unable to read RDB block 0 [ 288.530870][ T5277] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 288.544420][ T5277] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 288.553152][ T9659] loop4: unable to read partition table [ 288.563528][ T5277] usb 2-1: USB disconnect, device number 41 [ 288.570302][ T9659] loop4: partition table beyond EOD, truncated [ 288.619879][ T9659] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 288.619879][ T9659] ) failed (rc=-5) [ 289.036974][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 289.325832][ T5274] usb 5-1: USB disconnect, device number 29 [ 289.353039][ T5276] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 289.537696][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 289.553824][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 289.579797][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 289.598972][ T9692] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1389'. [ 289.600943][ T5276] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 289.620009][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.629141][ T5276] usb 2-1: Product: syz [ 289.634324][ T5276] usb 2-1: Manufacturer: syz [ 289.639099][ T5276] usb 2-1: SerialNumber: syz [ 289.672226][ T5276] usb 2-1: config 0 descriptor?? [ 289.716947][ T9686] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'. [ 289.735065][ T5276] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.744714][ T5276] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 290.054814][ T5274] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 290.178763][ T9708] loop4: detected capacity change from 0 to 7 [ 290.194680][ T9708] ldm_validate_partition_table(): Disk read failed. [ 290.212246][ T9708] Dev loop4: unable to read RDB block 0 [ 290.218098][ T5274] usb 3-1: device descriptor read/64, error -71 [ 290.239387][ T9708] loop4: unable to read partition table [ 290.258031][ T9708] loop4: partition table beyond EOD, truncated [ 290.273703][ T9708] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 290.273703][ T9708] ) failed (rc=-5) [ 290.377209][ T5276] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 290.384189][ T5276] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 290.455930][ T5274] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 290.625675][ T5274] usb 3-1: device descriptor read/64, error -71 [ 290.752388][ T5274] usb usb3-port1: attempt power cycle [ 291.007161][ T9724] loop0: detected capacity change from 0 to 7 [ 291.028923][ T9724] Dev loop0: unable to read RDB block 7 [ 291.034581][ T9724] loop0: unable to read partition table [ 291.075792][ T9724] loop0: partition table beyond EOD, truncated [ 291.095944][ T9724] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 291.095944][ T9724] ) failed (rc=-5) [ 291.109509][ T5274] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 291.155707][ T5274] usb 3-1: device descriptor read/8, error -71 [ 291.395658][ T5274] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 291.416724][ T5276] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 291.437296][ T5274] usb 3-1: device descriptor read/8, error -71 [ 291.565726][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 291.574342][ T5274] usb usb3-port1: unable to enumerate USB device [ 291.735599][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 291.751079][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 291.806763][ T8] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 291.841508][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.871414][ T8] usb 4-1: Product: syz [ 291.878050][ T8] usb 4-1: Manufacturer: syz [ 291.908722][ T8] usb 4-1: SerialNumber: syz [ 291.932120][ T8] usb 4-1: config 0 descriptor?? [ 292.260322][ T8] usb 4-1: Cannot retrieve CPort count: -71 [ 292.276275][ T8] usb 4-1: Cannot retrieve CPort count: -71 [ 292.342872][ T8] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 292.375870][ T8] usb 4-1: USB disconnect, device number 30 [ 292.665999][ T5276] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 292.676293][ T5276] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 292.698056][ T5276] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 292.723489][ T5276] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 292.742356][ T5276] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 292.769389][ T5276] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 292.882948][ T9751] ptrace attach of "./syz-executor exec"[9756] was attempted by ""[9751] [ 292.966203][ T9757] loop9: detected capacity change from 0 to 7 [ 293.007883][ T5276] usb 2-1: USB disconnect, device number 42 [ 293.014816][ T9757] Dev loop9: unable to read RDB block 7 [ 293.038594][ T9757] loop9: unable to read partition table [ 293.065067][ T9757] loop9: partition table beyond EOD, truncated [ 293.089660][ T9757] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 293.089660][ T9757] ) failed (rc=-5) [ 293.435980][ T9752] coredump: 374(syz.4.1406): interrupted: fatal signal pending [ 293.443780][ T9752] coredump: 374(syz.4.1406): written to core: VMAs: 35, size 97345536; core: 2257918 bytes, pos 2891776 [ 293.799812][ T9771] loop4: detected capacity change from 0 to 7 [ 293.826869][ T9771] buffer_io_error: 28 callbacks suppressed [ 293.826889][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 293.860609][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 293.878795][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 293.892319][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 293.921382][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 293.960372][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 293.975827][ T5276] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 293.994804][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 294.039730][ T9771] ldm_validate_partition_table(): Disk read failed. [ 294.047895][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 294.064295][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 294.080427][ T9771] Buffer I/O error on dev loop4, logical block 0, async page read [ 294.130461][ T9771] Dev loop4: unable to read RDB block 0 [ 294.151615][ T9771] loop4: unable to read partition table [ 294.181665][ T9771] loop4: partition table beyond EOD, truncated [ 294.205822][ T9771] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 294.205822][ T9771] ) failed (rc=-5) [ 294.446804][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 294.487400][ T5276] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.498989][ T5276] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.509648][ T5276] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.519621][ T5276] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.532826][ T5276] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 294.543072][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.780691][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.802368][ T9791] loop4: detected capacity change from 0 to 7 [ 294.821370][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.826964][ T9791] ldm_validate_partition_table(): Disk read failed. [ 294.837782][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.862810][ T9791] Dev loop4: unable to read RDB block 0 [ 294.871748][ T9791] loop4: unable to read partition table [ 294.886569][ T9791] loop4: partition table beyond EOD, truncated [ 294.902451][ T9791] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 294.902451][ T9791] ) failed (rc=-5) [ 294.902563][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.987214][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.079637][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.129825][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.266103][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.275256][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.349886][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.458003][ T5276] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 295.477408][ T5276] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 295.515594][ T5276] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 295.522585][ T5276] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 295.552984][ T5276] ntrig 0003:1B96:000A.000A: unknown main item tag 0x0 [ 295.606305][ T5276] ntrig 0003:1B96:000A.000A: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 295.878700][ T5281] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 295.929058][ T8] usb 3-1: USB disconnect, device number 32 [ 296.060650][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 296.104741][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.135820][ T5281] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 296.165668][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.215578][ T5281] usb 4-1: config 0 descriptor?? [ 296.525807][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.536662][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.546398][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.554638][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.566708][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.577777][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.602452][ T9756] coredump: 376(syz.4.1406): written to core: VMAs: 37, size 97476608; core: 60159086 bytes, pos 97484800 [ 297.035659][ T5276] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 297.360502][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 297.417097][ T9840] loop9: detected capacity change from 0 to 7 [ 297.475898][ T9840] Dev loop9: unable to read RDB block 7 [ 297.516375][ T9840] loop9: unable to read partition table [ 297.566919][ T9840] loop9: partition table beyond EOD, truncated [ 297.575765][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 297.648107][ T9840] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 297.648107][ T9840] ) failed (rc=-5) [ 297.663586][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.738300][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.781017][ T9823] bridge_slave_0: entered allmulticast mode [ 297.805884][ T8] usb 3-1: device descriptor read/64, error -71 [ 297.844976][ T9823] bridge_slave_0: entered promiscuous mode [ 297.878839][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.918358][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.937380][ T9823] bridge_slave_1: entered allmulticast mode [ 297.947612][ T9823] bridge_slave_1: entered promiscuous mode [ 298.045764][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 298.101021][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.144083][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.262250][ T8] usb 3-1: device descriptor read/64, error -71 [ 298.303181][ T9823] team0: Port device team_slave_0 added [ 298.337420][ T9823] team0: Port device team_slave_1 added [ 298.391212][ T8] usb usb3-port1: attempt power cycle [ 298.422841][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.467256][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.493270][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.522262][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.613957][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.720148][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.757858][ T5231] Bluetooth: hci0: command tx timeout [ 298.775866][ T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 298.806383][ T8] usb 3-1: device descriptor read/8, error -71 [ 298.823454][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.916196][ T5281] usbhid 4-1:0.0: can't add hid device: -71 [ 298.917046][ T9823] hsr_slave_0: entered promiscuous mode [ 298.925863][ T5281] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 298.992660][ T9823] hsr_slave_1: entered promiscuous mode [ 299.021651][ T9823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.045569][ T9823] Cannot create hsr debugfs directory [ 299.055672][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 299.065642][ T5281] usb 4-1: USB disconnect, device number 31 [ 299.131418][ T8] usb 3-1: device descriptor read/8, error -71 [ 299.267324][ T8] usb usb3-port1: unable to enumerate USB device [ 299.443311][ T9823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.485602][ T5281] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 299.653628][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 299.688508][ T9823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.706622][ T5281] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 299.716067][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.724194][ T5281] usb 4-1: Product: syz [ 299.750141][ T5281] usb 4-1: Manufacturer: syz [ 299.754800][ T5281] usb 4-1: SerialNumber: syz [ 299.801750][ T5281] usb 4-1: config 0 descriptor?? [ 299.820781][ T5281] gspca_main: spca500-2.14.0 probing 046d:0900 [ 299.878257][ T9823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.088721][ T9823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.408537][ T9823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.438784][ T9823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.459621][ T9823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.490999][ T9823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.788163][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.825988][ T5277] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 300.829115][ T5231] Bluetooth: hci0: command tx timeout [ 300.887066][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.953859][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.961505][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.989201][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.001933][ T5277] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 301.022461][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.041203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.048939][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.059742][ T5277] usb 2-1: config 0 descriptor?? [ 301.342413][ T9874] loop4: detected capacity change from 0 to 7 [ 301.362832][ T9874] buffer_io_error: 28 callbacks suppressed [ 301.362853][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.387252][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.412610][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.421965][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.433539][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.455806][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.464077][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.472734][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.490564][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.524566][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.553478][ T9874] ldm_validate_partition_table(): Disk read failed. [ 301.583458][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.602027][ T9823] veth0_vlan: entered promiscuous mode [ 301.611785][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.639578][ T9874] Buffer I/O error on dev loop4, logical block 0, async page read [ 301.654725][ T9823] veth1_vlan: entered promiscuous mode [ 301.665789][ T9874] Dev loop4: unable to read RDB block 0 [ 301.688613][ T9874] loop4: unable to read partition table [ 301.701791][ T9874] loop4: partition table beyond EOD, truncated [ 301.718698][ T9874] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 301.718698][ T9874] ) failed (rc=-5) [ 301.733828][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.737781][ T9823] veth0_macvtap: entered promiscuous mode [ 301.779971][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.792518][ T9823] veth1_macvtap: entered promiscuous mode [ 301.840589][ T5277] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 301.875152][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.882229][ T5277] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input16 [ 301.925674][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.954632][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.976002][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.986433][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.997952][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.008507][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.025140][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.039148][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.051755][ T9884] loop4: detected capacity change from 0 to 7 [ 302.059506][ T9884] ldm_validate_partition_table(): Disk read failed. [ 302.066542][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.077900][ T9884] Dev loop4: unable to read RDB block 0 [ 302.083747][ T9884] loop4: unable to read partition table [ 302.089725][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.105391][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.108160][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.147543][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.151658][ T5277] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 302.186824][ T9884] loop4: partition table beyond EOD, truncated [ 302.190488][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.193241][ T9884] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 302.193241][ T9884] ) failed (rc=-5) [ 302.217727][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.217753][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.245763][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.261142][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.298083][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.304287][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.316918][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.333283][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.344513][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.357886][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.369556][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.382002][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.400672][ T9823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.409950][ T9823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.419533][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.445627][ T9823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.454403][ T9823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.471937][ T5275] usb 2-1: USB disconnect, device number 43 [ 302.777200][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.794311][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.890381][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.904891][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.905848][ T5231] Bluetooth: hci0: command tx timeout [ 302.992545][ T5274] usb 4-1: USB disconnect, device number 32 [ 303.164111][ T9896] loop0: detected capacity change from 0 to 7 [ 303.200314][ T9896] Dev loop0: unable to read RDB block 7 [ 303.218447][ T9896] loop0: unable to read partition table [ 303.238605][ T9896] loop0: partition table beyond EOD, truncated [ 303.257861][ T9896] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 303.257861][ T9896] ) failed (rc=-5) [ 303.519232][ T9901] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1454'. [ 303.536613][ T9901] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1454'. [ 304.537092][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 304.537113][ T29] audit: type=1326 audit(1727068758.466:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.633694][ T29] audit: type=1326 audit(1727068758.466:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.760709][ T29] audit: type=1326 audit(1727068758.506:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.799260][ T29] audit: type=1326 audit(1727068758.506:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.824332][ T29] audit: type=1326 audit(1727068758.506:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.849166][ T29] audit: type=1326 audit(1727068758.516:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.872938][ T29] audit: type=1326 audit(1727068758.516:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.957107][ T29] audit: type=1326 audit(1727068758.516:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 304.997703][ T5231] Bluetooth: hci0: command tx timeout [ 305.005563][ T29] audit: type=1326 audit(1727068758.526:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 305.030066][ T29] audit: type=1326 audit(1727068758.526:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc665b7def9 code=0x7ffc0000 [ 305.745649][ T5277] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 305.950940][ T5277] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.985090][ T5277] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 306.008785][ T5277] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 306.045695][ T5277] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 306.085589][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.135318][ T9949] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.167852][ T5277] hub 5-1:1.0: bad descriptor, ignoring hub [ 306.191256][ T5277] hub 5-1:1.0: probe with driver hub failed with error -5 [ 306.222478][ T5277] cdc_wdm 5-1:1.0: skipping garbage [ 306.244696][ T5277] cdc_wdm 5-1:1.0: skipping garbage [ 306.274980][ T5277] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 306.315605][ T5277] cdc_wdm 5-1:1.0: Unknown control protocol [ 306.531613][ T5275] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 306.634446][ T9966] Cannot find add_set index 0 as target [ 306.718227][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.756256][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.791275][ T5275] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 306.811091][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.852157][ T5275] usb 3-1: config 0 descriptor?? [ 306.875255][ T9949] usb 5-1: reset full-speed USB device number 31 using dummy_hcd [ 307.081058][ T9964] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.131025][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.137955][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.144348][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.151074][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.157416][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.160915][ T9979] loop9: detected capacity change from 0 to 7 [ 307.164033][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.164254][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.182853][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.189343][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.196094][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.202401][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.209268][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.215637][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.222280][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.228707][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.235373][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.241746][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.248425][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.254769][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 307.261396][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 307.325095][ T9979] Dev loop9: unable to read RDB block 7 [ 307.355647][ T9979] loop9: unable to read partition table [ 307.362091][ T9979] loop9: partition table beyond EOD, truncated [ 307.368814][ T9979] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 307.368814][ T9979] ) failed (rc=-5) [ 307.558845][ T5277] usb 5-1: USB disconnect, device number 31 [ 309.217335][ T5275] usbhid 3-1:0.0: can't add hid device: -71 [ 309.233976][ T5275] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.273047][ T5275] usb 3-1: USB disconnect, device number 37 [ 310.047456][T10025] trusted_key: encrypted_key: insufficient parameters specified [ 310.189081][T10029] loop4: detected capacity change from 0 to 7 [ 310.220873][T10029] buffer_io_error: 18 callbacks suppressed [ 310.220887][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.245751][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.285711][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.314692][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.358553][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.367666][ T5281] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 310.402528][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.411282][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.422145][T10029] ldm_validate_partition_table(): Disk read failed. [ 310.461840][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.494305][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.533666][T10029] Buffer I/O error on dev loop4, logical block 0, async page read [ 310.555688][T10029] Dev loop4: unable to read RDB block 0 [ 310.563756][T10029] loop4: unable to read partition table [ 310.580802][T10029] loop4: partition table beyond EOD, truncated [ 310.604020][T10029] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 310.604020][T10029] ) failed (rc=-5) [ 310.716164][ T5281] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.745646][ T5281] usb 2-1: not running at top speed; connect to a high speed hub [ 310.756903][ T5281] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 239, using maximum allowed: 30 [ 310.785166][ T5281] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 352, setting to 64 [ 310.825203][ T5281] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 310.838945][ T5276] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 310.881213][ T5281] usb 2-1: config 1 interface 0 has no altsetting 0 [ 310.901316][ T5281] usb 2-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.40 [ 310.911246][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.947590][ T5281] usb 2-1: Product: syz [ 310.964054][ T5281] usb 2-1: Manufacturer: syz [ 310.972149][ T5281] usb 2-1: SerialNumber: syz [ 311.000172][T10026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 311.006141][T10036] loop4: detected capacity change from 0 to 7 [ 311.017811][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.022977][T10036] ldm_validate_partition_table(): Disk read failed. [ 311.031135][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.047774][ T5276] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 311.057226][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.072032][ T5276] usb 1-1: config 0 descriptor?? [ 311.117799][T10036] Dev loop4: unable to read RDB block 0 [ 311.123914][T10036] loop4: unable to read partition table [ 311.216102][T10036] loop4: partition table beyond EOD, truncated [ 311.242989][T10036] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 311.242989][T10036] ) failed (rc=-5) [ 311.423964][ T5281] usbhid 2-1:1.0: can't add hid device: -71 [ 311.441225][ T5281] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 311.473831][ T5281] usb 2-1: USB disconnect, device number 44 [ 311.502283][ T5276] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 312.521109][ T52] bridge_slave_1: left allmulticast mode [ 312.552473][ T52] bridge_slave_1: left promiscuous mode [ 312.578806][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.595636][ T5277] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 312.629386][ T52] bridge_slave_0: left allmulticast mode [ 312.642664][ T52] bridge_slave_0: left promiscuous mode [ 312.655547][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.660754][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 312.660773][ T29] audit: type=1326 audit(1727068766.596:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 312.700488][ T29] audit: type=1326 audit(1727068766.616:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 312.723756][ T29] audit: type=1326 audit(1727068766.616:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 312.768567][ T29] audit: type=1326 audit(1727068766.616:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 312.779406][ T5277] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 312.839227][ T5277] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 312.843740][ T29] audit: type=1326 audit(1727068766.616:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 312.859873][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.896155][ T5277] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 312.905298][ T29] audit: type=1326 audit(1727068766.616:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.3.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 312.961998][ T5277] usb 5-1: config 0 has no interface number 0 [ 312.968631][ T5277] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 313.045175][ T5277] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 313.067175][ T5277] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 313.078453][ T5277] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.092859][ T5277] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 313.102077][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.113567][ T5277] usb 5-1: config 0 descriptor?? [ 313.127794][ T5277] gspca_main: spca561-2.14.0 probing abcd:cdee [ 313.152412][T10062] loop0: detected capacity change from 0 to 7 [ 313.174763][T10062] Dev loop0: unable to read RDB block 7 [ 313.183307][T10062] loop0: unable to read partition table [ 313.199554][T10062] loop0: partition table beyond EOD, truncated [ 313.210249][T10062] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 313.210249][T10062] ) failed (rc=-5) [ 313.413767][ T5277] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 313.426378][ T5277] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.433441][ T5277] usb 5-1: MIDIStreaming interface descriptor not found [ 313.494721][ T8] usb 1-1: USB disconnect, device number 34 [ 313.615156][ T5277] usb 5-1: USB disconnect, device number 32 [ 314.058428][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.102716][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.149808][ T52] bond0 (unregistering): Released all slaves [ 314.455053][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1509'. [ 314.680409][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1509'. [ 315.369487][ T52] hsr_slave_0: left promiscuous mode [ 315.404394][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.425168][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.473220][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.491661][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.591671][ T52] veth1_macvtap: left promiscuous mode [ 315.610254][ T52] veth0_macvtap: left promiscuous mode [ 315.629091][ T52] veth1_vlan: left promiscuous mode [ 315.650457][ T52] veth0_vlan: left promiscuous mode [ 316.342750][T10123] tipc: Can't bind to reserved service type 0 [ 316.357355][T10123] program syz.1.1523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.813047][ T29] audit: type=1326 audit(1727068770.716:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.3.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 316.835851][ T29] audit: type=1326 audit(1727068770.716:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.3.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 316.858430][ T29] audit: type=1326 audit(1727068770.716:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.3.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 316.881549][ T29] audit: type=1326 audit(1727068770.716:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.3.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 317.268124][T10132] fuse: Invalid uid '0x0000000000000003' [ 317.427828][T10137] loop9: detected capacity change from 0 to 7 [ 317.440513][T10137] Dev loop9: unable to read RDB block 7 [ 317.446377][T10137] loop9: unable to read partition table [ 317.452261][T10137] loop9: partition table beyond EOD, truncated [ 317.461810][ T52] team0 (unregistering): Port device team_slave_1 removed [ 317.466976][T10137] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 317.466976][T10137] ) failed (rc=-5) [ 317.502126][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.508910][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.586409][ T52] team0 (unregistering): Port device team_slave_0 removed [ 317.595797][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 317.781853][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 317.798429][ T8] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 317.806566][ T8] usb 1-1: config 0 has no interface number 0 [ 317.887295][ T8] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 317.906513][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.914791][ T8] usb 1-1: Product: syz [ 317.920131][ T8] usb 1-1: Manufacturer: syz [ 317.932916][ T8] usb 1-1: SerialNumber: syz [ 317.942586][ T8] usb 1-1: config 0 descriptor?? [ 317.964402][ T8] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 318.878948][ T5275] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 319.108212][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.131669][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.172703][ T5275] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 319.203156][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.256008][ T5275] usb 5-1: config 0 descriptor?? [ 319.545755][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 319.560143][T10167] loop4: detected capacity change from 0 to 7 [ 319.564313][T10169] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1540'. [ 319.585044][T10167] buffer_io_error: 18 callbacks suppressed [ 319.585065][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.696593][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.710479][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.719236][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.738009][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.758337][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.772373][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.781884][T10167] ldm_validate_partition_table(): Disk read failed. [ 319.792035][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.811814][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.824538][T10167] Buffer I/O error on dev loop4, logical block 0, async page read [ 319.840770][T10167] Dev loop4: unable to read RDB block 0 [ 319.850640][T10167] loop4: unable to read partition table [ 319.859035][T10167] loop4: partition table beyond EOD, truncated [ 319.869619][ T5276] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 319.875636][T10167] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 319.875636][T10167] ) failed (rc=-5) [ 320.026236][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 320.036686][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 320.059652][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 320.071172][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.081280][ T5276] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.091827][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 320.102365][ T5276] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 320.112617][ T5276] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 320.122100][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.135056][ T5276] usb 4-1: config 0 descriptor?? [ 320.141024][T10169] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.162410][T10171] loop4: detected capacity change from 0 to 7 [ 320.171568][ T5231] Bluetooth: hci5: urb ffff88802ba0a200 submission failed (90) [ 320.183987][T10171] ldm_validate_partition_table(): Disk read failed. [ 320.192056][T10171] Dev loop4: unable to read RDB block 0 [ 320.198422][T10171] loop4: unable to read partition table [ 320.204642][T10171] loop4: partition table beyond EOD, truncated [ 320.215033][T10171] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 320.215033][T10171] ) failed (rc=-5) [ 320.379659][ T5276] usb 4-1: USB disconnect, device number 33 [ 321.033097][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 321.033117][ T29] audit: type=1326 audit(1727068774.966:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.065336][ T29] audit: type=1326 audit(1727068774.996:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.088203][ T29] audit: type=1326 audit(1727068774.996:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.110908][ T29] audit: type=1326 audit(1727068774.996:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.133533][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.140318][ T29] audit: type=1326 audit(1727068774.996:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.162829][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.170757][ T29] audit: type=1326 audit(1727068774.996:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.195127][ T8] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -110) [ 321.208915][ T8] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -32) [ 321.220690][ T8] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -32) [ 321.231154][ T8] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -32) [ 321.241550][ T8] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -32) [ 321.253077][ T8] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -32) [ 321.264036][ T8] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -32) [ 321.289474][ T8] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -32) [ 321.299482][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 321.318918][ T8] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -32) [ 321.330904][ T8] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 321.352471][ T8] usb 1-1: USB disconnect, device number 35 [ 321.664655][ T5275] usbhid 5-1:0.0: can't add hid device: -71 [ 321.675324][ T5275] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.752447][ T5275] usb 5-1: USB disconnect, device number 33 [ 321.914687][ T29] audit: type=1326 audit(1727068775.846:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 321.937680][ T29] audit: type=1326 audit(1727068775.846:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 322.192725][T10205] loop0: detected capacity change from 0 to 7 [ 322.279891][T10205] Dev loop0: unable to read RDB block 7 [ 322.301256][T10205] loop0: unable to read partition table [ 322.302852][ T29] audit: type=1326 audit(1727068776.226:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 322.329303][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.425993][ T29] audit: type=1326 audit(1727068776.236:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10184 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa999d7def9 code=0x7ffc0000 [ 322.426166][T10205] loop0: partition table beyond EOD, [ 322.448372][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.515711][T10205] truncated [ 322.533397][T10205] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 322.533397][T10205] ) failed (rc=-5) [ 327.955325][ T5274] sched: DL replenish lagged too much [ 328.499682][ T5274] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 329.787557][ T5233] Bluetooth: hci2: command 0x0405 tx timeout [ 330.134425][T10268] loop9: detected capacity change from 0 to 7 [ 330.140762][ T5274] usb 2-1: device descriptor read/64, error -71 [ 330.153757][T10268] Dev loop9: unable to read RDB block 7 [ 330.162299][T10268] loop9: unable to read partition table [ 330.176245][T10268] loop9: partition table beyond EOD, truncated [ 330.184195][T10268] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§–ƒÝ¡¯¨â·û [ 330.184195][T10268] ) failed (rc=-5) [ 330.335704][ T5224] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 330.405853][ T5274] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 330.506555][ T5224] usb 1-1: Using ep0 maxpacket: 16 [ 330.530721][ T5224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.561590][ T5224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.571983][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 330.599446][ T5224] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.625613][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.657435][ T5224] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 330.677803][ T5274] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 330.702114][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.712715][ T5224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.738934][ T5274] usb 2-1: Product: syz [ 330.756030][ T5274] usb 2-1: Manufacturer: syz [ 330.760865][ T5274] usb 2-1: SerialNumber: syz [ 330.797774][ T5274] usb 2-1: config 0 descriptor?? [ 330.804088][ T5224] usb 1-1: config 0 descriptor?? [ 330.837938][ T5274] pvrusb2: Hardware description: Terratec Grabster AV400 [ 330.885952][ T5274] pvrusb2: ********** [ 330.903207][ T5274] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 330.934725][ T5274] pvrusb2: Important functionality might not be entirely working. [ 330.966176][ T5274] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 331.011683][ T5274] pvrusb2: ********** [ 331.050164][ T2037] pvrusb2: Invalid write control endpoint [ 331.292264][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.321405][ T2037] pvrusb2: Invalid write control endpoint [ 331.348100][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.356025][ T2037] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 331.383059][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.395871][ T2037] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 331.428891][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.445525][ T2037] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 331.472703][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.480894][ T2037] pvrusb2: Device being rendered inoperable [ 331.497580][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.532859][ T2037] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 331.540611][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.568968][ T2037] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 331.601081][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.637410][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.663897][ T2037] pvrusb2: Attached sub-driver cx25840 [ 331.670136][ T5224] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 331.682622][ T2037] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 331.728670][ T5224] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input18 [ 331.744169][ T2037] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 331.996774][ T5224] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 332.061927][ T5224] usb 1-1: USB disconnect, device number 36 [ 335.906837][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.927077][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.942665][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.951515][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.959509][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.967467][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.702659][T10293] netlink: 'syz.0.1581': attribute type 2 has an invalid length. [ 337.715666][T10293] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 337.723462][T10293] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1581'. [ 338.036352][ T5233] Bluetooth: hci5: command tx timeout [ 338.901133][T10310] loop4: detected capacity change from 0 to 7 [ 338.917289][T10310] buffer_io_error: 18 callbacks suppressed [ 338.917310][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.938894][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.950971][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.963136][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.975361][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 338.987937][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.005800][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.019316][T10310] ldm_validate_partition_table(): Disk read failed. [ 339.029675][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.043185][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.054927][T10310] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.067163][T10310] Dev loop4: unable to read RDB block 0 [ 339.073141][T10310] loop4: unable to read partition table [ 339.085795][T10310] loop4: partition table beyond EOD, truncated [ 339.099143][T10310] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 339.099143][T10310] ) failed (rc=-5) [ 340.105741][ T5233] Bluetooth: hci5: command tx timeout [ 340.712709][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.730421][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.742899][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.756386][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.765570][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.774100][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.930935][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.942139][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.950807][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.965769][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.976382][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.984153][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.286137][T10327] loop4: detected capacity change from 0 to 7 [ 341.300132][T10327] ldm_validate_partition_table(): Disk read failed. [ 341.322382][T10327] Dev loop4: unable to read RDB block 0 [ 341.353096][T10327] loop4: unable to read partition table [ 341.381751][T10327] loop4: partition table beyond EOD, truncated [ 341.406489][T10327] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 341.406489][T10327] ) failed (rc=-5) [ 341.750191][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.761001][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.770434][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.779790][ T5231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.799448][ T5231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.807756][ T5231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.185801][ T5231] Bluetooth: hci5: command tx timeout [ 342.195687][ T5274] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 342.360320][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.379221][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.391624][ T5274] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 342.409134][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.424134][ T5274] usb 1-1: config 0 descriptor?? [ 342.826064][ T5231] Bluetooth: hci4: command tx timeout [ 343.072632][ T5233] Bluetooth: hci6: command tx timeout [ 343.875991][ T5231] Bluetooth: hci7: command tx timeout [ 344.276881][ T5231] Bluetooth: hci5: command tx timeout [ 344.905819][ T5231] Bluetooth: hci4: command tx timeout [ 345.145674][ T5231] Bluetooth: hci6: command tx timeout [ 345.945803][ T5231] Bluetooth: hci7: command tx timeout [ 346.995881][ T5231] Bluetooth: hci4: command tx timeout [ 347.226056][ T5231] Bluetooth: hci6: command tx timeout [ 347.368764][ T5274] usbhid 1-1:0.0: can't add hid device: -71 [ 347.374961][ T5274] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 347.493439][ T5274] usb 1-1: USB disconnect, device number 37 [ 347.828830][T10325] chnl_net:caif_netlink_parms(): no params data found [ 348.025847][ T5231] Bluetooth: hci7: command tx timeout [ 348.566097][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.599772][T10325] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.065885][ T5231] Bluetooth: hci4: command tx timeout [ 349.305766][ T5231] Bluetooth: hci6: command tx timeout [ 349.790932][T10325] bridge_slave_0: entered allmulticast mode [ 350.105787][ T5231] Bluetooth: hci7: command tx timeout [ 351.031889][T10325] bridge_slave_0: entered promiscuous mode [ 351.048807][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.096299][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.103727][T10325] bridge_slave_1: entered allmulticast mode [ 351.206381][T10325] bridge_slave_1: entered promiscuous mode [ 351.353346][T10353] loop0: detected capacity change from 0 to 7 [ 351.375056][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.395039][T10353] Dev loop0: unable to read RDB block 7 [ 351.402624][T10353] loop0: unable to read partition table [ 351.418725][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.428869][T10353] loop0: partition table beyond EOD, truncated [ 351.442576][T10353] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 351.442576][T10353] ) failed (rc=-5) [ 351.609534][T10325] team0: Port device team_slave_0 added [ 351.633952][T10325] team0: Port device team_slave_1 added [ 351.902904][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.930673][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.023349][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.079229][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.098977][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.156966][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.463944][T10325] hsr_slave_0: entered promiscuous mode [ 352.502831][T10325] hsr_slave_1: entered promiscuous mode [ 352.589425][T10325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.611479][T10325] Cannot create hsr debugfs directory [ 353.204480][T10325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.475100][T10325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.894089][T10325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.212919][T10325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.538234][T10325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.560305][T10325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.596536][T10325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.629534][T10325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.675080][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.682758][T10325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.690384][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.697721][T10325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.808517][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.849618][T10325] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.970380][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.042856][T10325] veth0_vlan: entered promiscuous mode [ 355.076212][T10325] veth1_vlan: entered promiscuous mode [ 355.133595][T10325] veth0_macvtap: entered promiscuous mode [ 355.162135][T10325] veth1_macvtap: entered promiscuous mode [ 355.205770][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.227430][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.243965][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.257485][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.277271][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.298616][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.315199][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.336300][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.353784][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.364816][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.392914][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.414158][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.427766][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.443673][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.458442][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.479356][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.499848][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.513503][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.529525][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.543863][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.562097][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.584992][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.604994][T10325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.624407][T10325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.636275][T10325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.645363][T10325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.822143][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.853496][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.894971][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.914908][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.915673][ T8] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 361.075744][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 361.092517][ T8] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 361.110974][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 361.122416][ T8] usb 5-1: Product: syz [ 361.135694][ T8] usb 5-1: Manufacturer: syz [ 361.141639][ T8] usb 5-1: SerialNumber: syz [ 361.154226][ T8] usb 5-1: config 0 descriptor?? [ 361.173415][ T8] usbtest 5-1:0.0: FX2 device [ 361.181190][ T8] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 361.769555][ T5275] usb 5-1: USB disconnect, device number 34 [ 363.704519][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.715914][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.725540][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.733821][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.747632][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 363.755256][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.114820][T10401] chnl_net:caif_netlink_parms(): no params data found [ 364.417965][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.438466][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.452864][T10401] bridge_slave_0: entered allmulticast mode [ 364.464348][T10401] bridge_slave_0: entered promiscuous mode [ 364.480682][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.489401][ T5275] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 364.515767][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.533434][T10401] bridge_slave_1: entered allmulticast mode [ 364.544762][T10401] bridge_slave_1: entered promiscuous mode [ 364.644238][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.662309][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.671779][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 364.693257][ T5275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.723545][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 364.742700][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.768950][ T5275] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 364.809861][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.832176][ T5275] usb 5-1: Product: syz [ 364.843591][T10401] team0: Port device team_slave_0 added [ 364.857265][ T5275] usb 5-1: Manufacturer: syz [ 364.865768][ T5275] usb 5-1: SerialNumber: syz [ 364.877897][T10401] team0: Port device team_slave_1 added [ 364.897245][ T5275] usb 5-1: config 0 descriptor?? [ 364.927277][ T5275] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 364.933785][ T5275] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 364.958965][ T5275] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 365.028851][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.046064][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.083650][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.100080][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.140177][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.207949][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.380612][T10401] hsr_slave_0: entered promiscuous mode [ 365.406387][T10401] hsr_slave_1: entered promiscuous mode [ 365.425790][ T5275] usb 5-1: USB disconnect, device number 35 [ 365.467422][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.483113][T10401] Cannot create hsr debugfs directory [ 365.788825][ T5233] Bluetooth: hci3: command tx timeout [ 367.867290][ T5233] Bluetooth: hci3: command tx timeout [ 369.946272][ T5233] Bluetooth: hci3: command tx timeout [ 372.027842][ T5233] Bluetooth: hci3: command tx timeout [ 377.176537][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 377.196742][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 377.207760][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 377.217885][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 377.228059][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 377.235579][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 378.913901][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.935609][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.305675][ T5233] Bluetooth: hci8: command tx timeout [ 381.388877][ T5233] Bluetooth: hci8: command tx timeout [ 383.465754][ T5233] Bluetooth: hci8: command tx timeout [ 385.545645][ T5233] Bluetooth: hci8: command tx timeout [ 398.286216][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 398.297190][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 398.306114][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 398.317548][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 398.333838][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 398.342157][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 400.426963][ T5231] Bluetooth: hci9: command tx timeout [ 401.237091][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 401.251321][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 401.260967][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 401.271354][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 401.280056][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 401.289169][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 402.283626][ T5231] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 402.293523][ T5231] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 402.305834][ T5231] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 402.315964][ T5231] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 402.323970][ T5231] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 402.332048][ T5231] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 402.505734][ T5231] Bluetooth: hci9: command tx timeout [ 403.385912][ T5231] Bluetooth: hci10: command tx timeout [ 404.425820][ T5231] Bluetooth: hci11: command tx timeout [ 404.585763][ T5231] Bluetooth: hci9: command tx timeout [ 405.466766][ T5231] Bluetooth: hci10: command tx timeout [ 406.505768][ T5231] Bluetooth: hci11: command tx timeout [ 406.665620][ T5231] Bluetooth: hci9: command tx timeout [ 407.545693][ T5231] Bluetooth: hci10: command tx timeout [ 408.585722][ T5231] Bluetooth: hci11: command tx timeout [ 409.627121][ T5231] Bluetooth: hci10: command tx timeout [ 410.665663][ T5231] Bluetooth: hci11: command tx timeout [ 421.952081][ T4619] Bluetooth: hci0: command 0x0406 tx timeout [ 424.346464][ T4619] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 424.358773][ T4619] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 424.367943][ T4619] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 424.389887][ T4619] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 424.397974][ T4619] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 424.415710][ T4619] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 426.505802][ T4619] Bluetooth: hci12: command tx timeout [ 428.585669][ T4619] Bluetooth: hci12: command tx timeout [ 430.665659][ T4619] Bluetooth: hci12: command tx timeout [ 432.745675][ T4619] Bluetooth: hci12: command tx timeout [ 438.266057][ T5231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 438.278844][ T5231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 438.287920][ T5231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 438.306102][ T5231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 438.319164][ T5231] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 438.327170][ T5231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 440.363867][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.370358][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.434356][ T5231] Bluetooth: hci13: command tx timeout [ 442.505818][ T5231] Bluetooth: hci13: command tx timeout [ 444.585828][ T5231] Bluetooth: hci13: command tx timeout [ 445.476536][ T5312] kworker/1:7 (5312) used greatest stack depth: 14616 bytes left [ 446.665802][ T5231] Bluetooth: hci13: command tx timeout [ 459.116236][ T4619] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 459.129150][ T4619] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 459.145823][ T4619] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 459.154129][ T4619] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 459.163526][ T4619] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 459.175666][ T4619] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 461.225869][ T4619] Bluetooth: hci14: command tx timeout [ 462.077493][ T5225] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 462.088022][ T5225] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 462.098563][ T5225] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 462.107929][ T5225] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 462.116203][ T5225] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 462.124382][ T5225] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 462.908391][ T4619] Bluetooth: hci4: command 0x0406 tx timeout [ 462.914535][ T4619] Bluetooth: hci5: command 0x0406 tx timeout [ 463.204110][ T5231] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 463.214642][ T5231] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 463.223676][ T5231] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 463.234695][ T5231] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 463.243111][ T5231] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 463.250641][ T5231] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 463.305720][ T5231] Bluetooth: hci14: command tx timeout [ 464.185859][ T5231] Bluetooth: hci15: command tx timeout [ 465.305776][ T5233] Bluetooth: hci16: command tx timeout [ 465.385697][ T5231] Bluetooth: hci14: command tx timeout [ 466.265587][ T5231] Bluetooth: hci15: command tx timeout [ 467.385579][ T5231] Bluetooth: hci16: command tx timeout [ 467.465820][ T5231] Bluetooth: hci14: command tx timeout [ 468.046970][ T5225] Bluetooth: hci7: command 0x0406 tx timeout [ 468.056615][ T5231] Bluetooth: hci6: command 0x0406 tx timeout [ 468.345537][ T5233] Bluetooth: hci15: command tx timeout [ 469.465600][ T5233] Bluetooth: hci16: command tx timeout [ 470.425677][ T5233] Bluetooth: hci15: command tx timeout [ 471.545581][ T5233] Bluetooth: hci16: command tx timeout [ 486.572035][ T5231] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 486.584830][ T5231] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 486.594267][ T5231] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 486.602762][ T5231] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 486.612975][ T5231] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 486.622047][ T5231] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 488.512923][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 488.665616][ T4619] Bluetooth: hci17: command tx timeout [ 490.745721][ T4619] Bluetooth: hci17: command tx timeout [ 492.825708][ T4619] Bluetooth: hci17: command tx timeout [ 494.905743][ T4619] Bluetooth: hci17: command tx timeout [ 497.945643][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 497.953441][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 497.985544][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.994287][ T30] task:kworker/u8:1 state:D stack:23072 pid:12 tgid:12 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 498.076773][ T30] Workqueue: netns cleanup_net [ 498.081687][ T30] Call Trace: [ 498.085095][ T30] [ 498.205438][ T30] __schedule+0x1895/0x4b30 [ 498.210242][ T30] ? __pfx___schedule+0x10/0x10 [ 498.215149][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.314023][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 498.338178][ T30] ? kthread_data+0x52/0xd0 [ 498.342782][ T30] ? schedule+0x90/0x320 [ 498.400329][ T30] ? wq_worker_sleeping+0x66/0x240 [ 498.420009][ T30] ? schedule+0x90/0x320 [ 498.453585][ T30] schedule+0x14b/0x320 [ 498.465586][ T30] schedule_preempt_disabled+0x13/0x30 [ 498.471316][ T30] __mutex_lock+0x6a7/0xd70 [ 498.520529][ T30] ? __mutex_lock+0x52a/0xd70 [ 498.555206][ T30] ? cangw_pernet_exit_batch+0x20/0x90 [ 498.583537][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 498.604465][ T30] ? cleanup_net+0x802/0xcc0 [ 498.635249][ T30] ? kfree+0x1a0/0x440 [ 498.654379][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 498.681389][ T30] cangw_pernet_exit_batch+0x20/0x90 [ 498.705486][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 498.712169][ T30] cleanup_net+0x89d/0xcc0 [ 498.731506][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 498.740822][ T30] ? process_scheduled_works+0x976/0x1850 [ 498.755865][ T30] process_scheduled_works+0xa63/0x1850 [ 498.761625][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.777717][ T30] ? assign_work+0x364/0x3d0 [ 498.782575][ T30] worker_thread+0x870/0xd30 [ 498.794871][ T30] ? __kthread_parkme+0x169/0x1d0 [ 498.801727][ T30] ? __pfx_worker_thread+0x10/0x10 [ 498.815648][ T30] kthread+0x2f0/0x390 [ 498.819812][ T30] ? __pfx_worker_thread+0x10/0x10 [ 498.825014][ T30] ? __pfx_kthread+0x10/0x10 [ 498.853891][ T30] ret_from_fork+0x4b/0x80 [ 498.863475][ T30] ? __pfx_kthread+0x10/0x10 [ 498.872130][ T30] ret_from_fork_asm+0x1a/0x30 [ 498.883520][ T30] [ 498.890664][ T30] INFO: task kworker/u8:2:35 blocked for more than 144 seconds. [ 498.903566][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 498.922846][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.943785][ T30] task:kworker/u8:2 state:D stack:20080 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 498.956972][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 498.963091][ T30] Call Trace: [ 498.975286][ T30] [ 498.978615][ T30] __schedule+0x1895/0x4b30 [ 498.983222][ T30] ? __pfx___schedule+0x10/0x10 [ 498.995479][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.000726][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 499.014683][ T30] ? kthread_data+0x52/0xd0 [ 499.019752][ T30] ? schedule+0x90/0x320 [ 499.024070][ T30] ? wq_worker_sleeping+0x66/0x240 [ 499.035881][ T30] ? schedule+0x90/0x320 [ 499.040304][ T30] schedule+0x14b/0x320 [ 499.044516][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.060886][ T30] __mutex_lock+0x6a7/0xd70 [ 499.084515][ T30] ? mark_lock+0x9a/0x360 [ 499.090882][ T30] ? __mutex_lock+0x52a/0xd70 [ 499.104185][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 499.110252][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.123939][ T30] addrconf_dad_work+0xd0/0x16f0 [ 499.129333][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 499.134939][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.152137][ T30] ? process_scheduled_works+0x976/0x1850 [ 499.161116][ T30] process_scheduled_works+0xa63/0x1850 [ 499.173271][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.182914][ T30] ? assign_work+0x364/0x3d0 [ 499.194956][ T30] worker_thread+0x870/0xd30 [ 499.202488][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 499.214739][ T30] ? __kthread_parkme+0x169/0x1d0 [ 499.222681][ T30] ? __pfx_worker_thread+0x10/0x10 [ 499.240545][ T30] kthread+0x2f0/0x390 [ 499.244706][ T30] ? __pfx_worker_thread+0x10/0x10 [ 499.260203][ T30] ? __pfx_kthread+0x10/0x10 [ 499.265013][ T30] ret_from_fork+0x4b/0x80 [ 499.274285][ T30] ? __pfx_kthread+0x10/0x10 [ 499.284082][ T30] ret_from_fork_asm+0x1a/0x30 [ 499.291353][ T30] [ 499.297118][ T30] INFO: task kworker/u8:7:4505 blocked for more than 144 seconds. [ 499.305076][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 499.322149][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.332546][ T30] task:kworker/u8:7 state:D stack:19888 pid:4505 tgid:4505 ppid:2 flags:0x00004000 [ 499.354817][ T30] Workqueue: events_unbound linkwatch_event [ 499.362016][ T30] Call Trace: [ 499.365360][ T30] [ 499.377483][ T30] __schedule+0x1895/0x4b30 [ 499.382078][ T30] ? __pfx___schedule+0x10/0x10 [ 499.395983][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.401188][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 499.417071][ T30] ? kthread_data+0x52/0xd0 [ 499.421663][ T30] ? schedule+0x90/0x320 [ 499.434730][ T30] ? wq_worker_sleeping+0x66/0x240 [ 499.440337][ T30] ? schedule+0x90/0x320 [ 499.456634][ T30] schedule+0x14b/0x320 [ 499.460968][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.477699][ T30] __mutex_lock+0x6a7/0xd70 [ 499.482299][ T30] ? __mutex_lock+0x52a/0xd70 [ 499.493606][ T30] ? linkwatch_event+0xe/0x60 [ 499.502514][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.514675][ T30] ? process_scheduled_works+0x976/0x1850 [ 499.523259][ T30] linkwatch_event+0xe/0x60 [ 499.534143][ T30] process_scheduled_works+0xa63/0x1850 [ 499.543882][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.555493][ T30] ? assign_work+0x364/0x3d0 [ 499.565540][ T30] worker_thread+0x870/0xd30 [ 499.570223][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 499.585596][ T30] ? __kthread_parkme+0x169/0x1d0 [ 499.590902][ T30] ? __pfx_worker_thread+0x10/0x10 [ 499.603667][ T30] kthread+0x2f0/0x390 [ 499.609462][ T30] ? __pfx_worker_thread+0x10/0x10 [ 499.614744][ T30] ? __pfx_kthread+0x10/0x10 [ 499.628615][ T30] ret_from_fork+0x4b/0x80 [ 499.633128][ T30] ? __pfx_kthread+0x10/0x10 [ 499.642988][ T30] ret_from_fork_asm+0x1a/0x30 [ 499.655029][ T30] [ 499.663759][ T30] INFO: task jbd2/sda1-8:4643 blocked for more than 145 seconds. [ 499.680488][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 499.693301][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.705800][ T30] task:jbd2/sda1-8 state:D stack:24528 pid:4643 tgid:4643 ppid:2 flags:0x00004000 [ 499.726797][ T30] Call Trace: [ 499.730153][ T30] [ 499.733128][ T30] __schedule+0x1895/0x4b30 [ 499.745490][ T30] ? __pfx___schedule+0x10/0x10 [ 499.750460][ T30] ? __pfx_lock_release+0x10/0x10 [ 499.766830][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 499.772930][ T30] ? schedule+0x90/0x320 [ 499.786218][ T30] schedule+0x14b/0x320 [ 499.790548][ T30] io_schedule+0x8d/0x110 [ 499.794936][ T30] bit_wait_io+0x12/0xd0 [ 499.811686][ T30] __wait_on_bit+0xb0/0x2f0 [ 499.820318][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 499.825351][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 499.840350][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 499.851845][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 499.864243][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 499.888725][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 499.895209][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 499.910387][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 499.920837][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 499.932033][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 499.941714][ T30] ? __timer_delete_sync+0x15c/0x310 [ 499.955504][ T30] ? __timer_delete_sync+0x25d/0x310 [ 499.966987][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 499.972712][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 499.988812][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 499.995247][ T30] ? prepare_to_wait+0x186/0x210 [ 500.010376][ T30] ? finish_wait+0xd4/0x1e0 [ 500.015023][ T30] kjournald2+0x41c/0x7b0 [ 500.022466][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.035209][ T30] ? __pfx_kjournald2+0x10/0x10 [ 500.044098][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 500.055954][ T30] ? __kthread_parkme+0x169/0x1d0 [ 500.070749][ T30] ? __pfx_kjournald2+0x10/0x10 [ 500.080589][ T30] kthread+0x2f0/0x390 [ 500.084751][ T30] ? __pfx_kjournald2+0x10/0x10 [ 500.096004][ T30] ? __pfx_kthread+0x10/0x10 [ 500.100694][ T30] ret_from_fork+0x4b/0x80 [ 500.105167][ T30] ? __pfx_kthread+0x10/0x10 [ 500.119223][ T30] ret_from_fork_asm+0x1a/0x30 [ 500.124100][ T30] [ 500.133539][ T30] INFO: task syz.3.1564:10240 blocked for more than 145 seconds. [ 500.144130][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 500.155460][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.172580][ T30] task:syz.3.1564 state:D stack:24376 pid:10240 tgid:10239 ppid:7459 flags:0x00004006 [ 500.198579][ T30] Call Trace: [ 500.201934][ T30] [ 500.204908][ T30] __schedule+0x1895/0x4b30 [ 500.215499][ T30] ? __pfx___schedule+0x10/0x10 [ 500.220444][ T30] ? __pfx_lock_release+0x10/0x10 [ 500.235102][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 500.241068][ T30] ? schedule+0x90/0x320 [ 500.253888][ T30] schedule+0x14b/0x320 [ 500.258517][ T30] schedule_preempt_disabled+0x13/0x30 [ 500.277266][ T30] __mutex_lock+0x6a7/0xd70 [ 500.284268][ T30] ? __mutex_lock+0x52a/0xd70 [ 500.295296][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 500.303200][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 500.315484][ T30] ? net_generic+0x1f/0x240 [ 500.320074][ T30] ppp_exit_net+0xe3/0x3d0 [ 500.324547][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 500.337411][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 500.342697][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 500.359181][ T30] setup_net+0x794/0x9e0 [ 500.363519][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 500.375505][ T30] ? __pfx_setup_net+0x10/0x10 [ 500.380377][ T30] copy_net_ns+0x33f/0x570 [ 500.395483][ T30] create_new_namespaces+0x425/0x7b0 [ 500.400886][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 500.415019][ T30] ksys_unshare+0x619/0xc10 [ 500.420001][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 500.425106][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.435451][ T30] ? do_syscall_64+0x100/0x230 [ 500.440304][ T30] __x64_sys_unshare+0x38/0x40 [ 500.445217][ T30] do_syscall_64+0xf3/0x230 [ 500.458354][ T30] ? clear_bhb_loop+0x35/0x90 [ 500.463144][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.477063][ T30] RIP: 0033:0x7fa999d7def9 [ 500.481551][ T30] RSP: 002b:00007fa99aaf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 500.498800][ T30] RAX: ffffffffffffffda RBX: 00007fa999f35f80 RCX: 00007fa999d7def9 [ 500.520326][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 500.533472][ T30] RBP: 00007fa999df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 500.546757][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.554802][ T30] R13: 0000000000000000 R14: 00007fa999f35f80 R15: 00007fa99a05fa28 [ 500.565928][ T30] [ 500.569018][ T30] INFO: task syz.1.1569:10254 blocked for more than 145 seconds. [ 500.589046][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 500.602716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.614353][ T30] task:syz.1.1569 state:D stack:26048 pid:10254 tgid:10253 ppid:9218 flags:0x00004002 [ 500.634965][ T30] Call Trace: [ 500.638695][ T30] [ 500.641680][ T30] __schedule+0x1895/0x4b30 [ 500.654785][ T30] ? __pfx___schedule+0x10/0x10 [ 500.659842][ T30] ? __pfx_lock_release+0x10/0x10 [ 500.664926][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 500.682669][ T30] ? schedule+0x90/0x320 [ 500.687415][ T30] schedule+0x14b/0x320 [ 500.691699][ T30] schedule_preempt_disabled+0x13/0x30 [ 500.708178][ T30] __mutex_lock+0x6a7/0xd70 [ 500.712792][ T30] ? __mutex_lock+0x52a/0xd70 [ 500.725288][ T30] ? tun_chr_close+0x3b/0x1b0 [ 500.730578][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 500.745832][ T30] ? __pfx_call_rcu+0x10/0x10 [ 500.750689][ T30] tun_chr_close+0x3b/0x1b0 [ 500.755249][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 500.769611][ T30] __fput+0x23f/0x880 [ 500.773750][ T30] task_work_run+0x24f/0x310 [ 500.790823][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 500.801305][ T30] ? __pfx_task_work_run+0x10/0x10 [ 500.811463][ T30] ? do_exit+0xa2a/0x28e0 [ 500.821179][ T30] ? kmem_cache_free+0x1a2/0x420 [ 500.834742][ T30] ? do_exit+0xa2a/0x28e0 [ 500.839618][ T30] do_exit+0xa2f/0x28e0 [ 500.843943][ T30] ? __pfx_do_exit+0x10/0x10 [ 500.859105][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 500.864758][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.879661][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.893895][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 500.902566][ T30] do_group_exit+0x207/0x2c0 [ 500.926487][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.931778][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 500.946242][ T30] get_signal+0x176f/0x1810 [ 500.950853][ T30] ? __pfx_get_signal+0x10/0x10 [ 500.964813][ T30] arch_do_signal_or_restart+0x96/0x860 [ 500.972069][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.994727][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.011396][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 501.021212][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 501.032061][ T30] do_syscall_64+0x100/0x230 [ 501.042087][ T30] ? clear_bhb_loop+0x35/0x90 [ 501.052017][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.061948][ T30] RIP: 0033:0x7f014b17def9 [ 501.072274][ T30] RSP: 002b:00007f014bf14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.092558][ T30] RAX: 0000000000000030 RBX: 00007f014b335f80 RCX: 00007f014b17def9 [ 501.103126][ T30] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000003 [ 501.121598][ T30] RBP: 00007f014b1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 501.133696][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.146074][ T30] R13: 0000000000000000 R14: 00007f014b335f80 R15: 00007f014b45fa28 [ 501.154237][ T30] [ 501.166945][ T30] INFO: task syz.2.1577:10272 blocked for more than 146 seconds. [ 501.174745][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 501.187336][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.205946][ T30] task:syz.2.1577 state:D stack:26304 pid:10272 tgid:10271 ppid:5917 flags:0x00004006 [ 501.223727][ T30] Call Trace: [ 501.229232][ T30] [ 501.232228][ T30] __schedule+0x1895/0x4b30 [ 501.245498][ T30] ? __pfx___schedule+0x10/0x10 [ 501.250441][ T30] ? __pfx_lock_release+0x10/0x10 [ 501.263323][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 501.271629][ T30] ? schedule+0x90/0x320 [ 501.283313][ T30] schedule+0x14b/0x320 [ 501.292558][ T30] schedule_preempt_disabled+0x13/0x30 [ 501.302633][ T30] __mutex_lock+0x6a7/0xd70 [ 501.317016][ T30] ? __mutex_lock+0x52a/0xd70 [ 501.321780][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 501.335829][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 501.340947][ T30] ? read_word_at_a_time+0xe/0x20 [ 501.355294][ T30] ? sized_strscpy+0x8d/0x220 [ 501.360392][ T30] ip_tunnel_init_net+0x20e/0x720 [ 501.373985][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 501.379897][ T30] ? ops_init+0x75/0x590 [ 501.384207][ T30] ops_init+0x31e/0x590 [ 501.400919][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 501.410604][ T30] setup_net+0x287/0x9e0 [ 501.414924][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 501.430645][ T30] ? __pfx_setup_net+0x10/0x10 [ 501.440521][ T30] copy_net_ns+0x33f/0x570 [ 501.445028][ T30] create_new_namespaces+0x425/0x7b0 [ 501.454383][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 501.465756][ T30] ksys_unshare+0x619/0xc10 [ 501.470417][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 501.484715][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 501.491210][ T30] ? do_syscall_64+0x100/0x230 [ 501.505480][ T30] __x64_sys_unshare+0x38/0x40 [ 501.510346][ T30] do_syscall_64+0xf3/0x230 [ 501.514907][ T30] ? clear_bhb_loop+0x35/0x90 [ 501.530804][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.539578][ T30] RIP: 0033:0x7fd2d1f7def9 [ 501.544064][ T30] RSP: 002b:00007fd2d2db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 501.562537][ T30] RAX: ffffffffffffffda RBX: 00007fd2d2135f80 RCX: 00007fd2d1f7def9 [ 501.573533][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 501.589220][ T30] RBP: 00007fd2d1ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 501.604188][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.619432][ T30] R13: 0000000000000000 R14: 00007fd2d2135f80 R15: 00007fd2d225fa28 [ 501.635562][ T30] [ 501.638664][ T30] INFO: task syz-executor:10287 blocked for more than 147 seconds. [ 501.657153][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 501.664593][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.681632][ T30] task:syz-executor state:D stack:26048 pid:10287 tgid:10287 ppid:1 flags:0x00004006 [ 501.696263][ T30] Call Trace: [ 501.701819][ T30] [ 501.704883][ T30] __schedule+0x1895/0x4b30 [ 501.716066][ T30] ? __pfx___schedule+0x10/0x10 [ 501.721198][ T30] ? __pfx_lock_release+0x10/0x10 [ 501.733970][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 501.741573][ T30] ? schedule+0x90/0x320 [ 501.754517][ T30] schedule+0x14b/0x320 [ 501.758903][ T30] schedule_preempt_disabled+0x13/0x30 [ 501.764512][ T30] __mutex_lock+0x6a7/0xd70 [ 501.783003][ T30] ? __mutex_lock+0x52a/0xd70 [ 501.795738][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.803106][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.815454][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 501.825573][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 501.830698][ T30] ? read_word_at_a_time+0xe/0x20 [ 501.845963][ T30] ? sized_strscpy+0x8d/0x220 [ 501.850740][ T30] ip_tunnel_init_net+0x20e/0x720 [ 501.864806][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 501.874142][ T30] ? ops_init+0x75/0x590 [ 501.885558][ T30] ops_init+0x31e/0x590 [ 501.889820][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 501.895258][ T30] setup_net+0x287/0x9e0 [ 501.911302][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 501.922171][ T30] ? __pfx_setup_net+0x10/0x10 [ 501.933309][ T30] copy_net_ns+0x33f/0x570 [ 501.941665][ T30] create_new_namespaces+0x425/0x7b0 [ 501.965551][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 501.971377][ T30] ksys_unshare+0x619/0xc10 [ 501.985528][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 501.990646][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.007875][ T30] ? do_syscall_64+0x100/0x230 [ 502.012755][ T30] __x64_sys_unshare+0x38/0x40 [ 502.029579][ T30] do_syscall_64+0xf3/0x230 [ 502.034198][ T30] ? clear_bhb_loop+0x35/0x90 [ 502.049693][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.060828][ T30] RIP: 0033:0x7f99cd97f6f7 [ 502.065349][ T30] RSP: 002b:00007f99cdc5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 502.083836][ T30] RAX: ffffffffffffffda RBX: 00007f99cd9f22ec RCX: 00007f99cd97f6f7 [ 502.102409][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 502.114043][ T30] RBP: 0000000000000000 R08: 00007f99ce667d60 R09: 0000000000000000 [ 502.131889][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 502.143978][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 502.155535][ T30] [ 502.163851][ T30] INFO: task syz-executor:10322 blocked for more than 147 seconds. [ 502.182507][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 502.191848][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.205422][ T30] task:syz-executor state:D stack:26464 pid:10322 tgid:10322 ppid:1 flags:0x00004006 [ 502.227807][ T30] Call Trace: [ 502.231172][ T30] [ 502.234150][ T30] __schedule+0x1895/0x4b30 [ 502.245624][ T30] ? __pfx___schedule+0x10/0x10 [ 502.250669][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.266985][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 502.272603][ T30] ? schedule+0x90/0x320 [ 502.285913][ T30] schedule+0x14b/0x320 [ 502.290168][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.305052][ T30] __mutex_lock+0x6a7/0xd70 [ 502.310066][ T30] ? __mutex_lock+0x52a/0xd70 [ 502.317117][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 502.322592][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.335682][ T30] ? read_word_at_a_time+0xe/0x20 [ 502.340807][ T30] ? sized_strscpy+0x8d/0x220 [ 502.355831][ T30] ip_tunnel_init_net+0x20e/0x720 [ 502.361031][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 502.376602][ T30] ? ops_init+0x75/0x590 [ 502.381037][ T30] ops_init+0x31e/0x590 [ 502.394755][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 502.402030][ T30] setup_net+0x287/0x9e0 [ 502.417225][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 502.422897][ T30] ? __pfx_setup_net+0x10/0x10 [ 502.439810][ T30] copy_net_ns+0x33f/0x570 [ 502.444321][ T30] create_new_namespaces+0x425/0x7b0 [ 502.455527][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 502.461343][ T30] ksys_unshare+0x619/0xc10 [ 502.474455][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 502.481281][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.495472][ T30] ? do_syscall_64+0x100/0x230 [ 502.500340][ T30] __x64_sys_unshare+0x38/0x40 [ 502.505274][ T30] do_syscall_64+0xf3/0x230 [ 502.522273][ T30] ? clear_bhb_loop+0x35/0x90 [ 502.532770][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.542913][ T30] RIP: 0033:0x7f7aec17f6f7 [ 502.551310][ T30] RSP: 002b:00007f7aec45ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 502.565481][ T30] RAX: ffffffffffffffda RBX: 00007f7aec1f22ec RCX: 00007f7aec17f6f7 [ 502.573547][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 502.589981][ T30] RBP: 0000000000000000 R08: 00007f7aece67d60 R09: 0000000000000000 [ 502.604802][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 502.620456][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 502.634566][ T30] [ 502.642338][ T30] INFO: task syz-executor:10333 blocked for more than 148 seconds. [ 502.659091][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 502.671595][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.685524][ T30] task:syz-executor state:D stack:26464 pid:10333 tgid:10333 ppid:1 flags:0x00004006 [ 502.703206][ T30] Call Trace: [ 502.708139][ T30] [ 502.711128][ T30] __schedule+0x1895/0x4b30 [ 502.722146][ T30] ? __pfx___schedule+0x10/0x10 [ 502.731743][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.743081][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 502.753864][ T30] ? schedule+0x90/0x320 [ 502.763269][ T30] schedule+0x14b/0x320 [ 502.771448][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.781987][ T30] __mutex_lock+0x6a7/0xd70 [ 502.791709][ T30] ? __mutex_lock+0x52a/0xd70 [ 502.801893][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 502.811104][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.821261][ T30] ? read_word_at_a_time+0xe/0x20 [ 502.833525][ T30] ? sized_strscpy+0x8d/0x220 [ 502.844087][ T30] ip_tunnel_init_net+0x20e/0x720 [ 502.853721][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 502.865737][ T30] ? ops_init+0x75/0x590 [ 502.870532][ T30] ops_init+0x31e/0x590 [ 502.874751][ T30] setup_net+0x287/0x9e0 [ 502.885428][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 502.891090][ T30] ? __pfx_setup_net+0x10/0x10 [ 502.905013][ T30] copy_net_ns+0x33f/0x570 [ 502.913376][ T30] create_new_namespaces+0x425/0x7b0 [ 502.925445][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 502.935300][ T30] ksys_unshare+0x619/0xc10 [ 502.945627][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 502.950745][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 502.965770][ T30] ? do_syscall_64+0x100/0x230 [ 502.970716][ T30] __x64_sys_unshare+0x38/0x40 [ 502.984091][ T30] do_syscall_64+0xf3/0x230 [ 502.997088][ T30] ? clear_bhb_loop+0x35/0x90 [ 503.001846][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.021432][ T30] RIP: 0033:0x7f282ad7f6f7 [ 503.030689][ T30] RSP: 002b:00007f282b05ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 503.045425][ T30] RAX: ffffffffffffffda RBX: 00007f282adf22ec RCX: 00007f282ad7f6f7 [ 503.054285][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 503.072073][ T30] RBP: 0000000000000000 R08: 00007f282ba67d60 R09: 0000000000000000 [ 503.089030][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 503.103643][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 503.115440][ T30] [ 503.118516][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 503.139270][ T30] INFO: task syz.0.1600:10363 blocked for more than 148 seconds. [ 503.154207][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 503.164438][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.181023][ T30] task:syz.0.1600 state:D stack:27392 pid:10363 tgid:10362 ppid:9823 flags:0x00004004 [ 503.195545][ T30] Call Trace: [ 503.198943][ T30] [ 503.201926][ T30] __schedule+0x1895/0x4b30 [ 503.215850][ T30] ? __pfx___schedule+0x10/0x10 [ 503.220792][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.235219][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.242838][ T30] ? schedule+0x90/0x320 [ 503.254176][ T30] schedule+0x14b/0x320 [ 503.262417][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.274209][ T30] __mutex_lock+0x6a7/0xd70 [ 503.281678][ T30] ? __mutex_lock+0x52a/0xd70 [ 503.292642][ T30] ? register_nexthop_notifier+0x84/0x290 [ 503.303019][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.314487][ T30] ? __asan_memset+0x23/0x50 [ 503.321969][ T30] register_nexthop_notifier+0x84/0x290 [ 503.335072][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 503.345536][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 503.359019][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 503.365271][ T30] ? __asan_memset+0x23/0x50 [ 503.375423][ T30] ops_init+0x31e/0x590 [ 503.379753][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 503.385193][ T30] setup_net+0x287/0x9e0 [ 503.402577][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 503.414036][ T30] ? __pfx_setup_net+0x10/0x10 [ 503.422969][ T30] copy_net_ns+0x33f/0x570 [ 503.432457][ T30] create_new_namespaces+0x425/0x7b0 [ 503.444830][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 503.460512][ T30] ksys_unshare+0x619/0xc10 [ 503.465128][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 503.473863][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 503.485491][ T30] ? do_syscall_64+0x100/0x230 [ 503.490356][ T30] __x64_sys_unshare+0x38/0x40 [ 503.495179][ T30] do_syscall_64+0xf3/0x230 [ 503.508334][ T30] ? clear_bhb_loop+0x35/0x90 [ 503.513099][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.529787][ T30] RIP: 0033:0x7fc665b7def9 [ 503.534291][ T30] RSP: 002b:00007fc666954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 503.553783][ T30] RAX: ffffffffffffffda RBX: 00007fc665d35f80 RCX: 00007fc665b7def9 [ 503.564233][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 503.581171][ T30] RBP: 00007fc665bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 503.591940][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.605510][ T30] R13: 0000000000000000 R14: 00007fc665d35f80 R15: 00007fc665e5fa28 [ 503.613615][ T30] [ 503.625101][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 503.638315][ T30] INFO: task syz.0.1600:10364 blocked for more than 149 seconds. [ 503.655464][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 503.662816][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.681195][ T30] task:syz.0.1600 state:D stack:23824 pid:10364 tgid:10362 ppid:9823 flags:0x00000004 [ 503.695578][ T30] Call Trace: [ 503.698968][ T30] [ 503.701941][ T30] __schedule+0x1895/0x4b30 [ 503.715485][ T30] ? __pfx___schedule+0x10/0x10 [ 503.720526][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.735013][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 503.741040][ T30] ? schedule+0x90/0x320 [ 503.748821][ T30] schedule+0x14b/0x320 [ 503.753065][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.765951][ T30] __mutex_lock+0x6a7/0xd70 [ 503.770553][ T30] ? __mutex_lock+0x52a/0xd70 [ 503.783648][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.790471][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.804366][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 503.809768][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 503.814955][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.825488][ T30] ? ref_tracker_free+0x643/0x7e0 [ 503.830610][ T30] netlink_rcv_skb+0x1e3/0x430 [ 503.845975][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.853307][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.869342][ T5231] Bluetooth: hci8: command 0x0406 tx timeout [ 503.883202][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.888581][ T30] netlink_unicast+0x7f6/0x990 [ 503.893411][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 503.905477][ T30] ? __virt_addr_valid+0x183/0x530 [ 503.910687][ T30] ? __check_object_size+0x48e/0x900 [ 503.925998][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 503.930875][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.945218][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 503.962063][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.968696][ T30] __sock_sendmsg+0x221/0x270 [ 503.973452][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 503.989268][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.994668][ T30] __sys_sendmsg+0x2aa/0x390 [ 504.005472][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.010763][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.045092][ T30] ? do_syscall_64+0x100/0x230 [ 504.050056][ T30] ? do_syscall_64+0xb6/0x230 [ 504.067583][ T30] do_syscall_64+0xf3/0x230 [ 504.072273][ T30] ? clear_bhb_loop+0x35/0x90 [ 504.083570][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.092954][ T30] RIP: 0033:0x7fc665b7def9 [ 504.105294][ T30] RSP: 002b:00007fc666933038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.123690][ T30] RAX: ffffffffffffffda RBX: 00007fc665d36058 RCX: 00007fc665b7def9 [ 504.135510][ T30] RDX: 0000000004000080 RSI: 00000000200000c0 RDI: 0000000000000004 [ 504.143572][ T30] RBP: 00007fc665bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 504.162818][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.181644][ T30] R13: 0000000000000000 R14: 00007fc665d36058 R15: 00007fc665e5fa28 [ 504.193005][ T30] [ 504.203015][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 504.222198][ T30] [ 504.222198][ T30] Showing all locks held in the system: [ 504.234093][ T30] 3 locks held by kworker/0:0/8: [ 504.243596][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 504.291199][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 504.311673][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 504.324221][ T30] 4 locks held by kworker/u8:1/12: [ 504.335477][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 504.361248][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 504.382051][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 504.394379][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x20/0x90 [ 504.414514][ T30] 1 lock held by khungtaskd/30: [ 504.420367][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 504.435422][ T30] 3 locks held by kworker/u8:2/35: [ 504.440589][ T30] #0: ffff88802d517948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 504.467951][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 504.491728][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 504.503610][ T30] 3 locks held by kworker/u8:7/4505: [ 504.515792][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 504.537414][ T30] #1: ffffc9000d4d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 504.555550][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 504.575511][ T30] 2 locks held by getty/4983: [ 504.581343][ T30] #0: ffff88814bbcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 504.600819][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 504.615000][ T30] 3 locks held by kworker/1:3/5276: [ 504.625308][ T30] 6 locks held by kworker/1:4/5277: [ 504.635964][ T30] 2 locks held by syz.3.1564/10240: [ 504.641224][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 504.659012][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 504.676904][ T30] 1 lock held by syz.1.1569/10254: [ 504.685980][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 504.695083][ T30] 2 locks held by syz.2.1577/10272: [ 504.708342][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 504.724244][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 504.742564][ T30] 2 locks held by syz-executor/10287: [ 504.749023][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 504.765520][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 504.785605][ T30] 2 locks held by syz-executor/10322: [ 504.791854][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 504.811775][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 504.822973][ T30] 2 locks held by syz-executor/10333: [ 504.835459][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 504.844994][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 504.862728][ T30] 2 locks held by syz.0.1600/10363: [ 504.870226][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 504.888764][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 504.909216][ T30] 1 lock held by syz.0.1600/10364: [ 504.914392][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 504.930337][ T30] 8 locks held by syz-executor/10401: [ 504.939811][ T30] #0: ffff88803269a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 504.955265][ T30] #1: ffff888070a94488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 504.974938][ T30] #2: ffff888144f3c698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 504.988287][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 505.015791][ T30] #4: ffff888057fbf0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 505.035511][ T30] #5: ffff88807d0f8250 (&devlink->lock_key#12){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 505.054351][ T30] #6: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 505.065047][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 505.091161][ T30] 2 locks held by syz.4.1615/10421: [ 505.105961][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.124269][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.134831][ T30] 1 lock held by syz.4.1615/10423: [ 505.145416][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 505.155029][ T30] 1 lock held by syz.4.1615/10424: [ 505.174232][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_mroute_setsockopt+0x367/0x1340 [ 505.191318][ T30] 2 locks held by syz-executor/10430: [ 505.202602][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.216655][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.236918][ T30] 2 locks held by syz-executor/10435: [ 505.242354][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.261374][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.275550][ T30] 2 locks held by syz-executor/10438: [ 505.280976][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.304449][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.317961][ T30] 2 locks held by syz-executor/10441: [ 505.323428][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.341221][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.355504][ T30] 2 locks held by syz-executor/10446: [ 505.360937][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.378895][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.400403][ T30] 2 locks held by syz-executor/10451: [ 505.409923][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.425562][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.444027][ T30] 2 locks held by syz-executor/10456: [ 505.449922][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.466067][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.487720][ T30] 2 locks held by syz-executor/10462: [ 505.493165][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.514363][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.528108][ T30] 2 locks held by syz-executor/10465: [ 505.533541][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.553746][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.564513][ T30] 2 locks held by syz-executor/10471: [ 505.575478][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 505.585100][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 505.607295][ T30] [ 505.609684][ T30] ============================================= [ 505.609684][ T30] [ 505.631420][ T30] NMI backtrace for cpu 0 [ 505.635821][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 505.646026][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 505.656306][ T30] Call Trace: [ 505.659626][ T30] [ 505.662590][ T30] dump_stack_lvl+0x241/0x360 [ 505.667337][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.672645][ T30] ? __pfx__printk+0x10/0x10 [ 505.677301][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 505.682305][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 505.687818][ T30] ? _printk+0xd5/0x120 [ 505.692023][ T30] ? __pfx__printk+0x10/0x10 [ 505.696661][ T30] ? __wake_up_klogd+0xcc/0x110 [ 505.701562][ T30] ? __pfx__printk+0x10/0x10 [ 505.706200][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 505.711286][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.717331][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 505.723384][ T30] watchdog+0xff4/0x1040 [ 505.727679][ T30] ? watchdog+0x1ea/0x1040 [ 505.732149][ T30] ? __pfx_watchdog+0x10/0x10 [ 505.736959][ T30] kthread+0x2f0/0x390 [ 505.741069][ T30] ? __pfx_watchdog+0x10/0x10 [ 505.745805][ T30] ? __pfx_kthread+0x10/0x10 [ 505.750611][ T30] ret_from_fork+0x4b/0x80 [ 505.755072][ T30] ? __pfx_kthread+0x10/0x10 [ 505.759705][ T30] ret_from_fork_asm+0x1a/0x30 [ 505.764541][ T30] [ 505.768580][ T30] Sending NMI from CPU 0 to CPUs 1: [ 505.773856][ C1] NMI backtrace for cpu 1 [ 505.773872][ C1] CPU: 1 UID: 0 PID: 5277 Comm: kworker/1:4 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 505.773895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 505.773908][ C1] Workqueue: events nsim_dev_trap_report_work [ 505.773941][ C1] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 505.773963][ C1] Code: c7 e0 d6 93 8e e8 d0 d1 77 03 eb cd 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 58 3f 89 7e e8 2b b9 47 0a 89 [ 505.773979][ C1] RSP: 0018:ffffc90000a17e18 EFLAGS: 00000202 [ 505.773995][ C1] RAX: 0000000000000100 RBX: 0000000000000001 RCX: ffff88802e613c00 [ 505.774008][ C1] RDX: ffff88802e613c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 505.774020][ C1] RBP: ffffc90000a17f40 R08: ffffffff8a612293 R09: 1ffffffff284b2f8 [ 505.774034][ C1] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: 1ffff92000142fcc [ 505.774048][ C1] R13: ffff888030073b80 R14: ffff88808b533dc0 R15: dffffc0000000000 [ 505.774062][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 505.774084][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.774097][ C1] CR2: 00007f98d3f3af98 CR3: 000000000e734000 CR4: 00000000003506f0 [ 505.774114][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.774125][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 505.774136][ C1] Call Trace: [ 505.774143][ C1] [ 505.774151][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 505.774180][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 505.774208][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 505.774235][ C1] ? nmi_handle+0x2a/0x5a0 [ 505.774260][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 505.774284][ C1] ? nmi_handle+0x14f/0x5a0 [ 505.774301][ C1] ? nmi_handle+0x2a/0x5a0 [ 505.774320][ C1] ? __pfx_rcu_is_watching+0x10/0x10 [ 505.774339][ C1] ? default_do_nmi+0x63/0x160 [ 505.774357][ C1] ? exc_nmi+0x123/0x1f0 [ 505.774373][ C1] ? end_repeat_nmi+0xf/0x53 [ 505.774399][ C1] ? nf_hook+0xd3/0x450 [ 505.774423][ C1] ? __pfx_rcu_is_watching+0x10/0x10 [ 505.774442][ C1] ? __pfx_rcu_is_watching+0x10/0x10 [ 505.774462][ C1] ? __pfx_rcu_is_watching+0x10/0x10 [ 505.774482][ C1] [ 505.774488][ C1] [ 505.774494][ C1] nf_hook+0xdc/0x450 [ 505.774517][ C1] ? nf_hook+0x9e/0x450 [ 505.774537][ C1] ? __pfx_nf_hook+0x10/0x10 [ 505.774558][ C1] ? __ip6_local_out+0x4dc/0x800 [ 505.774582][ C1] ? __ip6_local_out+0x7c1/0x800 [ 505.774607][ C1] ? __pfx___ip6_local_out+0x10/0x10 [ 505.774632][ C1] ? __pfx_dst_output+0x10/0x10 [ 505.774655][ C1] ? ip6_route_output_flags+0x30/0x610 [ 505.774675][ C1] ip6_output+0x26f/0x3c0 [ 505.774694][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 505.774717][ C1] synproxy_send_tcp_ipv6+0x568/0x7c0 [ 505.774741][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 505.774768][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 505.774792][ C1] ? skb_put+0x114/0x1f0 [ 505.774816][ C1] synproxy_send_client_synack_ipv6+0x7d0/0xc30 [ 505.774845][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 505.774868][ C1] ? synproxy_pernet+0x45/0x270 [ 505.774891][ C1] nft_synproxy_do_eval+0x739/0xa60 [ 505.774915][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 505.774940][ C1] ? __pfx_validate_chain+0x10/0x10 [ 505.774958][ C1] ? ktime_get+0x9b/0xb0 [ 505.774982][ C1] nft_do_chain+0x4ad/0x1da0 [ 505.775007][ C1] ? nf_nat_inet_fn+0xa30/0xd10 [ 505.775033][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 505.775075][ C1] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 505.775104][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 505.775132][ C1] nft_do_chain_inet+0x418/0x6b0 [ 505.775155][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 505.775176][ C1] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 505.775205][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 505.775231][ C1] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 505.775261][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 505.775281][ C1] nf_hook_slow+0xc3/0x220 [ 505.775301][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 505.775325][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 505.775349][ C1] NF_HOOK+0x29e/0x450 [ 505.775378][ C1] ? NF_HOOK+0x9a/0x450 [ 505.775401][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 505.775426][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 505.775452][ C1] ? ip6_rcv_finish_core+0x1fb/0x410 [ 505.775480][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 505.775505][ C1] NF_HOOK+0x3a4/0x450 [ 505.775528][ C1] ? skb_orphan+0xae/0xd0 [ 505.775554][ C1] ? NF_HOOK+0x9a/0x450 [ 505.775580][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 505.775608][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 505.775638][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 505.775665][ C1] __netif_receive_skb+0x1ea/0x650 [ 505.775688][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 505.775717][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 505.775736][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 505.775767][ C1] ? __pfx_lock_release+0x10/0x10 [ 505.775796][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 505.775826][ C1] process_backlog+0x662/0x15b0 [ 505.775851][ C1] ? process_backlog+0x33b/0x15b0 [ 505.775877][ C1] ? __pfx_process_backlog+0x10/0x10 [ 505.775898][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 505.775930][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 505.775962][ C1] __napi_poll+0xcb/0x490 [ 505.775983][ C1] net_rx_action+0x89b/0x1240 [ 505.776012][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 505.776034][ C1] ? sched_clock+0x4a/0x70 [ 505.776063][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 505.776102][ C1] handle_softirqs+0x2c5/0x980 [ 505.776128][ C1] ? do_softirq+0x11b/0x1e0 [ 505.776151][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 505.776179][ C1] do_softirq+0x11b/0x1e0 [ 505.776201][ C1] [ 505.776207][ C1] [ 505.776214][ C1] ? __pfx_do_softirq+0x10/0x10 [ 505.776237][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 505.776265][ C1] ? rcu_is_watching+0x15/0xb0 [ 505.776285][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 505.776308][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 505.776336][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 505.776359][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 505.776383][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 505.776411][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 505.776443][ C1] ? process_scheduled_works+0x976/0x1850 [ 505.776468][ C1] process_scheduled_works+0xa63/0x1850 [ 505.776505][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.776534][ C1] ? assign_work+0x364/0x3d0 [ 505.776559][ C1] worker_thread+0x870/0xd30 [ 505.776587][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 505.776610][ C1] ? __kthread_parkme+0x169/0x1d0 [ 505.776637][ C1] ? __pfx_worker_thread+0x10/0x10 [ 505.776662][ C1] kthread+0x2f0/0x390 [ 505.776678][ C1] ? __pfx_worker_thread+0x10/0x10 [ 505.776702][ C1] ? __pfx_kthread+0x10/0x10 [ 505.776718][ C1] ret_from_fork+0x4b/0x80 [ 505.776743][ C1] ? __pfx_kthread+0x10/0x10 [ 505.776759][ C1] ret_from_fork_asm+0x1a/0x30 [ 505.776792][ C1] [ 506.537107][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 506.544027][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 506.554356][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 506.564462][ T30] Call Trace: [ 506.567774][ T30] [ 506.570747][ T30] dump_stack_lvl+0x241/0x360 [ 506.575476][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.580717][ T30] ? __pfx__printk+0x10/0x10 [ 506.585352][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.591382][ T30] ? vscnprintf+0x5d/0x90 [ 506.595778][ T30] panic+0x349/0x880 [ 506.599716][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 506.605922][ T30] ? __pfx_panic+0x10/0x10 [ 506.610464][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 506.615963][ T30] ? __irq_work_queue_local+0x137/0x410 [ 506.621596][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 506.627017][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 506.633241][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 506.639452][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 506.645841][ T30] watchdog+0x1033/0x1040 [ 506.650219][ T30] ? watchdog+0x1ea/0x1040 [ 506.654685][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.659492][ T30] kthread+0x2f0/0x390 [ 506.663593][ T30] ? __pfx_watchdog+0x10/0x10 [ 506.668310][ T30] ? __pfx_kthread+0x10/0x10 [ 506.672952][ T30] ret_from_fork+0x4b/0x80 [ 506.677424][ T30] ? __pfx_kthread+0x10/0x10 [ 506.682048][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.686872][ T30] [ 506.690220][ T30] Kernel Offset: disabled [ 506.694549][ T30] Rebooting in 86400 seconds..