last executing test programs: 9.562906973s ago: executing program 1 (id=2): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000d40), 0x0, 0x48844, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xdb42) sendfile(r1, r2, 0x0, 0x8000002b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="d848aa11ee80a1e8f7d33041fc", 0xd}, {&(0x7f0000000240)="fe8ba6b8618d6af85d99dffda44fb2718ec16e2d6531c85f679c95", 0x1b}], 0x2) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5343}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x100, 0x0) 9.008418715s ago: executing program 3 (id=4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) inotify_init() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r2, 0x8001af71, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@flushpolicy={0x10, 0x1d, 0x1, 0x0, 0x100000}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.604143035s ago: executing program 3 (id=6): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc0305616, &(0x7f0000000040)={0x0, 0x0, @value}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x0, 0x7}, {0x7, 0x0, 0x8, 0x7}, {0x0, 0x0, 0xff}, {}, {}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x5592) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x400003, @loopback, 0x700}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) 7.894955638s ago: executing program 2 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad90c200000000000000e4ff00000000", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) keyctl$session_to_parent(0x12) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x4000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) write$cgroup_int(r6, &(0x7f0000000080)=0x8, 0x12) syz_emit_ethernet(0x2a, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x140000, 0x4b83, 0x0, 0xc7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x68}, 0x1, 0x7}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="8554667efb9c8bc281f4b6d56916ef48", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1}}], 0x1, 0x0, 0x0) 7.82021839s ago: executing program 4 (id=11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) close(r1) unshare(0x8000400) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000080)=',}\\)]\x00', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x4, 0xfd96) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x2}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="04e00a00001de6771d0000000000434c35d085ea3f35000000000000eb03c7d76f8b2a72f4c5", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009a8a5b1217d93f48"], 0x48}}, 0x0) syz_io_uring_setup(0x73fd, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f00000004c0)={0x0, 0x10000000, 0x0, 0x0, 0x371}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x501505, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000280)=0x80) 7.381287394s ago: executing program 1 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000009000000090000004000000e02000000000000000e0000000000000e0500000001000000040000000000000902000000030000000000000c010000000a0000000000000c010000000f000000000000022a7f81b3000000000030000000"], &(0x7f0000000040)=""/55, 0x71, 0x37, 0x1, 0xff, 0x0, @void, @value}, 0x20) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={r3}, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x5452, &(0x7f0000000040)) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setrlimit(0x1, &(0x7f0000000000)={0x5, 0x7}) sendmmsg$inet6(r8, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000008c0)}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {0x0}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640"], 0x18}}], 0x3, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000044c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x4}) 7.327481661s ago: executing program 2 (id=13): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000d40), 0x0, 0x48844, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xdb42) sendfile(r1, r2, 0x0, 0x8000002b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(r8, 0x0, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5343}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x100, 0x0) 7.313693153s ago: executing program 3 (id=14): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10020b58, 0x0, [{}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {0x8, 0x80, 0x0, '\x00', 0x3}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0xfc}, {}, {}, {}, {}, {}, {}, {0x0, 0x20}]}}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0xd7, 0x18, 0x58, 0x8, 0xf3d, 0x68a3, 0x14f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x0, 0x3, 0x22, 0xec, 0x20, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r5}, 0x10) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) landlock_restrict_self(r6, 0x0) 7.108828937s ago: executing program 0 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = memfd_create(&(0x7f0000000940)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfdP\x96\\@\xdd\xa0\xa7lv\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\x00\x00\x00\x00\x00\x00\x00\x06\x00\r\x1b\xd3\xff]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5\x10\x00\xf4\xf8\xde\xf3\x00q?[\xba=\x1a7\b\xa1\xd3?\xbby\xa7\xea\xf7\x03\xee\xf31\a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\x0f\xeb\x17{\x1f\x990\xb8\x05\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\x00\x00\x00\x00\x00\x00\xcc\xdf\x9f\xb6\x03J\x00\x00\x00\x00\x00\xc7\x12RV\x94\x03)\xd5h\x9ef\xc0\xf7L\xac<\x1e+\xa6\xb9\ng\xd5\xa3$\x87\xa7AK$\xe8\xd2\xc5&d\xa8\x93\x0e\xc2\xa7\x94/nH\x05I \xc7{\x99\xe6\x04\xd2d\xcb\xde{\xb7}\xba#\x04\xa7\x9eK5\xd9\xd2M\x855\x13\xb0\xe6dc[Fx\xf5\xd7f\xe1\x97\x7f{\x9a\xedoR\xf4\x9b.\x88<%\x9c\x81\x1f\xc6\x15R\\S\b\x87\xf8U\xffH\xf8\x0f\xbcB\x1d6\xf6N##\xd7+y\xf7\xef\xf4M\xb4y\xdcW\x13\x88=\xc5\xa6\xad\x0f\xd8y\xd6c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\x13\xefX\x12\xb5r\xc5j-\x83\xbf<+\xe6o\xf8KX\a\xdf\xc1\xbd\xa7\x88\xd8\xdf\xdaXYJq\xb2e\xb9\xec', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) 6.427642642s ago: executing program 0 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002280)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8936, &(0x7f00000022c0)={@private2, 0x0, r2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1331423e4b67a2c658000000100000000000000000000000020f8000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000100000005000300000000001400030067656e65766531000000000000000000"], 0x58}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040fc0d0a0140000102030109022d00010109300009040000000301005e0921fdff1001224c0c0705"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x6f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0xb, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x7, 0x24, 0x6, 0x0, 0x0, "f64c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x7f, 0x800, 0x80}, [@ncm={0x6, 0x24, 0x1a, 0x1b, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0xb}, @acm={0x4, 0x24, 0x2, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7f, 0x3, 0x46}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x98, 0x3, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x4, 0xfd}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x3, 0xa2, 0x20}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0xc2, &(0x7f0000000200)=@string={0xc2, 0x3, "22887fedc3cb97d9fc3da9c686a385911930f746444d21f5f8b3abcf06359a2d59ad4fca9c04c9bf8b776ded678ae98eb711cd3452f56b11e29af1db68829ee4cb96c6e995a267548299acd940587e654a9c1d8caac3f6118a34ef3a88cc2a76460a72dbd0ef058dd32a0b0837532980c91717e6f414c4ee8587654eebc0093f11d74baeb96cf7d2a77a2af084746052cf336134e96e82546acf528ffdc0d49f06f383104d805de2e5b0e264e9604889e8f8aa6fb82d10b9e02afdec84d2e15e"}}]}) 4.611011396s ago: executing program 4 (id=17): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) 4.311596692s ago: executing program 4 (id=18): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x4040001) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x404c044}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) 4.269534165s ago: executing program 2 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}}}, {{@in=@dev}, 0x0, @in6=@mcast1, 0x0, 0x1, 0x0, 0x1}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200143adfffffffffffffe6a9ff02000000f8b08000000000000000000000000000000000000000000000000000c60329cf366a19a4f5c79e3a3aca8520a2c6862ad9527328f6cbe5e8e18f8c9e70b270e26e365bcfb4e035c6036324e92abe73d27934b438108c9314705cf36c182313209bbb8c6b89f1ab3bc185b808d9d237b5fb65fd799b84d4bea37b2c77e004d64cc528e25f55c257cf2874283f5a6a55fd0ad8f13ac762cc62f54481f4aafc9dacc08397b4df58fe9459ae1529d038b1b2fedde7ce65d6d07015e690e406"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e6400000008000700000000000800060000004b"], 0x4c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x8}, 0x8) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 4.07751318s ago: executing program 1 (id=20): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1b, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x6c00, &(0x7f0000000040)=[{&(0x7f0000000000)="2e60000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.92607538s ago: executing program 4 (id=21): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) (fail_nth: 2) 3.893779874s ago: executing program 0 (id=22): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0xac}}, 0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ftruncate(0xffffffffffffffff, 0xc17a) (async) prctl$PR_SET_SECUREBITS(0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$evdev(&(0x7f0000000080), 0x5ff1569c, 0x200040) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0xfc9}) socket$inet_dccp(0x2, 0x6, 0x0) (async) dup(0xffffffffffffffff) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000100)=""/131) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) getrandom(0x0, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, r4, &(0x7f0000000200)='./file0\x00') 3.38983698s ago: executing program 1 (id=23): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000a00000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) 3.063630543s ago: executing program 4 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r5, 0xf3a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2d, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200ff03100005000500000001000020d3"]) 3.022079903s ago: executing program 0 (id=25): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xfffff2d3, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0xf8, 0x29, 0x37, {0x3c, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x4f}, @generic={0xb, 0x74, "a6cc59055d5bfe7ea0e87c27afc2117cb2db733ecfd6a3b97a55cd6a6dec0754dd221f2a3d7a813b4c012965b752579f898fbadbe61f8b4cde727fad720d970949d37fd8549f0f3ab89779bdd3e016a71274f811e803c020f559c3d6ba01bb2e9249967cd96965b491451f7542a1421aa04dfc08"}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0x9, 0x80, [0xba6b, 0x1, 0x7, 0x2, 0x7fffffffffffffff, 0x5, 0x8000000000000001, 0x0, 0x7]}}]}}}], 0xf8}}], 0x1, 0x844) iopl(0x6) (async) iopl(0xa) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) (async, rerun: 64) iopl(0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000680)={@private, @loopback, 0x0}, &(0x7f00000006c0)=0xc) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x28, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x22a4}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x6c, &(0x7f0000000600)=""/108, 0x41000, 0x58, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x457, 0x7fff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r7, r8], &(0x7f00000008c0)=[{0x5, 0x5, 0x6, 0x1}, {0x2, 0x2, 0xe, 0x3}, {0x4, 0x5, 0x5, 0x7}, {0x0, 0x1, 0x3, 0x2}, {0x3, 0x1, 0x7ff, 0xf}, {0x5, 0x5, 0x10, 0x5}], 0x10, 0x81, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x4e21, @loopback}, 0x10) (async) r9 = socket$inet6(0xa, 0x1, 0x9) (async) iopl(0x9) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000a80)=@v2={0x0, 0x2, 0x9, 0x1f, 0x9b, "7f201b4ba796e7da926c0a5fbf05a92b7cbe60b2d8f9e302f6a2abfe9b6e089a0a11e8ab1e2818691f49b82d30593975860ba0639f4c5f77f083b06ac3ab32aaf4dbbfec69a7cf56fc8f1a1ee20c5717e33d2d05ff25b370ac3a2254eef36b0a51eb04f61865f491055aad17bc4d3de8c94d54cdb497e6970d71f2a15fdf74391c82909f11709bed9aa9c5b02b905265a90258c1169d8d446e2f1c"}, 0xa4, 0x3) (async, rerun: 32) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b40), 0x52001, 0x0) (rerun: 32) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000b80)=0x17, 0x4) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00'}) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000cc0)={0x8, &(0x7f0000000c80)=[{0xffff, 0xfd, 0x10, 0x2}, {0x2, 0x8, 0x4, 0x1ff}, {0x8001, 0xe5, 0x52, 0x716f}, {0x9, 0xf7, 0x9, 0x80000001}, {0xa, 0x6, 0x2, 0x7}, {0x5, 0xf, 0x9, 0x80000001}, {0x3, 0x4, 0x1a, 0x495d}, {0x2, 0x1, 0x4, 0x5}]}) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f0000000d40)='cgroup.procs\x00', 0x2, 0x0) (async) getsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000d80), &(0x7f0000000dc0)=0x10) (async, rerun: 32) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e00), 0x210701) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r12, 0xc08c5334, &(0x7f0000000e40)={0x4, 0xfff, 0x0, 'queue1\x00', 0x3}) 2.992709675s ago: executing program 2 (id=26): syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x200000, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 2.878544815s ago: executing program 1 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002a00090000000000000043ed7c63ad6dd3b06bc87100000400002c04"], 0x20}, 0x1, 0x3000000, 0x0, 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x14008000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x123, &(0x7f0000000140)={@local, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x8}, {0x7}, {0x9, 0x0, 0x1}], @llc={@snap={0xaa, 0xab, ':', "906244", 0x8917, "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"}}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0xe66, 0x18b, 0x579, 0xb7e]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f8151", 0x11}], 0x1}, 0x0) r3 = eventfd(0x7) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000380)={0x2, r3, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) move_pages(r5, 0x0, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.705840825s ago: executing program 0 (id=28): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000005e62040000000000eaffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000880)={0x0, 0x0, 0x2, 'HS'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 2.664847997s ago: executing program 2 (id=29): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000d40), 0x0, 0x48844, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xdb42) sendfile(r1, r2, 0x0, 0x8000002b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(r8, 0x0, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5343}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x100, 0x0) 1.981709361s ago: executing program 4 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@setlink={0x60, 0x13, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x2000}, [@IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}]}, 0x60}}, 0x8c4) r2 = socket(0x2a, 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000080)='./control\x00', 0x88) close(r3) r4 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x2c00) lstat(&(0x7f0000000140)='./control\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r5, &(0x7f0000000400)='./control\x00') r6 = gettid() fcntl$setown(r3, 0x8, r6) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}]}}]}, 0x3c}}, 0x4040090) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast2, 0x7}}) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x40100, 0x0) signalfd4(r3, &(0x7f0000000480)={[0x6]}, 0x8, 0x0) 352.100709ms ago: executing program 2 (id=31): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 0 (id=32): socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x21694, &(0x7f0000000400)={0x0, 0x5ebf, 0x40, 0x2, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) chdir(0x0) sync() r1 = socket(0x10, 0x800, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x4d4280, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x4) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x850c00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000100)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x0, 0x1066480, 0xfffa, 0x0, 0x0, 0x143c00}}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='spi_message_done\x00', r3, 0x0, 0x3}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x4010744d, 0x20000007) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 66.606282][ T5221] cgroup: Unknown subsys name 'net' [ 66.719177][ T5221] cgroup: Unknown subsys name 'cpuset' [ 66.728010][ T5221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.284551][ T5221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.542390][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.550779][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.556628][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.559641][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.567039][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.572902][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.581468][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.586968][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.594199][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.601089][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.614957][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.616829][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.623350][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.630152][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.645667][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.652781][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.661366][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.669031][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.678281][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.689521][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.699181][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.715798][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.723222][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.731786][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.746716][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.756861][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.763948][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.779752][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.815544][ T5248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.826091][ T5248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.201080][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 71.280050][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 71.368931][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.376283][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.383770][ T5247] bridge_slave_0: entered allmulticast mode [ 71.390993][ T5247] bridge_slave_0: entered promiscuous mode [ 71.401071][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 71.438394][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.445676][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.453228][ T5247] bridge_slave_1: entered allmulticast mode [ 71.460276][ T5247] bridge_slave_1: entered promiscuous mode [ 71.490978][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 71.550212][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.557640][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.564942][ T5252] bridge_slave_0: entered allmulticast mode [ 71.572784][ T5252] bridge_slave_0: entered promiscuous mode [ 71.581412][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.588643][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.596041][ T5252] bridge_slave_1: entered allmulticast mode [ 71.602794][ T5252] bridge_slave_1: entered promiscuous mode [ 71.621417][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.676290][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.712205][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.729198][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.735971][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.748603][ T5247] team0: Port device team_slave_0 added [ 71.759529][ T5247] team0: Port device team_slave_1 added [ 71.780247][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.789786][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 71.811314][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.818747][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.826187][ T5253] bridge_slave_0: entered allmulticast mode [ 71.832906][ T5253] bridge_slave_0: entered promiscuous mode [ 71.841499][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.848748][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.856313][ T5253] bridge_slave_1: entered allmulticast mode [ 71.863010][ T5253] bridge_slave_1: entered promiscuous mode [ 71.931000][ T5252] team0: Port device team_slave_0 added [ 71.938014][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.944985][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.971515][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.983672][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.991399][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.998790][ T5254] bridge_slave_0: entered allmulticast mode [ 72.006535][ T5254] bridge_slave_0: entered promiscuous mode [ 72.025131][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.044384][ T5252] team0: Port device team_slave_1 added [ 72.051044][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.058873][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.085627][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.101536][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.109010][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.116350][ T5254] bridge_slave_1: entered allmulticast mode [ 72.123293][ T5254] bridge_slave_1: entered promiscuous mode [ 72.141446][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.183919][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.191038][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.218661][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.273479][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.280749][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.307174][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.322541][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.357588][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.365040][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.373146][ T5250] bridge_slave_0: entered allmulticast mode [ 72.380579][ T5250] bridge_slave_0: entered promiscuous mode [ 72.393295][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.412135][ T5253] team0: Port device team_slave_0 added [ 72.430168][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.437402][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.444711][ T5250] bridge_slave_1: entered allmulticast mode [ 72.451858][ T5250] bridge_slave_1: entered promiscuous mode [ 72.476729][ T5253] team0: Port device team_slave_1 added [ 72.484958][ T5254] team0: Port device team_slave_0 added [ 72.494113][ T5247] hsr_slave_0: entered promiscuous mode [ 72.504783][ T5247] hsr_slave_1: entered promiscuous mode [ 72.546740][ T5254] team0: Port device team_slave_1 added [ 72.553104][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.564141][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.590523][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.614170][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.627937][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.662589][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.670184][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.696622][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.720226][ T5252] hsr_slave_0: entered promiscuous mode [ 72.727058][ T5252] hsr_slave_1: entered promiscuous mode [ 72.733442][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.741642][ T5252] Cannot create hsr debugfs directory [ 72.760137][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.767318][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.794032][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.837758][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.844758][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.846692][ T5248] Bluetooth: hci3: command tx timeout [ 72.876568][ T5248] Bluetooth: hci4: command tx timeout [ 72.877150][ T5242] Bluetooth: hci1: command tx timeout [ 72.882101][ T54] Bluetooth: hci2: command tx timeout [ 72.892650][ T5242] Bluetooth: hci0: command tx timeout [ 72.894404][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.936847][ T5250] team0: Port device team_slave_0 added [ 72.964756][ T5253] hsr_slave_0: entered promiscuous mode [ 72.971144][ T5253] hsr_slave_1: entered promiscuous mode [ 72.981222][ T5253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.989449][ T5253] Cannot create hsr debugfs directory [ 72.997144][ T5250] team0: Port device team_slave_1 added [ 73.091618][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.099676][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.127080][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.141780][ T5254] hsr_slave_0: entered promiscuous mode [ 73.148194][ T5254] hsr_slave_1: entered promiscuous mode [ 73.155749][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.163610][ T5254] Cannot create hsr debugfs directory [ 73.208680][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.215897][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.243138][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.360081][ T5250] hsr_slave_0: entered promiscuous mode [ 73.366685][ T5250] hsr_slave_1: entered promiscuous mode [ 73.372730][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.380519][ T5250] Cannot create hsr debugfs directory [ 73.542819][ T5252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.560761][ T5252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.589536][ T5252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.609795][ T5252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.663707][ T5253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.684471][ T5253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.711146][ T5253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.735991][ T5253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.774761][ T5254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.799494][ T5254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.814406][ T5254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.835814][ T5254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.859444][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.928386][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.936756][ T5247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.959384][ T5247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.979508][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.986999][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.001847][ T5247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.013292][ T5247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.042245][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.049403][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.127478][ T5250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.152335][ T5250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.170255][ T5250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.181910][ T5250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.201279][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.294626][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.312718][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.340544][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.347705][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.367293][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.407476][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.414617][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.430047][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.481636][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.488814][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.520736][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.560603][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.567756][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.599935][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.630876][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.638018][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.658450][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.676750][ T5252] veth0_vlan: entered promiscuous mode [ 74.687312][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.694419][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.714364][ T5254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.725636][ T5254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.780955][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.810376][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.819651][ T5252] veth1_vlan: entered promiscuous mode [ 74.840171][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.853224][ T2577] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.860370][ T2577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.913180][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.920337][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.928134][ T5242] Bluetooth: hci4: command tx timeout [ 74.932377][ T5248] Bluetooth: hci2: command tx timeout [ 74.933551][ T5242] Bluetooth: hci1: command tx timeout [ 74.939013][ T5248] Bluetooth: hci3: command tx timeout [ 74.939122][ T5248] Bluetooth: hci0: command tx timeout [ 74.982335][ T5252] veth0_macvtap: entered promiscuous mode [ 75.008425][ T5252] veth1_macvtap: entered promiscuous mode [ 75.085119][ T5254] veth0_vlan: entered promiscuous mode [ 75.094024][ T5253] veth0_vlan: entered promiscuous mode [ 75.120480][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.140862][ T5254] veth1_vlan: entered promiscuous mode [ 75.155179][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.188087][ T5253] veth1_vlan: entered promiscuous mode [ 75.203381][ T5252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.213015][ T5252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223957][ T5252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.233397][ T5252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258200][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.309582][ T5254] veth0_macvtap: entered promiscuous mode [ 75.328533][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.373963][ T5253] veth0_macvtap: entered promiscuous mode [ 75.383093][ T5254] veth1_macvtap: entered promiscuous mode [ 75.398869][ T5253] veth1_macvtap: entered promiscuous mode [ 75.480028][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.500206][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.530467][ T5247] veth0_vlan: entered promiscuous mode [ 75.555122][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.567414][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.579579][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.589133][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.600302][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.610207][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.621300][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.632916][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.643601][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.657235][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.673888][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.692587][ T2536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.702291][ T2536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713818][ T5250] veth0_vlan: entered promiscuous mode [ 75.727864][ T5247] veth1_vlan: entered promiscuous mode [ 75.739830][ T5254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.768487][ T5254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.785538][ T5254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.794385][ T5254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.812209][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.823705][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.833992][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.845197][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.857867][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.876677][ T5250] veth1_vlan: entered promiscuous mode [ 75.904084][ T5253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.913428][ T5253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.923060][ T5253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.932343][ T5253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.944603][ T5252] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.974586][ T5247] veth0_macvtap: entered promiscuous mode [ 76.022215][ T5247] veth1_macvtap: entered promiscuous mode [ 76.057727][ T5250] veth0_macvtap: entered promiscuous mode [ 76.126375][ T5250] veth1_macvtap: entered promiscuous mode [ 76.133185][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.149323][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.159966][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.170966][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.181844][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.192634][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.204246][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.252080][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.262802][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.274564][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.286738][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.299675][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.310762][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.323257][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.338001][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.345736][ T2536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.359668][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.364822][ T2536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.376195][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.389273][ T5295] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.408033][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.418303][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.431710][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.447885][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.473411][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.486369][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.525216][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.546542][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.561338][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.571096][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.590878][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.609083][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.621483][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.632358][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.642585][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.653215][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.663119][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.673823][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.689057][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.715598][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.723160][ T5250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.733258][ T5250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.737329][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.747400][ T5250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.759572][ T5250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.876552][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.888221][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.896742][ T2536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.904580][ T2536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.007442][ T5242] Bluetooth: hci0: command tx timeout [ 77.007464][ T54] Bluetooth: hci3: command tx timeout [ 77.007501][ T54] Bluetooth: hci2: command tx timeout [ 77.012879][ T5242] Bluetooth: hci4: command tx timeout [ 77.018940][ T5248] Bluetooth: hci1: command tx timeout [ 77.065516][ T2536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.073394][ T2536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.113655][ T5299] Zero length message leads to an empty skb [ 77.236408][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.255355][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.284762][ T29] audit: type=1326 audit(1727108901.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 77.337023][ T29] audit: type=1326 audit(1727108901.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 77.380233][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.401580][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.434764][ T29] audit: type=1326 audit(1727108901.560:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 77.461162][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.499500][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.575832][ T29] audit: type=1326 audit(1727108901.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 77.717322][ T29] audit: type=1326 audit(1727108901.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 77.846268][ T29] audit: type=1326 audit(1727108901.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 77.964264][ T5311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.969552][ T29] audit: type=1326 audit(1727108901.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 78.115183][ T29] audit: type=1326 audit(1727108901.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 78.209700][ T29] audit: type=1326 audit(1727108901.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 78.284233][ T29] audit: type=1326 audit(1727108901.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5298 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac52f7def9 code=0x7ffc0000 [ 78.474392][ T5319] openvswitch: netlink: Message has 213 unknown bytes. [ 78.491232][ T5319] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.086960][ T54] Bluetooth: hci4: command tx timeout [ 79.092497][ T5248] Bluetooth: hci0: command tx timeout [ 79.098310][ T5240] Bluetooth: hci3: command tx timeout [ 79.098357][ T4620] Bluetooth: hci1: command tx timeout [ 79.110787][ T5242] Bluetooth: hci2: command tx timeout [ 79.681359][ T5337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.171017][ T5245] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.417815][ T5245] usb 4-1: Using ep0 maxpacket: 8 [ 80.498792][ T5245] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 80.575283][ T5245] usb 4-1: config 0 has no interface number 0 [ 80.581763][ T5245] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 80.676665][ T5245] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 80.756398][ T5245] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 80.847762][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.899844][ T5245] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=14.f8 [ 80.977264][ T5245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.039639][ T5245] usb 4-1: Product: syz [ 81.082768][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.091360][ T5245] usb 4-1: Manufacturer: syz [ 81.144683][ T5245] usb 4-1: SerialNumber: syz [ 81.155507][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.225961][ T25] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.239325][ T5245] usb 4-1: config 0 descriptor?? [ 81.331048][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.356128][ T5245] usb 4-1: Error in usbnet_get_endpoints (-22) [ 81.441359][ T25] usb 1-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.40 [ 81.508572][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.557640][ T5245] usb 4-1: USB disconnect, device number 2 [ 81.611809][ T25] usb 1-1: Product: syz [ 81.642467][ T25] usb 1-1: Manufacturer: syz [ 81.678875][ T25] usb 1-1: SerialNumber: syz [ 81.966850][ T5349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.042850][ T5349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.115069][ T25] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 82.179835][ T25] usb 1-1: USB disconnect, device number 2 [ 82.840683][ T5358] FAULT_INJECTION: forcing a failure. [ 82.840683][ T5358] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.935495][ T5358] CPU: 1 UID: 0 PID: 5358 Comm: syz.4.21 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 82.945749][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.955877][ T5358] Call Trace: [ 82.959190][ T5358] [ 82.962174][ T5358] dump_stack_lvl+0x241/0x360 [ 82.966921][ T5358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.972165][ T5358] ? __pfx__printk+0x10/0x10 [ 82.976801][ T5358] ? snprintf+0xda/0x120 [ 82.981100][ T5358] should_fail_ex+0x3b0/0x4e0 [ 82.985918][ T5358] _copy_to_user+0x2f/0xb0 [ 82.990627][ T5358] simple_read_from_buffer+0xca/0x150 [ 82.996070][ T5358] proc_fail_nth_read+0x1e9/0x250 [ 83.001158][ T5358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.006933][ T5358] ? rw_verify_area+0x55e/0x6f0 [ 83.012007][ T5358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.017606][ T5358] vfs_read+0x201/0xbc0 [ 83.021821][ T5358] ? __pfx_lock_release+0x10/0x10 [ 83.027087][ T5358] ? __pfx_vfs_read+0x10/0x10 [ 83.031936][ T5358] ? __fget_files+0x3f3/0x470 [ 83.036670][ T5358] ? __fdget_pos+0x24e/0x320 [ 83.041299][ T5358] ksys_read+0x1a0/0x2c0 [ 83.045685][ T5358] ? __pfx_ksys_read+0x10/0x10 [ 83.050596][ T5358] ? do_syscall_64+0x100/0x230 [ 83.055856][ T5358] ? do_syscall_64+0xb6/0x230 [ 83.060591][ T5358] do_syscall_64+0xf3/0x230 [ 83.065141][ T5358] ? clear_bhb_loop+0x35/0x90 [ 83.069861][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.075835][ T5358] RIP: 0033:0x7f22a0f7c93c [ 83.080313][ T5358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 83.099974][ T5358] RSP: 002b:00007f22a1df8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.108531][ T5358] RAX: ffffffffffffffda RBX: 00007f22a1135f80 RCX: 00007f22a0f7c93c [ 83.116629][ T5358] RDX: 000000000000000f RSI: 00007f22a1df80a0 RDI: 0000000000000005 [ 83.124644][ T5358] RBP: 00007f22a1df8090 R08: 0000000000000000 R09: 0000000000000000 [ 83.132651][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.140660][ T5358] R13: 0000000000000000 R14: 00007f22a1135f80 R15: 00007f22a125fa28 [ 83.148690][ T5358] [ 83.495219][ T5367] netlink: 'syz.1.23': attribute type 34 has an invalid length. [ 83.878415][ T5382] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.312527][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 84.312547][ T29] audit: type=1326 audit(1727108908.590:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 84.405605][ T5287] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.450754][ T29] audit: type=1326 audit(1727108908.640:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 84.580006][ T29] audit: type=1326 audit(1727108908.640:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 84.627419][ T5287] usb 1-1: Using ep0 maxpacket: 16 [ 84.685506][ T5287] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 84.712423][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.761369][ T29] audit: type=1326 audit(1727108908.640:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 84.788663][ T5287] usb 1-1: Product: syz [ 84.792899][ T5287] usb 1-1: Manufacturer: syz [ 84.841716][ T5287] usb 1-1: SerialNumber: syz [ 84.874470][ T5287] usb 1-1: config 0 descriptor?? [ 84.901254][ T29] audit: type=1326 audit(1727108908.640:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 84.945666][ T5287] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 84.994514][ T5287] usb 1-1: Detected FT232H [ 85.042436][ T29] audit: type=1326 audit(1727108908.650:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 85.162686][ T29] audit: type=1326 audit(1727108908.650:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 85.213189][ T5287] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 85.275497][ T29] audit: type=1326 audit(1727108908.660:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 85.389593][ T29] audit: type=1326 audit(1727108908.660:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 85.502407][ T29] audit: type=1326 audit(1727108908.660:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5387 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8626d7def9 code=0x7ffc0000 [ 85.684413][ T5287] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.875601][ T5287] usb 1-1: USB disconnect, device number 3 [ 86.785536][ T5245] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.971824][ T5245] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 86.988194][ T5245] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.007354][ T5245] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 87.026681][ T5245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.101243][ T46] cfg80211: failed to load regulatory.db [ 94.025337][ C0] sched: DL replenish lagged too much [ 94.185531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.697525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.947670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 96.745520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.045601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.010246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.100280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.207245][ T5245] usb 3-1: string descriptor 0 read error: -32 [ 99.305644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.313909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.078658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.589794][ T5245] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 103.326862][ T5287] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.000203][ T5287] ftdi_sio 1-1:0.0: device disconnected [ 149.514607][ T5245] usb 3-1: USB disconnect, device number 2 [ 149.539557][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.545982][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.850145][ T4620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.189094][ T4620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.247813][ T4620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.409472][ T4620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.525755][ T4620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.555430][ T4620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.587541][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.602820][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.611064][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.665465][ T5242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.685901][ T5242] Bluetooth: hci5: command tx timeout [ 152.692261][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.712906][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.977769][ T4620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.995549][ T4620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.004121][ T4620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.013009][ T4620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.021066][ T4620] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.028904][ T4620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.491344][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.500962][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.509660][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.519921][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.541783][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.550169][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.623278][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.638911][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.649019][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.657213][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.671231][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.679463][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.765589][ T54] Bluetooth: hci6: command tx timeout [ 154.771592][ T54] Bluetooth: hci5: command tx timeout [ 155.085564][ T54] Bluetooth: hci7: command tx timeout [ 156.606348][ T54] Bluetooth: hci1: command tx timeout [ 156.765636][ T54] Bluetooth: hci2: command tx timeout [ 156.845596][ T4620] Bluetooth: hci6: command tx timeout [ 156.854608][ T54] Bluetooth: hci5: command tx timeout [ 157.165701][ T54] Bluetooth: hci7: command tx timeout [ 158.685560][ T54] Bluetooth: hci1: command tx timeout [ 158.845573][ T54] Bluetooth: hci2: command tx timeout [ 158.925548][ T4620] Bluetooth: hci6: command tx timeout [ 158.932792][ T54] Bluetooth: hci5: command tx timeout [ 159.245517][ T54] Bluetooth: hci7: command tx timeout [ 160.765404][ T54] Bluetooth: hci1: command tx timeout [ 160.925499][ T54] Bluetooth: hci2: command tx timeout [ 161.005596][ T54] Bluetooth: hci6: command tx timeout [ 161.325605][ T54] Bluetooth: hci7: command tx timeout [ 162.845474][ T54] Bluetooth: hci1: command tx timeout [ 163.005577][ T54] Bluetooth: hci2: command tx timeout [ 163.675918][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.686939][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.694781][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.712794][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.721605][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.729322][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.805554][ T54] Bluetooth: hci3: command tx timeout [ 167.885429][ T54] Bluetooth: hci3: command tx timeout [ 169.965551][ T54] Bluetooth: hci3: command tx timeout [ 172.045509][ T54] Bluetooth: hci3: command tx timeout [ 194.614157][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.625343][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.386262][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.395923][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.403762][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.411877][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.430788][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.440236][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.833052][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.846036][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.854076][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.862730][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.871106][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.879028][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.485488][ T4620] Bluetooth: hci0: command tx timeout [ 213.965532][ T4620] Bluetooth: hci4: command tx timeout [ 215.143942][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 215.162154][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 215.170734][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 215.178859][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 215.187020][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 215.195928][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 215.317587][ T4620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 215.327487][ T4620] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 215.335527][ T4620] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 215.343797][ T4620] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 215.354556][ T4620] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 215.363885][ T4620] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 215.565445][ T4620] Bluetooth: hci0: command tx timeout [ 216.052839][ T4620] Bluetooth: hci4: command tx timeout [ 217.245510][ T4620] Bluetooth: hci8: command tx timeout [ 217.485670][ T4620] Bluetooth: hci9: command tx timeout [ 217.645517][ T4620] Bluetooth: hci0: command tx timeout [ 218.125499][ T4620] Bluetooth: hci4: command tx timeout [ 219.331196][ T4620] Bluetooth: hci8: command tx timeout [ 219.565709][ T4620] Bluetooth: hci9: command tx timeout [ 219.725565][ T4620] Bluetooth: hci0: command tx timeout [ 220.205886][ T4620] Bluetooth: hci4: command tx timeout [ 221.405390][ T4620] Bluetooth: hci8: command tx timeout [ 221.645539][ T4620] Bluetooth: hci9: command tx timeout [ 223.485496][ T4620] Bluetooth: hci8: command tx timeout [ 223.735355][ T4620] Bluetooth: hci9: command tx timeout [ 224.080096][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.094659][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.105167][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.113418][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.121573][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.129593][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.205611][ T54] Bluetooth: hci5: command tx timeout [ 228.285445][ T54] Bluetooth: hci5: command tx timeout [ 230.365461][ T54] Bluetooth: hci5: command tx timeout [ 232.453567][ T54] Bluetooth: hci5: command tx timeout [ 256.047676][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.054080][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.316339][ T4620] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 272.389796][ T4620] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 272.418963][ T4620] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 272.511504][ T4620] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 272.590659][ T4620] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 272.613194][ T4620] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 273.069666][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 273.087317][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 273.097226][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 273.109988][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 273.117917][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 273.125407][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 274.685612][ T54] Bluetooth: hci10: command tx timeout [ 275.172015][ T54] Bluetooth: hci11: command tx timeout [ 275.346061][ T4620] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 275.355895][ T4620] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 275.363735][ T4620] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 275.372264][ T4620] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 275.380248][ T4620] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 275.395537][ T4620] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 275.489851][ T4620] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 275.503915][ T4620] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 275.512587][ T4620] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 275.525475][ T4620] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 275.536447][ T4620] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 275.543971][ T4620] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 276.765513][ T5240] Bluetooth: hci10: command tx timeout [ 277.245535][ T5240] Bluetooth: hci11: command tx timeout [ 277.485536][ T5240] Bluetooth: hci12: command tx timeout [ 277.645619][ T5240] Bluetooth: hci13: command tx timeout [ 278.615361][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 278.621532][ T5243] Bluetooth: hci7: command 0x0406 tx timeout [ 278.627716][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 278.643039][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 278.845545][ T54] Bluetooth: hci10: command tx timeout [ 279.335500][ T54] Bluetooth: hci11: command tx timeout [ 279.565620][ T54] Bluetooth: hci12: command tx timeout [ 279.725503][ T54] Bluetooth: hci13: command tx timeout [ 280.925531][ T54] Bluetooth: hci10: command tx timeout [ 281.405406][ T54] Bluetooth: hci11: command tx timeout [ 281.645569][ T54] Bluetooth: hci12: command tx timeout [ 281.813124][ T54] Bluetooth: hci13: command tx timeout [ 283.725422][ T54] Bluetooth: hci12: command tx timeout [ 283.885588][ T54] Bluetooth: hci13: command tx timeout [ 284.286531][ T4620] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 284.296251][ T4620] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 284.304502][ T4620] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 284.315780][ T4620] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 284.328555][ T4620] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 284.337221][ T4620] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 286.365500][ T54] Bluetooth: hci14: command tx timeout [ 288.451505][ T54] Bluetooth: hci14: command tx timeout [ 288.851651][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 289.200977][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.525472][ T4620] Bluetooth: hci14: command tx timeout [ 292.525885][ T30] INFO: task kworker/R-rcu_g:4 blocked for more than 142 seconds. [ 292.541665][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 292.552335][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 292.612933][ T4620] Bluetooth: hci14: command tx timeout [ 292.645368][ T30] task:kworker/R-rcu_g state:D stack:28720 pid:4 tgid:4 ppid:2 flags:0x00004000 [ 292.715526][ T30] Call Trace: [ 292.718885][ T30] [ 292.721868][ T30] __schedule+0x1895/0x4b30 [ 292.835464][ T30] ? __pfx___schedule+0x10/0x10 [ 292.840448][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.893998][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 292.905386][ T30] ? kthread_data+0x52/0xd0 [ 292.909986][ T30] ? schedule+0x90/0x320 [ 292.914279][ T30] ? wq_worker_sleeping+0x66/0x240 [ 292.931387][ T30] ? schedule+0x90/0x320 [ 292.944536][ T30] schedule+0x14b/0x320 [ 292.950094][ T30] schedule_preempt_disabled+0x13/0x30 [ 292.961380][ T30] __mutex_lock+0x6a7/0xd70 [ 292.967767][ T30] ? __mutex_lock+0x52a/0xd70 [ 292.972515][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 292.981604][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 292.990965][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.000086][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.013792][ T30] rescuer_thread+0xaf5/0x10a0 [ 293.022587][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.031666][ T30] ? rescuer_thread+0x119/0x10a0 [ 293.040948][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 293.051553][ T30] ? __kthread_parkme+0x169/0x1d0 [ 293.060664][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 293.069551][ T30] kthread+0x2f0/0x390 [ 293.073689][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 293.083035][ T30] ? __pfx_kthread+0x10/0x10 [ 293.090683][ T30] ret_from_fork+0x4b/0x80 [ 293.095165][ T30] ? __pfx_kthread+0x10/0x10 [ 293.105366][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.110290][ T30] [ 293.118759][ T30] INFO: task kworker/0:2:937 blocked for more than 143 seconds. [ 293.128978][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 293.140337][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.154736][ T30] task:kworker/0:2 state:D stack:24120 pid:937 tgid:937 ppid:2 flags:0x00004000 [ 293.168889][ T30] Workqueue: 0x0 (mld) [ 293.173223][ T30] Call Trace: [ 293.181383][ T30] [ 293.184374][ T30] __schedule+0x1895/0x4b30 [ 293.196792][ T30] ? __pfx___schedule+0x10/0x10 [ 293.201808][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.212098][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 293.221428][ T30] ? kthread_data+0x52/0xd0 [ 293.231117][ T30] ? schedule+0x90/0x320 [ 293.237037][ T30] ? wq_worker_sleeping+0x66/0x240 [ 293.242221][ T30] ? schedule+0x90/0x320 [ 293.253455][ T30] schedule+0x14b/0x320 [ 293.259273][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.264800][ T30] __mutex_lock+0x6a7/0xd70 [ 293.274919][ T30] ? __mutex_lock+0x52a/0xd70 [ 293.283502][ T30] ? worker_attach_to_pool+0x31/0x390 [ 293.292105][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 293.301100][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.309051][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.315007][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 293.325354][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 293.330180][ T30] worker_attach_to_pool+0x31/0x390 [ 293.345342][ T30] create_worker+0x491/0x720 [ 293.350001][ T30] ? __pfx_create_worker+0x10/0x10 [ 293.362875][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.369267][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.383714][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.389307][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.394583][ T30] worker_thread+0x318/0xd30 [ 293.405826][ T30] ? __kthread_parkme+0x169/0x1d0 [ 293.410927][ T30] ? __pfx_worker_thread+0x10/0x10 [ 293.423058][ T30] kthread+0x2f0/0x390 [ 293.427524][ T30] ? __pfx_worker_thread+0x10/0x10 [ 293.432706][ T30] ? __pfx_kthread+0x10/0x10 [ 293.445074][ T30] ret_from_fork+0x4b/0x80 [ 293.449877][ T30] ? __pfx_kthread+0x10/0x10 [ 293.454529][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.465324][ T30] [ 293.470518][ T30] INFO: task kworker/R-wg-cr:5266 blocked for more than 143 seconds. [ 293.483469][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 293.502145][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.513465][ T30] task:kworker/R-wg-cr state:D stack:26712 pid:5266 tgid:5266 ppid:2 flags:0x00004000 [ 293.527896][ T30] Workqueue: 0x0 (wg-crypt-wg1) [ 293.532979][ T30] Call Trace: [ 293.540555][ T30] [ 293.543563][ T30] __schedule+0x1895/0x4b30 [ 293.553625][ T30] ? __pfx___schedule+0x10/0x10 [ 293.564025][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.572210][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 293.583838][ T30] ? kthread_data+0x52/0xd0 [ 293.591778][ T30] ? schedule+0x90/0x320 [ 293.600140][ T30] ? wq_worker_sleeping+0x66/0x240 [ 293.608091][ T30] ? schedule+0x90/0x320 [ 293.612513][ T30] schedule+0x14b/0x320 [ 293.622469][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.630936][ T30] __mutex_lock+0x6a7/0xd70 [ 293.639426][ T30] ? __mutex_lock+0x52a/0xd70 [ 293.644174][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 293.652064][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 293.661338][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.672298][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.679170][ T30] rescuer_thread+0xaf5/0x10a0 [ 293.684011][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.695471][ T30] ? rescuer_thread+0x119/0x10a0 [ 293.700502][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 293.711857][ T30] ? __kthread_parkme+0x169/0x1d0 [ 293.717611][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 293.722990][ T30] kthread+0x2f0/0x390 [ 293.736073][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 293.741360][ T30] ? __pfx_kthread+0x10/0x10 [ 293.752482][ T30] ret_from_fork+0x4b/0x80 [ 293.757428][ T30] ? __pfx_kthread+0x10/0x10 [ 293.762089][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.774826][ T30] [ 293.785054][ T30] INFO: task kworker/R-wg-cr:5268 blocked for more than 144 seconds. [ 293.802395][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 293.810201][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.825132][ T30] task:kworker/R-wg-cr state:D stack:28656 pid:5268 tgid:5268 ppid:2 flags:0x00004000 [ 293.841877][ T30] Call Trace: [ 293.845862][ T30] [ 293.848845][ T30] __schedule+0x1895/0x4b30 [ 293.853860][ T30] ? __pfx___schedule+0x10/0x10 [ 293.868072][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.873180][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 293.885710][ T30] ? kthread_data+0x52/0xd0 [ 293.890641][ T30] ? schedule+0x90/0x320 [ 293.901876][ T30] ? wq_worker_sleeping+0x66/0x240 [ 293.907492][ T30] ? schedule+0x90/0x320 [ 293.911911][ T30] schedule+0x14b/0x320 [ 293.924097][ T30] schedule_preempt_disabled+0x13/0x30 [ 293.930023][ T30] __mutex_lock+0x6a7/0xd70 [ 293.934590][ T30] ? __mutex_lock+0x52a/0xd70 [ 293.945551][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 293.950821][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 293.961682][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.968935][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 293.974546][ T30] rescuer_thread+0xaf5/0x10a0 [ 293.988519][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.995124][ T30] ? rescuer_thread+0x119/0x10a0 [ 294.005866][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.011403][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.022245][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.028064][ T30] kthread+0x2f0/0x390 [ 294.032185][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.044945][ T30] ? __pfx_kthread+0x10/0x10 [ 294.050837][ T30] ret_from_fork+0x4b/0x80 [ 294.062729][ T30] ? __pfx_kthread+0x10/0x10 [ 294.067909][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.074370][ T30] [ 294.083996][ T30] INFO: task kworker/R-wg-cr:5271 blocked for more than 144 seconds. [ 294.106839][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.117471][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 294.124910][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.142933][ T30] task:kworker/R-wg-cr state:D stack:27248 pid:5271 tgid:5271 ppid:2 flags:0x00004000 [ 294.161270][ T30] Workqueue: 0x0 (wg-crypt-wg0) [ 294.167111][ T30] Call Trace: [ 294.170438][ T30] [ 294.175072][ T30] __schedule+0x1895/0x4b30 [ 294.185295][ T30] ? __pfx___schedule+0x10/0x10 [ 294.190220][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.202120][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 294.208217][ T30] ? kthread_data+0x52/0xd0 [ 294.212972][ T30] ? schedule+0x90/0x320 [ 294.225321][ T30] ? wq_worker_sleeping+0x66/0x240 [ 294.230520][ T30] ? schedule+0x90/0x320 [ 294.234805][ T30] schedule+0x14b/0x320 [ 294.245287][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.250828][ T30] __mutex_lock+0x6a7/0xd70 [ 294.261224][ T30] ? __mutex_lock+0x52a/0xd70 [ 294.266790][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 294.271798][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.285702][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.290993][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 294.303795][ T30] rescuer_thread+0xaf5/0x10a0 [ 294.309021][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.321719][ T30] ? rescuer_thread+0x119/0x10a0 [ 294.327084][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.332465][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.345300][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.350606][ T30] kthread+0x2f0/0x390 [ 294.354722][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.370156][ T30] ? __pfx_kthread+0x10/0x10 [ 294.374826][ T30] ret_from_fork+0x4b/0x80 [ 294.389994][ T30] ? __pfx_kthread+0x10/0x10 [ 294.394680][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.405005][ T30] [ 294.413151][ T30] INFO: task kworker/R-wg-cr:5277 blocked for more than 144 seconds. [ 294.424287][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 294.438196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.454169][ T30] task:kworker/R-wg-cr state:D stack:26912 pid:5277 tgid:5277 ppid:2 flags:0x00004000 [ 294.468868][ T30] Workqueue: 0x0 (wg-crypt-wg1) [ 294.473947][ T30] Call Trace: [ 294.481704][ T30] [ 294.484725][ T30] __schedule+0x1895/0x4b30 [ 294.493329][ T30] ? __pfx___schedule+0x10/0x10 [ 294.500696][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.511611][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 294.520114][ T30] ? kthread_data+0x52/0xd0 [ 294.524689][ T30] ? schedule+0x90/0x320 [ 294.535412][ T30] ? wq_worker_sleeping+0x66/0x240 [ 294.540613][ T30] ? schedule+0x90/0x320 [ 294.544899][ T30] schedule+0x14b/0x320 [ 294.554581][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.561352][ T30] __mutex_lock+0x6a7/0xd70 [ 294.573673][ T30] ? __mutex_lock+0x52a/0xd70 [ 294.578896][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 294.591520][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.597237][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.602672][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 294.615520][ T30] rescuer_thread+0xaf5/0x10a0 [ 294.620366][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.634453][ T30] ? rescuer_thread+0x119/0x10a0 [ 294.639883][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.645147][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.655273][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.660563][ T30] kthread+0x2f0/0x390 [ 294.664672][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.675503][ T30] ? __pfx_kthread+0x10/0x10 [ 294.680245][ T30] ret_from_fork+0x4b/0x80 [ 294.694331][ T30] ? __pfx_kthread+0x10/0x10 [ 294.699301][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.704131][ T30] [ 294.714947][ T30] INFO: task kworker/R-wg-cr:5283 blocked for more than 145 seconds. [ 294.724932][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 294.738955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.753169][ T30] task:kworker/R-wg-cr state:D stack:26912 pid:5283 tgid:5283 ppid:2 flags:0x00004000 [ 294.768218][ T30] Workqueue: 0x0 (wg-crypt-wg1) [ 294.773388][ T30] Call Trace: [ 294.779826][ T30] [ 294.783254][ T30] __schedule+0x1895/0x4b30 [ 294.793602][ T30] ? __pfx___schedule+0x10/0x10 [ 294.801229][ T30] ? __pfx_lock_release+0x10/0x10 [ 294.812312][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 294.820676][ T30] ? kthread_data+0x52/0xd0 [ 294.829505][ T30] ? schedule+0x90/0x320 [ 294.833829][ T30] ? wq_worker_sleeping+0x66/0x240 [ 294.841935][ T30] ? schedule+0x90/0x320 [ 294.853815][ T30] schedule+0x14b/0x320 [ 294.860919][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.871774][ T30] __mutex_lock+0x6a7/0xd70 [ 294.879288][ T30] ? __mutex_lock+0x52a/0xd70 [ 294.884129][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 294.898511][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.903647][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.912333][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 294.923059][ T30] rescuer_thread+0xaf5/0x10a0 [ 294.930714][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.941506][ T30] ? rescuer_thread+0x119/0x10a0 [ 294.949491][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.954862][ T30] ? __kthread_parkme+0x169/0x1d0 [ 294.963972][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.972077][ T30] kthread+0x2f0/0x390 [ 294.981514][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 294.989534][ T30] ? __pfx_kthread+0x10/0x10 [ 294.999788][ T30] ret_from_fork+0x4b/0x80 [ 295.004288][ T30] ? __pfx_kthread+0x10/0x10 [ 295.013607][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.022328][ T30] [ 295.028119][ T30] INFO: task kworker/R-wg-cr:5284 blocked for more than 145 seconds. [ 295.041505][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 295.052236][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.064823][ T30] task:kworker/R-wg-cr state:D stack:26912 pid:5284 tgid:5284 ppid:2 flags:0x00004000 [ 295.082010][ T30] Workqueue: 0x0 (wg-crypt-wg2) [ 295.101993][ T30] Call Trace: [ 295.105788][ T30] [ 295.108892][ T30] __schedule+0x1895/0x4b30 [ 295.113547][ T30] ? __pfx___schedule+0x10/0x10 [ 295.125681][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.131138][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 295.142997][ T30] ? kthread_data+0x52/0xd0 [ 295.150016][ T30] ? schedule+0x90/0x320 [ 295.154420][ T30] ? wq_worker_sleeping+0x66/0x240 [ 295.165666][ T30] ? schedule+0x90/0x320 [ 295.169997][ T30] schedule+0x14b/0x320 [ 295.174201][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.185201][ T30] __mutex_lock+0x6a7/0xd70 [ 295.190047][ T30] ? __mutex_lock+0x52a/0xd70 [ 295.194778][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 295.209725][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.214851][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.224714][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.232692][ T30] rescuer_thread+0xaf5/0x10a0 [ 295.241490][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.251121][ T30] ? rescuer_thread+0x119/0x10a0 [ 295.260189][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 295.270184][ T30] ? __kthread_parkme+0x169/0x1d0 [ 295.279267][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 295.284818][ T30] kthread+0x2f0/0x390 [ 295.292167][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 295.303389][ T30] ? __pfx_kthread+0x10/0x10 [ 295.310826][ T30] ret_from_fork+0x4b/0x80 [ 295.317896][ T30] ? __pfx_kthread+0x10/0x10 [ 295.322546][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.333912][ T30] [ 295.338752][ T30] INFO: task kworker/1:6:5291 blocked for more than 145 seconds. [ 295.351612][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 295.360503][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.374342][ T30] task:kworker/1:6 state:D stack:28016 pid:5291 tgid:5291 ppid:2 flags:0x00004000 [ 295.392904][ T30] Workqueue: 0x0 (wg-crypt-wg2) [ 295.404580][ T30] Call Trace: [ 295.413494][ T30] [ 295.421472][ T30] __schedule+0x1895/0x4b30 [ 295.429264][ T30] ? __pfx___schedule+0x10/0x10 [ 295.434275][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.447308][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 295.452839][ T30] ? kthread_data+0x52/0xd0 [ 295.462753][ T30] ? schedule+0x90/0x320 [ 295.469324][ T30] ? wq_worker_sleeping+0x66/0x240 [ 295.474590][ T30] ? schedule+0x90/0x320 [ 295.484182][ T30] schedule+0x14b/0x320 [ 295.491210][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.501624][ T30] __mutex_lock+0x6a7/0xd70 [ 295.511598][ T30] ? __mutex_lock+0x52a/0xd70 [ 295.519103][ T30] ? worker_attach_to_pool+0x31/0x390 [ 295.525086][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 295.534954][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.542998][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.553341][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.563461][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 295.575362][ T30] worker_attach_to_pool+0x31/0x390 [ 295.580742][ T30] create_worker+0x491/0x720 [ 295.591446][ T30] ? __pfx_create_worker+0x10/0x10 [ 295.597540][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.603848][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.615347][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.620618][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 295.631575][ T30] worker_thread+0x318/0xd30 [ 295.636724][ T30] ? __kthread_parkme+0x169/0x1d0 [ 295.641926][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.653795][ T30] kthread+0x2f0/0x390 [ 295.658373][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.663551][ T30] ? __pfx_kthread+0x10/0x10 [ 295.675580][ T30] ret_from_fork+0x4b/0x80 [ 295.680078][ T30] ? __pfx_kthread+0x10/0x10 [ 295.684976][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.696259][ T30] [ 295.699425][ T30] INFO: task kworker/0:8:5402 blocked for more than 146 seconds. [ 295.717615][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 295.724976][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.747346][ T30] task:kworker/0:8 state:D stack:30096 pid:5402 tgid:5402 ppid:2 flags:0x00004000 [ 295.763379][ T30] Call Trace: [ 295.767229][ T30] [ 295.770219][ T30] __schedule+0x1895/0x4b30 [ 295.774797][ T30] ? __pfx___schedule+0x10/0x10 [ 295.785336][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.790454][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 295.803828][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.812030][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.824675][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.831653][ T30] ? schedule+0x90/0x320 [ 295.844098][ T30] schedule+0x14b/0x320 [ 295.848717][ T30] ? kthread+0x1c6/0x390 [ 295.853008][ T30] schedule_preempt_disabled+0x13/0x30 [ 295.864777][ T30] kthread+0x23b/0x390 [ 295.869366][ T30] ? __pfx_worker_thread+0x10/0x10 [ 295.874536][ T30] ? __pfx_kthread+0x10/0x10 [ 295.885432][ T30] ret_from_fork+0x4b/0x80 [ 295.889921][ T30] ? __pfx_kthread+0x10/0x10 [ 295.894639][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.907153][ T30] [ 295.910228][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 295.925836][ T30] INFO: task kworker/1:7:5403 blocked for more than 146 seconds. [ 295.933699][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 295.947721][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.962524][ T30] task:kworker/1:7 state:D stack:30096 pid:5403 tgid:5403 ppid:2 flags:0x00004000 [ 295.977619][ T30] Call Trace: [ 295.980970][ T30] [ 295.983943][ T30] __schedule+0x1895/0x4b30 [ 295.992316][ T30] ? __pfx___schedule+0x10/0x10 [ 296.000128][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.009454][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 296.021251][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 296.031198][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.040361][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.051620][ T30] ? schedule+0x90/0x320 [ 296.058676][ T30] schedule+0x14b/0x320 [ 296.062906][ T30] ? kthread+0x1c6/0x390 [ 296.071161][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.079465][ T30] kthread+0x23b/0x390 [ 296.083676][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.094486][ T30] ? __pfx_kthread+0x10/0x10 [ 296.102373][ T30] ret_from_fork+0x4b/0x80 [ 296.110772][ T30] ? __pfx_kthread+0x10/0x10 [ 296.118885][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.123740][ T30] [ 296.131906][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 296.142761][ T30] [ 296.142761][ T30] Showing all locks held in the system: [ 296.159519][ T30] 1 lock held by kworker/R-rcu_g/4: [ 296.164775][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.178044][ T30] 5 locks held by kworker/0:1/9: [ 296.183031][ T30] 6 locks held by kworker/u8:0/11: [ 296.192396][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.206142][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.226783][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 296.241473][ T30] #3: ffff88805e6ac0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 296.253822][ T30] #4: ffff88805e6ad250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 296.273313][ T30] #5: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 296.282649][ T30] 1 lock held by khungtaskd/30: [ 296.293772][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 296.304068][ T30] 1 lock held by kworker/R-write/32: [ 296.315265][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 296.334756][ T30] 1 lock held by kworker/0:2/937: [ 296.340267][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 296.358167][ T30] 3 locks held by kworker/u8:6/1127: [ 296.363550][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.384328][ T30] #1: ffffc900043b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.401922][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 296.411387][ T30] 1 lock held by kworker/u8:7/2466: [ 296.422886][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 296.443810][ T30] 1 lock held by kworker/R-mld/2726: [ 296.454155][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 296.471144][ T30] 1 lock held by kworker/R-bat_e/2861: [ 296.477173][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 296.494410][ T30] 2 locks held by getty/4992: [ 296.501361][ T30] #0: ffff8880323020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 296.515605][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 296.535014][ T30] 7 locks held by kworker/0:3/5234: [ 296.540784][ T30] 1 lock held by kworker/R-wg-cr/5268: [ 296.555345][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.572859][ T30] 1 lock held by kworker/R-wg-cr/5271: [ 296.578857][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.595487][ T30] 1 lock held by kworker/R-wg-cr/5272: [ 296.601001][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.625789][ T30] 1 lock held by kworker/R-wg-cr/5275: [ 296.632889][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.649555][ T30] 1 lock held by kworker/R-wg-cr/5277: [ 296.659420][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.674835][ T30] 1 lock held by kworker/R-wg-cr/5281: [ 296.682238][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.699007][ T30] 1 lock held by kworker/R-wg-cr/5283: [ 296.704786][ T30] 1 lock held by kworker/R-wg-cr/5284: [ 296.714220][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 296.729727][ T30] 3 locks held by kworker/1:4/5286: [ 296.739273][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.758801][ T30] #1: ffffc90003f67d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.776791][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 296.790349][ T30] 1 lock held by kworker/1:6/5291: [ 296.798244][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 296.812805][ T30] 1 lock held by kworker/R-bond0/5422: [ 296.821028][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xd0/0x10a0 [ 296.835796][ T30] 3 locks held by syz-executor/5423: [ 296.841133][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 296.858223][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0 [ 296.871228][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 296.887812][ T30] 2 locks held by syz-executor/5426: [ 296.893148][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 296.907898][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: gate_exit_net+0x30/0x100 [ 296.919835][ T30] 2 locks held by syz-executor/5431: [ 296.925166][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 296.935049][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 296.953024][ T30] 2 locks held by syz-executor/5432: [ 296.959866][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 296.975538][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 296.984355][ T30] 2 locks held by syz-executor/5437: [ 296.996889][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.012604][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.023223][ T30] 2 locks held by syz-executor/5446: [ 297.034847][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.048584][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 297.064938][ T30] 2 locks held by syz-executor/5448: [ 297.071111][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.085573][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.102606][ T30] 2 locks held by syz-executor/5454: [ 297.108312][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.124187][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 297.133931][ T30] 2 locks held by syz-executor/5456: [ 297.143191][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.158463][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 297.172123][ T30] 2 locks held by syz-executor/5460: [ 297.180598][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.194005][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.206460][ T30] 2 locks held by syz-executor/5471: [ 297.211798][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.228959][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.240297][ T30] 2 locks held by syz-executor/5475: [ 297.252243][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.263478][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.280184][ T30] 2 locks held by syz-executor/5479: [ 297.288742][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.302327][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.314803][ T30] 2 locks held by syz-executor/5481: [ 297.324242][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.341866][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.353475][ T30] 2 locks held by syz-executor/5490: [ 297.365317][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 297.374836][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 297.391621][ T30] [ 297.394004][ T30] ============================================= [ 297.394004][ T30] [ 297.404844][ T30] NMI backtrace for cpu 1 [ 297.409235][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 297.419436][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 297.429537][ T30] Call Trace: [ 297.432858][ T30] [ 297.435832][ T30] dump_stack_lvl+0x241/0x360 [ 297.440575][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.445845][ T30] ? __pfx__printk+0x10/0x10 [ 297.450493][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 297.455487][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.460995][ T30] ? _printk+0xd5/0x120 [ 297.465198][ T30] ? __pfx__printk+0x10/0x10 [ 297.469829][ T30] ? __wake_up_klogd+0xcc/0x110 [ 297.474733][ T30] ? __pfx__printk+0x10/0x10 [ 297.479387][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 297.484636][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.491275][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 297.497315][ T30] watchdog+0xff4/0x1040 [ 297.501610][ T30] ? watchdog+0x1ea/0x1040 [ 297.506075][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.510797][ T30] kthread+0x2f0/0x390 [ 297.514898][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.519618][ T30] ? __pfx_kthread+0x10/0x10 [ 297.524248][ T30] ret_from_fork+0x4b/0x80 [ 297.528710][ T30] ? __pfx_kthread+0x10/0x10 [ 297.533332][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.538157][ T30] [ 297.542298][ T30] Sending NMI from CPU 1 to CPUs 0: [ 297.548086][ C0] NMI backtrace for cpu 0 [ 297.548101][ C0] CPU: 0 UID: 0 PID: 5234 Comm: kworker/0:3 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 297.548123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 297.548134][ C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 297.548158][ C0] RIP: 0010:__dev_queue_xmit+0x8f/0x3e80 [ 297.548188][ C0] Code: 89 48 8d 94 24 e0 00 00 00 48 c1 ea 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 48 89 04 1a 48 b9 f2 f2 f2 f2 00 00 04 f2 48 89 4c 1a 0e <48> 05 01 01 01 01 48 89 44 1a 16 66 c7 44 1a 1e 04 f2 48 b8 f2 f2 [ 297.548203][ C0] RSP: 0018:ffffc90000006c00 EFLAGS: 00000a06 [ 297.548218][ C0] RAX: f2f2f200f1f1f1f1 RBX: dffffc0000000000 RCX: f2040000f2f2f2f2 [ 297.548232][ C0] RDX: 1ffff92000000d9c RSI: 0000000000000000 RDI: ffff8880a3fe2640 [ 297.548245][ C0] RBP: ffffc90000006ef0 R08: ffffffff8a1f5d34 R09: 00080aaaaaaaaaaa [ 297.548259][ C0] R10: 0aaaaaaaaaaa0000 R11: 00080aaaaaaaaaaa R12: ffff8880a3fe2718 [ 297.548272][ C0] R13: 000000000000000e R14: ffff8880a3fe2640 R15: 1ffff110147fc4e3 [ 297.548286][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 297.548301][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.548314][ C0] CR2: 00007f86267ded58 CR3: 000000000e734000 CR4: 00000000003506f0 [ 297.548330][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.548340][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.548352][ C0] Call Trace: [ 297.548358][ C0] [ 297.548366][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 297.548395][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.548423][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.548450][ C0] ? nmi_handle+0x2a/0x5a0 [ 297.548475][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 297.548499][ C0] ? nmi_handle+0x14f/0x5a0 [ 297.548516][ C0] ? nmi_handle+0x2a/0x5a0 [ 297.548533][ C0] ? __dev_queue_xmit+0x8f/0x3e80 [ 297.548558][ C0] ? default_do_nmi+0x63/0x160 [ 297.548576][ C0] ? exc_nmi+0x123/0x1f0 [ 297.548592][ C0] ? end_repeat_nmi+0xf/0x53 [ 297.548618][ C0] ? ip_finish_output2+0xce4/0x1390 [ 297.548642][ C0] ? __dev_queue_xmit+0x8f/0x3e80 [ 297.548668][ C0] ? __dev_queue_xmit+0x8f/0x3e80 [ 297.548694][ C0] ? __dev_queue_xmit+0x8f/0x3e80 [ 297.548719][ C0] [ 297.548725][ C0] [ 297.548732][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.548757][ C0] ? synproxy_pernet+0x23/0x240 [ 297.548778][ C0] ? mark_lock+0x9a/0x360 [ 297.548796][ C0] ? __lock_acquire+0x1384/0x2050 [ 297.548823][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 297.548859][ C0] ? mark_lock+0x9a/0x360 [ 297.548877][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.548904][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.548938][ C0] ? ip_finish_output2+0xa14/0x1390 [ 297.548961][ C0] ? ip_finish_output2+0x45f/0x1390 [ 297.548983][ C0] ip_finish_output2+0xd41/0x1390 [ 297.549006][ C0] ? ip_finish_output2+0x45f/0x1390 [ 297.549031][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 297.549054][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 297.549076][ C0] ? __ip_finish_output+0x349/0x400 [ 297.549099][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 297.549125][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 297.549147][ C0] ? synproxy_pernet+0x45/0x270 [ 297.549169][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 297.549194][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 297.549217][ C0] ? nf_ip_checksum+0x13a/0x500 [ 297.549242][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 297.549266][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 297.549290][ C0] ? __pfx_validate_chain+0x10/0x10 [ 297.549314][ C0] nft_do_chain+0x4ad/0x1da0 [ 297.549342][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 297.549363][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 297.549399][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 297.549426][ C0] nft_do_chain_inet+0x418/0x6b0 [ 297.549448][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 297.549479][ C0] ? ipt_do_table+0x312/0x1860 [ 297.549508][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 297.549528][ C0] nf_hook_slow+0xc3/0x220 [ 297.549547][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 297.549573][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 297.549600][ C0] NF_HOOK+0x29e/0x450 [ 297.549626][ C0] ? NF_HOOK+0x9a/0x450 [ 297.549650][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 297.549677][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 297.549706][ C0] ? ip_rcv_finish+0x406/0x560 [ 297.549733][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 297.549758][ C0] NF_HOOK+0x3a4/0x450 [ 297.549783][ C0] ? __lock_acquire+0x1384/0x2050 [ 297.549809][ C0] ? NF_HOOK+0x9a/0x450 [ 297.549833][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 297.549858][ C0] ? ip_rcv_core+0x801/0xd10 [ 297.549884][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 297.549913][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 297.549943][ C0] __netif_receive_skb+0x2bf/0x650 [ 297.549962][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.549988][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 297.550004][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.550030][ C0] ? __pfx_lock_release+0x10/0x10 [ 297.550055][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 297.550081][ C0] process_backlog+0x662/0x15b0 [ 297.550102][ C0] ? process_backlog+0x33b/0x15b0 [ 297.550124][ C0] ? __pfx_process_backlog+0x10/0x10 [ 297.550142][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.550169][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.550198][ C0] __napi_poll+0xcb/0x490 [ 297.550216][ C0] net_rx_action+0x89b/0x1240 [ 297.550244][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 297.550265][ C0] ? sched_clock+0x4a/0x70 [ 297.550294][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.550324][ C0] handle_softirqs+0x2c5/0x980 [ 297.550350][ C0] ? do_softirq+0x11b/0x1e0 [ 297.550373][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 297.550400][ C0] do_softirq+0x11b/0x1e0 [ 297.550421][ C0] [ 297.550427][ C0] [ 297.550434][ C0] ? __pfx_do_softirq+0x10/0x10 [ 297.550456][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 297.550481][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.550507][ C0] ? rcu_is_watching+0x15/0xb0 [ 297.550527][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 297.550550][ C0] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 297.550569][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.550593][ C0] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 297.550613][ C0] wg_packet_encrypt_worker+0x2e8/0x1610 [ 297.550643][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 297.550670][ C0] ? look_up_lock_class+0x77/0x170 [ 297.550693][ C0] ? register_lock_class+0x102/0x980 [ 297.550718][ C0] ? try_to_wake_up+0x5f4/0x1480 [ 297.550744][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 297.550766][ C0] ? __pfx_lock_release+0x10/0x10 [ 297.550791][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 297.550819][ C0] ? mark_lock+0x9a/0x360 [ 297.550837][ C0] ? __lock_acquire+0x1384/0x2050 [ 297.550876][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.550908][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.550943][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.550978][ C0] ? process_scheduled_works+0x976/0x1850 [ 297.551005][ C0] process_scheduled_works+0xa63/0x1850 [ 297.551048][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.551081][ C0] ? assign_work+0x364/0x3d0 [ 297.551110][ C0] worker_thread+0x870/0xd30 [ 297.551143][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.551169][ C0] ? __kthread_parkme+0x169/0x1d0 [ 297.551201][ C0] ? __pfx_worker_thread+0x10/0x10 [ 297.551229][ C0] kthread+0x2f0/0x390 [ 297.551248][ C0] ? __pfx_worker_thread+0x10/0x10 [ 297.551273][ C0] ? __pfx_kthread+0x10/0x10 [ 297.551290][ C0] ret_from_fork+0x4b/0x80 [ 297.551314][ C0] ? __pfx_kthread+0x10/0x10 [ 297.551330][ C0] ret_from_fork_asm+0x1a/0x30 [ 297.551362][ C0] [ 298.371677][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 298.378594][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 298.388791][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.399187][ T30] Call Trace: [ 298.402499][ T30] [ 298.405548][ T30] dump_stack_lvl+0x241/0x360 [ 298.410378][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.415621][ T30] ? __pfx__printk+0x10/0x10 [ 298.420262][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.426297][ T30] ? vscnprintf+0x5d/0x90 [ 298.430674][ T30] panic+0x349/0x880 [ 298.434608][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 298.440810][ T30] ? __pfx_panic+0x10/0x10 [ 298.445348][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 298.450758][ T30] ? __irq_work_queue_local+0x137/0x410 [ 298.456435][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 298.461844][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 298.468047][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 298.474338][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 298.480546][ T30] watchdog+0x1033/0x1040 [ 298.484931][ T30] ? watchdog+0x1ea/0x1040 [ 298.489485][ T30] ? __pfx_watchdog+0x10/0x10 [ 298.494289][ T30] kthread+0x2f0/0x390 [ 298.498829][ T30] ? __pfx_watchdog+0x10/0x10 [ 298.503743][ T30] ? __pfx_kthread+0x10/0x10 [ 298.508471][ T30] ret_from_fork+0x4b/0x80 [ 298.512939][ T30] ? __pfx_kthread+0x10/0x10 [ 298.517656][ T30] ret_from_fork_asm+0x1a/0x30 [ 298.522570][ T30] [ 298.525875][ T30] Kernel Offset: disabled [ 298.530250][ T30] Rebooting in 86400 seconds..