last executing test programs: 10.382588218s ago: executing program 3 (id=4): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb0", 0x62}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000003a00)=0x7, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x6, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a80000060001000000000008000500", @ANYRES32=r8], 0x6c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c000038509100dc6626c80900bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 9.109934461s ago: executing program 0 (id=11): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89e1, &(0x7f0000000000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@cipso={0x86, 0x29, 0xffffffffffffffff, [{0x2, 0x3, "99"}, {0x6, 0xd, "870452394ea62ca12957e0"}, {0x7, 0x7, 'rb4\"x'}, {0x2, 0xc, "5ca57350f6c36f3ff421"}]}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x9}}}, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x300, 0x70bd2c, 0x25dfdbfa, {0x14, 0x800, 0x2, 0x0, 0x100a4a, 0x460, 0xff, 0x0, 0x0, 0x0, 0x3}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x0) process_madvise(r3, &(0x7f0000000180)=[{&(0x7f0000000100)="3dce3dca9346d6c975be6e9148c3f797cab17a633460e6620877e13ea2cef1e0bdbe7772295b8a7d11faab0a0b8101ef59fd4e42105620a02f7e37807af2ca04123872", 0x43}], 0x1, 0xa, 0x0) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x40015) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) 8.922156393s ago: executing program 3 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x300, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14}}, 0x7c}}, 0x0) unlink(0x0) 8.705367s ago: executing program 3 (id=14): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) syz_usb_connect(0x0, 0x7f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6b, 0x28, 0x74, 0x40, 0x1199, 0xb000, 0x2240, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x67, 0x7, 0x42, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x42, 0x0, "835124cdb1655c9d0e21e1430f4a7c97570b28677a7d6ee40bf77b414c1eed236c0a4c4a9d461bdef843a89bf053a84b12d7ef999bcb5a98e60a54355a5ced93"}]}}]}}]}}]}}, 0x0) clock_adjtime(0xa, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000002c0)=0xc6c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x100000001}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x0, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x16) 7.26671502s ago: executing program 3 (id=23): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x10000) dup3(r1, r2, 0x0) getsockopt$inet_int(r0, 0x10d, 0x88, &(0x7f0000000000), &(0x7f0000000080)=0x4) 6.420379026s ago: executing program 2 (id=24): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb0", 0x62}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000003a00)=0x7, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x6, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a80000060001000000000008000500", @ANYRES32=r8], 0x6c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c000038509100dc6626c80900bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 6.353613708s ago: executing program 4 (id=25): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'geneve0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59261b2dc300000000000100000008002b0100"], 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') read$FUSE(r5, &(0x7f0000004140)={0x2020}, 0x602) 6.27680863s ago: executing program 3 (id=26): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$unix(0x1, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)) 6.12646543s ago: executing program 4 (id=27): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.025595021s ago: executing program 3 (id=28): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x32, 0xffffffff}, 0x2c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5.533617031s ago: executing program 0 (id=30): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000180)={{}, "6d16d9ea9cdad34d2521f3f7cb4f5aad64c0e3ea6294c64add52aafad755f47d3ac5e888d9a8f0bce833b866d398c93f3c58650c587a2f4a8fe36a4665d85002bab98d9990c668b4dc07e21b082db93d0aa0875a761cb396006c071fd6004c9000788dd5e99cadee53890417d4e00d9506cd996be6587d84bb1dce47f84392f119fd1884be90ff9e4f1961a03abf62d8f849b2e65016523c531cc7f79714f0ee6d9da9c0087bc3e29dff70b32ef2a1c6c8e607bc75a1fd5ec8a454eb13348d7114d188596f203006c1244ff880d6ee7969915071d3f35a60722ebf0a15ec3922b49cbddbdac18febd71077a6aada8cb10bd8808e39615afdce4c67d4472ba3dd317b7ac7e302a8814b75a7ec5fb4a89e1964d1c752e23ffcb9b59952b763b52546f589c71e1c132981291f39ffe9991a754170f2f7cac853fd3ba16bb161eaf64a7114e4ac3e51fc5a42bc2847bcafb87061b90f147e096f838a7b2bfee9ed7394532325224b71a993f150021baf369cc6e3c379098d47740cf262976ad8434dae36d64fa2accbe519ad078b0bb5e7a2c0f0075095226b8f96c6fc55971177f02940e50a80503b5ec7a3b30927d943429912b33a6279ffa6e5a4a59c1e944fcd507e7491502cf6612bfe4bd3b1543d010eb79556677a3f295f993727b7317f1e55f56f5528caa25143bf4375f02596a5a1f573b39e4989b00cdc4c1ba08013a4c090869bf3dbc7c7b13aac86cade0aa31fc809044a21460ca7724298d9fe82983b2909f77b4b3c517d5c17cca6b839d9e0fc05d45695a36f420d609dbcc8917f2e33238b402e26837c7583bbeb2f4cf00eceb32f4612570989d9792fec7e971ccf4a4c56e9e7cb2f907782467b59975234783d85b9e8964ffb3deb2857102d7162af6c9c21f94a30a8c4583530341880a613422ecad2f75ac984f36c645bb7a15c4d8a9817fdd7479778e20583514e8290b19b5b2733e63bcacec38a0a736943bb26e79dd61068522feabb797d2c29569ae9ea5beaceb1b17ef9454317444657fe263c53e666198f43c13972e61a0a776707dbbf6b7b06f66e0ab6da89e11403424ab57b2e612b27af7d8f7a0e4147db8ac74cfb3df1398f6b0525bfbb584f1e75a82278257b280831f76ac26ec778eb298b9bddebd5abaf803d662cb9e0daed769ed8df96e5817b7fb9b40a78497a9d58aec15ced9a2cf4d0e34acae68f0c7d6c89959632ee93a27f30c6d8e3941cb080a1129e3829e485e42ac939a9307ede48bd3f5ca1cd1217781b76eb12f02aa2b2d2a26467ea4c486b493009971a2a62f2baf7ee6d1cce519d86ad3b2913142802155c9e16216d5ad212a3e1ee70c5e3d5b4d7bda798dd7a2c1bd0de39401030277ea0f12b1e84744491812652c07ad88c70398d07b5b3ca5e868550f9fee706480577d17651f6af563f17d1845e0a34b74c125b0fa6d9cd9a2214ddb3cd23ae16f68418f52d0811cb541aae0e5d0f975aff599c283353658eb6d8d614f8595ed60afe89f365a588a2691e22f4ede5cde098e1c4a78e26ef6ec3b2575250857ce2e95176291f968e57cbd5558b8ced3a2ede4ab537b562dd2e7d6914a9f0322c46758ee0b779fb3b15c1c99fd7662d57da8a998de9757b62e1fcf770f2e2095fdb4d9195f1453d5424d9b932b4a47059d5d65ee3928d6ec9bdee041b39e30a3930a5ea3d01c426572b16b59ab9c02fe4724f6b4686e150fed254591e3a85c3f95b133991a53de8d9b7184327ef67b172df941bc2ea754e2d399cc7b15b6a4120ebcf9f035ffe0f7d4f52f3eaacb19f4354d29d8fcf4d998e2738449a22d2e09be553a83a8ff6e2a49c5dac1e511d11ded4fe935b285d8038fb87ce97db38b4aa81455a436ad9e4d15fd3faf01b5a505885135ee5f00df4e849dcdb053dfe644dd5bc584d40ad8495fa249d3c386754c8c698647fd85447450be746e496d36778027ad987a77145cde3543c256df90fa7d468eeb35be0812c33808437674f5156e3756784639524fb9f4729b050cdd080fdb32d277b73c0bc0ed9e4317c2e41c80797324b7dbe823ead07b9ebab466177c3c53b1c2c9566a588f1ee992fd671b08584eda4706b6735289c8e024fb9630bb79a6fdb5eb85460f42d0455181909644581f882ac37bdba7669a65fcc86cc33dbe2bd0c1f2d50ad04fd8d1cfdc0d9a259b171b4b13ca86ba0cb19330be8b5b64fbc104fd36c700fbf6c3be65f614d395c75efbe79add2c5ca7dae20575510401bbad262f91ea44358e523f3ee0261995dfde5d437e7bc4a2860ad5f6348321c9ae71868f4197b1eb70e0251095b156abe4bb15aade065139a25965542a66bc2775b1702bbfad7d384bc2b511dc657e6b2d3f2e2180068239551a378254d1c32efc53a0e128a8492bf529e7b00d549b3694e2a564711011888e42e70bd69686fa6524c6a00e09cb1bb171c62dcdd73a7ec51a6f39627d17c665291c6ff5c2e4b3a1e12d61aebcd48311f0c81e559183f59492f61219c0d793aad60b8f98872df3aa3648b0f1a017aa87b85e043d7bffdd8c520bfd045857bc3b99747dd2da54cf1c5f8f896013b7ac0f9ea53b8cee111ca894db68dbb45282802942a4d11d42dcd7737da34c8da0b62912f098b9976fc0fbabe3161099cf4954bcfd0a48e45b56bfb8cb522d075e4836cfbd03243e3186f4322a85fd6be177b632d546f1a3aea6852a7dab72e18609a68bd718ef651ec07d19f82db9fcc37a67fac46ab6e1edcfa10b8e3ef0de9b1007157e0778a9af2ef48127abc971f7eb75d8ed7e3549e104ccece02aa8e570d00cfc8c44325e16aea80daf3dc46ae7f05f83c895ceb854810da0401d4175404fceb89f81551b312c1a2a3756c3ee66d905bd05d4eb5d915f28671abd5e2581c521edfdce73b507a766defe24a9159ae8262673026a44e83c314e24d5437ea0e6db253c71d4edd2ad1de6a6863fd3763164efc390c1cda99ab3a65ac6ee11c3a552c58ac44567519afc6f9e312f282517509f1fb8f58cc51dfcdc7de5fb1b6a0f12368cd917e309f67ddaf3df2ca3c16af9d9f06b8e8fa33d57f92f514d0e57d84b74a8cb6bd54965f581121878af4e3de488914c79f376ca7d93498a180e2241cca739a480c077cdadfe5efcaab581112add1ba28aaa634da07b0069437b5d68dbaae9732f8bf5c5cfd287ce310a1f13396250b6baee759c6018395eeb419333b30495a50b3d2371b02bc1d023c3be956a064af463284a2d7fcb0b6fff1d1a6bf2fd7d133986943641cddb8bcd7fae100808f9d464fabf7cdc2d8f0c3e64215c59ec5430e994c3ad46908787525b45160fe7853234b9a1849e3b584533146688323cfe193255c33e2db9b86487c5a56e7b6e55235b735afbc145209fe136d2bcdfae934d24f55a516008c9824e52d7a5a886a45fa36ca22645fd5463f2d45fc1099f158d49af9c4bd233520b05af80e8018e2979d8aea220e963245e9629556750d5214ae3d9b4627660b95a13d74786feb9b17288ec27378669507c03f8fdb7e0d7e03fe0cc21677fcaf10dc524f313aba0e1db26de228ae03d7e0abfc703c59f008b301bc9bee2b65845e35baebc0b2e777f5c86f90cc48d4e5ab2aebee3b5bad80db39e02473ebe9766d4d1f7088034e06ba25d1a8b511321f874713e4fbb0c945d2c227ba9578a7b6b4367166480d0128212f93e15c15d96adc90c929b03deaf78ea5d65e5bbaec5922c23a9ed6c453811e976c3b4eba54877168a198ad75c692cc8d8631ab1dacf79c9b57c2ef8d342b0fd821d218b9f84de1cf0ef39a2dae508794d8609b00cec7384376915c4a0cd3fd75ae34a5fe22cfa401cc944e3ad9c526ed13a39ae8077a44376bb30b606608e16c7a8e7b14ee446a4658de659bd7b92c96582d295028a487d2fc553f781e1337ebf84097950af1c4e0c2d0d3e88446c4da06034180c0245f6a9fdf4f85e205cf53382943c85ffe25de17de078b2582bf01d0ec6aac2dc4b05782fd01e92c67a986e015fe7a9bef0ba503f6fd43b1e539b2e52e04b339af0298e9041891d5d5b181aa818097fb3ca5694fa4a279575b78d501cbfd5fd2f66d19cbb38051a1993dc0297935576ba3581393e05e059b24b4b601af9f6b970d43486383982d0463d81c397dff6ef59cba83de6c878d537739a9245ba781c270c20783605499a60173d32ef0aa7eb6521b6a89df14801aee6623d1e217819aa918205c227c041f2bfade23c360ae3b117858a5968106499adb30c11fa57ba186685074d239ee051db362607a9288256ee4b418f865d96977e8d2e5bcfebacb2ba11fd9d150ecca1be44fc52811d8b2060dc200f6545cd7f6b30def7f50a9d3f4a06352904ef3263daa4ec34364d1413584f0e75d7b0e682f66b648f68dfa2aaccc5df43430b852cf98a6950ddd088a1a5afe08265e099a89d66d1d99ace61b5a715f54105689f04c24e866ce13d1457d215907070e2dd27dd31ee59c641eced8f077841ce3ac0c564a855fb6c1d28a1f55562d5e346273d72600d6cef5a625a9d22cea267a89b574a6cd8b817180ec9e008c30349d3e9034a64a318aab96d7d915560960a467013886d35e209c6b080b11bab809984396ecb98010cfe00ca5d8accf1a9424b5315973fd03d9d99dc8825677430effe73e8db18cc3fb7b61505eb15a45744372ac67ed96068bbb218a702c6eb4270b2ab1f109f7f35f111952f73e79760b56ba65b9632e9b6a943fee3e3bf841b82b26ac53d3037bec938c76c907804626d69922a01b5ef7e08c98ecef8c8f2ec81cb5ff16aa9faad78d9d2cea84f9de58ab410e6add0f9760610be54138893e5c9b7c0cb04ef4d4d17b4095f5d5a35608f13b957b03b333e317000ed97ef46e8260959246092fb46469fb818cb73e5b45f009372459d1815766f1e3ca1321d08c9fd1e52e4aa89888e043775ab7cc3fb1853fd8cdf5cfc366e2163a30eda93767653f8bb5ef8783fd8b34784c54753d51379ca76f08f2fe0f3ed5a9605b8b3ba222772c6b029858aa5b9b0e8b8adad797a7a6e9b260e07c6d7a32b46cc83b3a59f45d60138abe791d0c56caa3908991302b2b55accf2dba530e4c2bcb4fe30ff7119f5541ea244d40e535c5568eafca7aa6314360b6337e0e75b9fb5b7d2079acff40110a72011bf59b57c38e0e66617fb4e7d1e46670c8bcaf40a33aac84f032b48338c277cc8fe70a350085a48b1a8c4fc2b9b6fe113839a3bd751ae5bc01d2175a6bfb324ca9c1de41acdb3772289e3ab2652aec9e3c916cf415dc8bc065b94e8a930e91776a2d3e814b552a67312716901e0a16b077ab5a25c199b3bfd44ede57bcabebda6c2785b1ef2ba871c61b147296d63b4f3d44cf1553cda281d371b4aa74cd6fdfc1f4b5647f7b8c46b1b62bd8ebd3388d19ca2b48390f17ba0e75d638da8ffc926b2704520cc9c2d19bdec1f595e7e6e9df15891561dc5e49932973c2180e2ddffd9b60b425d89a697734ac42f9c83eedfe26deaeb81cced2beca62e5bef5ec792ffa6fc617adb6c394bc1eaca7fea1798cd71625c7f0fcc28d6ca966d8dbdb59d0d9d60237e1b3228f46ed193c9bf013362326f8733c7de64446b2fc158cb97afeccc519867d9a2be3d76c3afa8759292c355aca31396b653a455439c910ca9676ca2e99de9ad6691811fb5df5701e29d7cc3923c284df68c3cda322406cffeb81f2ecf01a963c09c8c68974d3c05f1fbd8328938a6d1f16f326b0a6b89f05efb3a74051a20b0cfec6c37b"}) unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{&(0x7f0000004d40)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000008b80)=[{0x0, 0x3e}, {&(0x7f0000008900)='y', 0x1}], 0x2}}], 0x2, 0x4008040) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 5.527025563s ago: executing program 4 (id=32): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'netdevsim0\x00', {0x4}, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)={0x3c, r5, 0xb97534d5fe9700cf, 0xffffffff, 0x0, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a \x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRESDEC=r7], 0x8c}}, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x116, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) pipe(&(0x7f0000000080)) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f00000001c0)={r11, r12, 0x1, 0x1, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x4, 0x1ff}, 0x50) 5.073754824s ago: executing program 4 (id=33): socket$inet(0x2, 0x2000000080002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) getpgid(0xffffffffffffffff) write$P9_RGETLOCK(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="290000003702eb0004000000000000005e00000000000000cff87298232a0f9280dc2463dbdd3a3f9970d17ed2240848a5d27361658c11c622bc96f406aaf92c3cfadced546de03909b39420158800506899ae65c643f8e79e8992fb3ae5001a6cb10e54d8522f6b3a", @ANYRESHEX=r0, @ANYBLOB='\v\x00/dev/hwrng\x00'], 0x29) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$can_raw(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) execveat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x80c, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/anycast6\x00') r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x4100, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x4605, 0x20000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x2201, 0x10a) write$cgroup_int(r5, &(0x7f0000000300)=0x710, 0x12) 4.701918778s ago: executing program 2 (id=35): socket$inet6(0xa, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x7f49, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_io_uring_setup(0x2d9d, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) syz_usb_connect$cdc_ncm(0x2, 0x9d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201000302000010"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 3.475936777s ago: executing program 0 (id=36): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.693670851s ago: executing program 1 (id=38): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$unix(0x1, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)) 2.600247397s ago: executing program 4 (id=39): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x32, 0xffffffff}, 0x2c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2.501933705s ago: executing program 1 (id=40): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="d800000a000000002900000002000000c2"], 0xd8}], 0x1, 0x0) 2.309621131s ago: executing program 1 (id=41): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x3f420f0000000000}, 0x0) 2.223691575s ago: executing program 0 (id=42): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000680)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.181227685s ago: executing program 2 (id=43): ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000380)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x401}}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000800100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000044ffffff000000000af2ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000350901000000000095000000040004002f9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfff, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x3f, 0x8]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private, 0xffffff14}, {@private=0xa010100}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@local}, {@multicast2}, {@private=0x20000000}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @local, @private=0xa010102, @remote]}]}}}}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.993371283s ago: executing program 1 (id=44): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'netdevsim0\x00', {0x4}, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)={0x3c, r5, 0xb97534d5fe9700cf, 0xffffffff, 0x0, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a \x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRESDEC=r7], 0x8c}}, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x116, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) pipe(&(0x7f0000000080)) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r10, 0xc01864b0, &(0x7f00000001c0)={r11, r12, 0x1, 0x1, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x4, 0x1ff}, 0x50) 1.853814041s ago: executing program 2 (id=45): timer_create(0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xf5cf, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000380)={0x0, 0x0, 0x400, 0x0, 0x111}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48ed, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_emit_ethernet(0x38, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r7 = io_uring_setup(0x3450, &(0x7f0000000080)) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfeedcafe, 0x2, 0x3, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x9]}}) 1.681740046s ago: executing program 0 (id=46): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) syz_usb_connect(0x0, 0x7f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6b, 0x28, 0x74, 0x40, 0x1199, 0xb000, 0x2240, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x67, 0x7, 0x42, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x42, 0x0, "835124cdb1655c9d0e21e1430f4a7c97570b28677a7d6ee40bf77b414c1eed236c0a4c4a9d461bdef843a89bf053a84b12d7ef999bcb5a98e60a54355a5ced93"}]}}]}}]}}]}}, 0x0) clock_adjtime(0xa, &(0x7f0000000000)) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000002c0)=0xc6c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x100000001}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x0, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x16) 1.488231581s ago: executing program 4 (id=47): syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000480)={@map, 0x35, 0x1d, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='source', &(0x7f0000000380)='%\xd7\xad\xe0\xe9\x056W\xea\xe1\xe26\xdf\xbe\x97\x99\xe4\xe9%\xbe$\xc9\x86JJ\x12\xbc\xf7=\x0f1\v\xa9\xfcU\x96\xbf\xc7x\x83\xec\x11:A\xc5\xb4\x00'/62, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r6 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}]}, &(0x7f0000000100)=0x10) bind$rds(r0, 0x0, 0x0) shutdown(r4, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 1.323890607s ago: executing program 1 (id=48): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 953.3975ms ago: executing program 1 (id=49): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e300000000000000000"], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 871.442175ms ago: executing program 2 (id=50): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$unix(0x1, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)) 630.438565ms ago: executing program 2 (id=51): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x3f00, 0x0) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc0305616, &(0x7f0000000040)={0x0, 0x0, @value}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x5592) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x2c}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) 0s ago: executing program 0 (id=52): socket$inet6(0xa, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x7f49, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_io_uring_setup(0x2d9d, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) syz_usb_connect$cdc_ncm(0x2, 0x9d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201000302000010"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 63.324964][ T5215] cgroup: Unknown subsys name 'net' [ 63.448764][ T5215] cgroup: Unknown subsys name 'cpuset' [ 63.457669][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.959965][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.023113][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.032554][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.040957][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.049947][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.058950][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.067246][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.076084][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.077585][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.089719][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.098246][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.098907][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.114383][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.114642][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.127362][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.136354][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.144393][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.153907][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.161607][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.166284][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.169161][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.180207][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.183939][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.205719][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.213701][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.225854][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.235809][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.242998][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.254787][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.262713][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.269880][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.688881][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 69.786602][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 69.809315][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 69.907089][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 69.934396][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 70.037910][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.045957][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.053335][ T5248] bridge_slave_0: entered allmulticast mode [ 70.061414][ T5248] bridge_slave_0: entered promiscuous mode [ 70.069824][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.077771][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.085405][ T5244] bridge_slave_0: entered allmulticast mode [ 70.092292][ T5244] bridge_slave_0: entered promiscuous mode [ 70.101193][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.108417][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.115749][ T5244] bridge_slave_1: entered allmulticast mode [ 70.122740][ T5244] bridge_slave_1: entered promiscuous mode [ 70.130206][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.137536][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.144712][ T5246] bridge_slave_0: entered allmulticast mode [ 70.151877][ T5246] bridge_slave_0: entered promiscuous mode [ 70.166942][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.174243][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.181788][ T5248] bridge_slave_1: entered allmulticast mode [ 70.189282][ T5248] bridge_slave_1: entered promiscuous mode [ 70.213646][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.220834][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.228637][ T5246] bridge_slave_1: entered allmulticast mode [ 70.236373][ T5246] bridge_slave_1: entered promiscuous mode [ 70.262402][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.275340][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.347690][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.355328][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.362617][ T5247] bridge_slave_0: entered allmulticast mode [ 70.369767][ T5247] bridge_slave_0: entered promiscuous mode [ 70.399789][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.418991][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.428608][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.436239][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.443436][ T5247] bridge_slave_1: entered allmulticast mode [ 70.450480][ T5247] bridge_slave_1: entered promiscuous mode [ 70.457058][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.464154][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.471876][ T5245] bridge_slave_0: entered allmulticast mode [ 70.478804][ T5245] bridge_slave_0: entered promiscuous mode [ 70.486811][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.493929][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.501534][ T5245] bridge_slave_1: entered allmulticast mode [ 70.508900][ T5245] bridge_slave_1: entered promiscuous mode [ 70.517865][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.529547][ T5244] team0: Port device team_slave_0 added [ 70.539519][ T5244] team0: Port device team_slave_1 added [ 70.546957][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.638860][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.646402][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.673570][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.687384][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.694451][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.720708][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.733879][ T5246] team0: Port device team_slave_0 added [ 70.742445][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.753852][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.765712][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.777142][ T5248] team0: Port device team_slave_0 added [ 70.808493][ T5246] team0: Port device team_slave_1 added [ 70.817262][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.836684][ T5248] team0: Port device team_slave_1 added [ 70.854251][ T5245] team0: Port device team_slave_0 added [ 70.889965][ T5247] team0: Port device team_slave_0 added [ 70.926042][ T5245] team0: Port device team_slave_1 added [ 70.942104][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.949211][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.975895][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.988861][ T5247] team0: Port device team_slave_1 added [ 70.995513][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.002490][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.028530][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.042225][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.050154][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.076608][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.101956][ T5244] hsr_slave_0: entered promiscuous mode [ 71.108803][ T5244] hsr_slave_1: entered promiscuous mode [ 71.136405][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.143490][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.169709][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.187331][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.194355][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.221173][ T53] Bluetooth: hci4: command tx timeout [ 71.226830][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.239894][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.246931][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.273082][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.294755][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.302204][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.305781][ T53] Bluetooth: hci2: command tx timeout [ 71.328446][ T5238] Bluetooth: hci1: command tx timeout [ 71.333841][ T53] Bluetooth: hci3: command tx timeout [ 71.340785][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.375102][ T53] Bluetooth: hci0: command tx timeout [ 71.399289][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.406472][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.432877][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.483235][ T5246] hsr_slave_0: entered promiscuous mode [ 71.490189][ T5246] hsr_slave_1: entered promiscuous mode [ 71.496966][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.504867][ T5246] Cannot create hsr debugfs directory [ 71.524089][ T5248] hsr_slave_0: entered promiscuous mode [ 71.530483][ T5248] hsr_slave_1: entered promiscuous mode [ 71.536948][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.544609][ T5248] Cannot create hsr debugfs directory [ 71.617561][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.624082][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.628068][ T5245] hsr_slave_0: entered promiscuous mode [ 71.637068][ T5245] hsr_slave_1: entered promiscuous mode [ 71.643156][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.650820][ T5245] Cannot create hsr debugfs directory [ 71.683143][ T5247] hsr_slave_0: entered promiscuous mode [ 71.689810][ T5247] hsr_slave_1: entered promiscuous mode [ 71.696908][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.704496][ T5247] Cannot create hsr debugfs directory [ 71.994122][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.005685][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.027670][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.042299][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.081824][ T5248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.094033][ T5248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.104690][ T5248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.119533][ T5248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.180774][ T5246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.193714][ T5246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.222356][ T5246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.233376][ T5246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.292155][ T5245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.303329][ T5245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.313309][ T5245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.332876][ T5245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.400920][ T5247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.428141][ T5247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.441605][ T5247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.452159][ T5247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.512294][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.538314][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.551930][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.591475][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.598852][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.611822][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.619178][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.667367][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.693190][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.734373][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.741557][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.800248][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.810604][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.828362][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.835492][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.862055][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.869275][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.900611][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.907865][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.926180][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.941088][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.972412][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.980153][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.014190][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.029628][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.036813][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.062313][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.083401][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.090575][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.118828][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.126105][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.147885][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.229051][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.305508][ T53] Bluetooth: hci4: command tx timeout [ 73.343286][ T5244] veth0_vlan: entered promiscuous mode [ 73.362768][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.375431][ T53] Bluetooth: hci1: command tx timeout [ 73.380999][ T53] Bluetooth: hci3: command tx timeout [ 73.386890][ T53] Bluetooth: hci2: command tx timeout [ 73.400152][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.432476][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.455879][ T53] Bluetooth: hci0: command tx timeout [ 73.459131][ T5244] veth1_vlan: entered promiscuous mode [ 73.472496][ T5248] veth0_vlan: entered promiscuous mode [ 73.518438][ T5245] veth0_vlan: entered promiscuous mode [ 73.532327][ T5245] veth1_vlan: entered promiscuous mode [ 73.584626][ T5246] veth0_vlan: entered promiscuous mode [ 73.594653][ T5248] veth1_vlan: entered promiscuous mode [ 73.616953][ T5247] veth0_vlan: entered promiscuous mode [ 73.632609][ T5244] veth0_macvtap: entered promiscuous mode [ 73.652998][ T5246] veth1_vlan: entered promiscuous mode [ 73.673971][ T5247] veth1_vlan: entered promiscuous mode [ 73.689171][ T5244] veth1_macvtap: entered promiscuous mode [ 73.702566][ T5245] veth0_macvtap: entered promiscuous mode [ 73.714484][ T5245] veth1_macvtap: entered promiscuous mode [ 73.729524][ T5248] veth0_macvtap: entered promiscuous mode [ 73.772213][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.791015][ T5248] veth1_macvtap: entered promiscuous mode [ 73.803539][ T5246] veth0_macvtap: entered promiscuous mode [ 73.818999][ T5246] veth1_macvtap: entered promiscuous mode [ 73.830916][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.842332][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.855506][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.868797][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.888490][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.900913][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.913630][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.924324][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.933820][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.944614][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.953729][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.978694][ T5245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988188][ T5245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.998172][ T5245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.007058][ T5245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.047264][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.058278][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.068259][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.079847][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.093251][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.103861][ T5247] veth0_macvtap: entered promiscuous mode [ 74.113361][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.124128][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.134337][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.147486][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.157622][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.168552][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.180879][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.206699][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.218940][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.229418][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.241718][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.252789][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.264195][ T5247] veth1_macvtap: entered promiscuous mode [ 74.279735][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.290286][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.300545][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.311114][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.321201][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.332019][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.347968][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.375838][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.384606][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.396320][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.405304][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.419907][ T5246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.429674][ T5246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.438970][ T5246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.448481][ T5246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.502088][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.514592][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.528906][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.539928][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.550292][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.561150][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.571401][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.582369][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.594075][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.637222][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.649042][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.658086][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.658894][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.676171][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.686735][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.697304][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.708369][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.718487][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.729285][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.740537][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.766740][ T5247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.775785][ T5247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784503][ T5247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.793748][ T5247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.847481][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.856242][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.929657][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.942097][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.945151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.957832][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.992632][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.018089][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.054808][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.069563][ T5245] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.092815][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.120256][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.153852][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.288758][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.327176][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.338007][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.367469][ T5289] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.388607][ T53] Bluetooth: hci4: command tx timeout [ 75.426014][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.455809][ T53] Bluetooth: hci3: command tx timeout [ 75.461840][ T53] Bluetooth: hci2: command tx timeout [ 75.464193][ T5238] Bluetooth: hci1: command tx timeout [ 75.545925][ T5238] Bluetooth: hci0: command tx timeout [ 75.551584][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.583501][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.660147][ T5285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.731101][ T5285] vlan2: entered promiscuous mode [ 76.115507][ T5280] IPVS: starting estimator thread 0... [ 76.227872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.237741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 76.245173][ T5313] IPVS: using max 25 ests per chain, 60000 per kthread [ 76.335319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.888743][ T5280] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.047812][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.066869][ T5280] usb 1-1: device descriptor read/64, error -71 [ 77.239243][ T25] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 77.254570][ T941] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.278584][ T25] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.300395][ T25] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 77.315269][ T5280] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.323873][ T25] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 77.334839][ T25] usb 2-1: Manufacturer: syz [ 77.339976][ T25] usb 2-1: SerialNumber: syz [ 77.428846][ T941] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.440329][ T941] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.455679][ T5238] Bluetooth: hci4: command tx timeout [ 77.463605][ T5280] usb 1-1: device descriptor read/64, error -71 [ 77.471012][ T941] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=22.40 [ 77.481971][ T941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.490325][ T941] usb 4-1: Product: syz [ 77.499240][ T941] usb 4-1: Manufacturer: syz [ 77.503945][ T941] usb 4-1: SerialNumber: syz [ 77.516635][ T941] usb 4-1: config 0 descriptor?? [ 77.535571][ T4621] Bluetooth: hci2: command tx timeout [ 77.536223][ T53] Bluetooth: hci3: command tx timeout [ 77.541079][ T5238] Bluetooth: hci1: command tx timeout [ 77.585464][ T5280] usb usb1-port1: attempt power cycle [ 77.615957][ T5238] Bluetooth: hci0: command tx timeout [ 77.754060][ T5279] usb 4-1: USB disconnect, device number 2 [ 77.932576][ T5280] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.976690][ T5280] usb 1-1: device descriptor read/8, error -71 [ 78.225194][ T5280] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.257739][ T5280] usb 1-1: device descriptor read/8, error -71 [ 78.390667][ T5280] usb usb1-port1: unable to enumerate USB device [ 78.435066][ T5282] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.616855][ T5282] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.651082][ T5282] usb 5-1: no configurations [ 78.668668][ T5282] usb 5-1: can't read configurations, error -22 [ 79.602234][ T25] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 79.604073][ T5371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'. [ 79.652978][ T25] usb 2-1: USB disconnect, device number 2 [ 79.721035][ T5371] vlan2: entered promiscuous mode [ 79.852499][ T1068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.864215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.037468][ T1068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.242800][ T1068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.256704][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.268229][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.277181][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.293327][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.302810][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.310782][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.472241][ T1068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.722535][ T5386] kvm: emulating exchange as write [ 80.736345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.868384][ T5398] fuse: Bad value for 'fd' [ 80.925031][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.115645][ T1068] bridge_slave_1: left allmulticast mode [ 81.129121][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.133638][ T1068] bridge_slave_1: left promiscuous mode [ 81.154766][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.165661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.189106][ T1068] bridge_slave_0: left allmulticast mode [ 81.194778][ T1068] bridge_slave_0: left promiscuous mode [ 81.197903][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.212345][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.217533][ T5396] block device autoloading is deprecated and will be removed. [ 81.220796][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.243689][ T25] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=22.40 [ 81.260260][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.270261][ T5396] syz.4.33: attempt to access beyond end of device [ 81.270261][ T5396] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.284335][ T25] usb 2-1: Product: syz [ 81.288701][ T25] usb 2-1: Manufacturer: syz [ 81.293668][ T25] usb 2-1: SerialNumber: syz [ 81.306788][ T25] usb 2-1: config 0 descriptor?? [ 81.528866][ T25] usb 2-1: USB disconnect, device number 3 [ 81.905947][ T938] cfg80211: failed to load regulatory.db [ 82.366605][ T1068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.415319][ T53] Bluetooth: hci4: command tx timeout [ 82.503741][ T1068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.560822][ T1068] bond0 (unregistering): Released all slaves [ 82.685450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.801989][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.815653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.826021][ T9] usb 3-1: no configurations [ 82.830667][ T9] usb 3-1: can't read configurations, error -22 [ 83.503900][ T5387] chnl_net:caif_netlink_parms(): no params data found [ 84.051244][ T5449] vivid-007: disconnect [ 84.182600][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.211503][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.231079][ T5387] bridge_slave_0: entered allmulticast mode [ 84.244123][ T5387] bridge_slave_0: entered promiscuous mode [ 84.293661][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.302946][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.320526][ T5387] bridge_slave_1: entered allmulticast mode [ 84.344994][ T938] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.349992][ T5387] bridge_slave_1: entered promiscuous mode [ 84.408045][ T5461] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 84.471383][ T1068] hsr_slave_0: left promiscuous mode [ 84.478232][ T1068] hsr_slave_1: left promiscuous mode [ 84.494629][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.502274][ T53] Bluetooth: hci4: command tx timeout [ 84.542317][ T938] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.566134][ T938] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.566389][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.594701][ T938] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=22.40 [ 84.611365][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.632394][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.645317][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.653391][ T938] usb 1-1: Product: syz [ 84.661568][ T938] usb 1-1: Manufacturer: syz [ 84.666681][ T938] usb 1-1: SerialNumber: syz [ 84.683357][ T5449] vivid-007: reconnect [ 84.688060][ T938] usb 1-1: config 0 descriptor?? [ 84.711957][ T1068] veth1_macvtap: left promiscuous mode [ 84.749942][ T1068] veth0_macvtap: left promiscuous mode [ 84.773318][ T1068] veth1_vlan: left promiscuous mode [ 84.785043][ T5280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.797014][ T1068] veth0_vlan: left promiscuous mode [ 84.947164][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 84.947887][ T9] usb 1-1: USB disconnect, device number 6 [ 84.985037][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.999830][ T5280] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 85.042742][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.089253][ T5280] usb 5-1: config 0 descriptor?? [ 85.112231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.143249][ T5280] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 85.180751][ T5280] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 85.215116][ T25] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 85.237104][ T25] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.250482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.260968][ T5280] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 85.268067][ T5280] usb 5-1: media controller created [ 85.281461][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 85.317374][ T5280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.327842][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.365412][ T5280] usb 5-1: selecting invalid altsetting 1 [ 85.371402][ T5280] set interface failed [ 85.371950][ T5280] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 85.401008][ T5280] error writing reg: 0xff, val: 0x00 [ 85.493614][ T5280] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 85.573031][ T5466] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.49'. [ 85.623268][ T5466] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 86.655539][ T53] Bluetooth: hci4: command tx timeout [ 89.185259][ T53] Bluetooth: hci4: command tx timeout [ 89.284910][ C0] sched: DL replenish lagged too much [ 89.356944][ T25] usb 2-1: string descriptor 0 read error: -71 [ 95.789378][ T25] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 95.874958][ T25] usb 2-1: USB disconnect, device number 4 [ 96.356153][ T25] usb 5-1: USB disconnect, device number 4 [ 98.551775][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.561934][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.570810][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.579561][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.590650][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.598492][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.686038][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.705129][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.713971][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.722711][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.732178][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.740035][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.895636][ T4621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.931519][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.942643][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.951413][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.965798][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.979228][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.036824][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.056390][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.082140][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.091087][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.099235][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 99.106773][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.400102][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 99.583535][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 100.977992][ T5239] Bluetooth: hci5: command tx timeout [ 100.983800][ T53] Bluetooth: hci1: command tx timeout [ 101.055756][ T5239] Bluetooth: hci3: command tx timeout [ 101.221286][ T5239] Bluetooth: hci6: command tx timeout [ 101.362236][ T5387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.055379][ T5239] Bluetooth: hci5: command tx timeout [ 103.061499][ T5239] Bluetooth: hci1: command tx timeout [ 103.135136][ T5239] Bluetooth: hci3: command tx timeout [ 103.295221][ T5239] Bluetooth: hci6: command tx timeout [ 105.136366][ T53] Bluetooth: hci5: command tx timeout [ 105.143002][ T5239] Bluetooth: hci1: command tx timeout [ 105.215226][ T5239] Bluetooth: hci3: command tx timeout [ 105.375187][ T5239] Bluetooth: hci6: command tx timeout [ 107.215163][ T53] Bluetooth: hci5: command tx timeout [ 107.220672][ T5239] Bluetooth: hci1: command tx timeout [ 107.295348][ T5239] Bluetooth: hci3: command tx timeout [ 107.455847][ T5239] Bluetooth: hci6: command tx timeout [ 133.060907][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.072709][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.033642][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.057188][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.081206][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.089922][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.099153][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.108258][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.215173][ T53] Bluetooth: hci0: command tx timeout [ 147.295063][ T53] Bluetooth: hci0: command tx timeout [ 149.375083][ T53] Bluetooth: hci0: command tx timeout [ 151.455184][ T53] Bluetooth: hci0: command tx timeout [ 158.349822][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.365276][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.383147][ T4621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.392164][ T4621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.402133][ T4621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.409796][ T4621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.426350][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.434133][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.441754][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.478091][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 158.489105][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.506067][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.515800][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.545123][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 158.566862][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 158.575493][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 158.586155][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 158.594097][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 159.113321][ T4621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 159.130286][ T4621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 159.142517][ T4621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 159.154567][ T4621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 159.167689][ T4621] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 159.182336][ T4621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 160.495892][ T4621] Bluetooth: hci2: command tx timeout [ 160.575175][ T4621] Bluetooth: hci7: command tx timeout [ 160.655387][ T4621] Bluetooth: hci8: command tx timeout [ 161.215122][ T4621] Bluetooth: hci9: command tx timeout [ 162.577403][ T4621] Bluetooth: hci2: command tx timeout [ 162.655215][ T4621] Bluetooth: hci7: command tx timeout [ 162.735050][ T4621] Bluetooth: hci8: command tx timeout [ 163.295171][ T4621] Bluetooth: hci9: command tx timeout [ 164.655033][ T4621] Bluetooth: hci2: command tx timeout [ 164.735175][ T4621] Bluetooth: hci7: command tx timeout [ 164.815152][ T4621] Bluetooth: hci8: command tx timeout [ 165.374989][ T4621] Bluetooth: hci9: command tx timeout [ 166.735059][ T4621] Bluetooth: hci2: command tx timeout [ 166.815107][ T4621] Bluetooth: hci7: command tx timeout [ 166.895047][ T4621] Bluetooth: hci8: command tx timeout [ 167.455209][ T4621] Bluetooth: hci9: command tx timeout [ 194.500784][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.514525][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.476858][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 203.486964][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 203.494829][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 203.504763][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 203.520854][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 203.528605][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 205.615210][ T5239] Bluetooth: hci10: command tx timeout [ 206.824888][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 207.695103][ T53] Bluetooth: hci10: command tx timeout [ 209.775164][ T53] Bluetooth: hci10: command tx timeout [ 211.855195][ T53] Bluetooth: hci10: command tx timeout [ 218.649195][ T5239] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 218.658841][ T5239] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 218.675096][ T5239] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 218.684045][ T5239] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 218.695374][ T5239] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 218.702929][ T5239] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 218.931992][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 218.945686][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 218.954028][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 218.962372][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 218.970802][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 218.979522][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 219.032815][ T5239] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 219.042038][ T5239] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 219.050719][ T5239] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 219.061535][ T5239] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 219.070611][ T5239] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 219.088480][ T5239] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 219.554341][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 219.563791][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 219.574425][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 219.585382][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 219.593845][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 219.602486][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 220.735077][ T5231] Bluetooth: hci11: command tx timeout [ 221.055261][ T5231] Bluetooth: hci12: command tx timeout [ 221.135095][ T5231] Bluetooth: hci13: command tx timeout [ 221.695137][ T5231] Bluetooth: hci14: command tx timeout [ 222.195064][ T5231] Bluetooth: hci6: command 0x0406 tx timeout [ 222.201184][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 222.207330][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 222.213386][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 222.815028][ T4621] Bluetooth: hci11: command tx timeout [ 223.135030][ T4621] Bluetooth: hci12: command tx timeout [ 223.215020][ T4621] Bluetooth: hci13: command tx timeout [ 223.777400][ T4621] Bluetooth: hci14: command tx timeout [ 224.895080][ T4621] Bluetooth: hci11: command tx timeout [ 225.217075][ T4621] Bluetooth: hci12: command tx timeout [ 225.295102][ T4621] Bluetooth: hci13: command tx timeout [ 225.854976][ T4621] Bluetooth: hci14: command tx timeout [ 226.975048][ T4621] Bluetooth: hci11: command tx timeout [ 227.295038][ T4621] Bluetooth: hci12: command tx timeout [ 227.374947][ T4621] Bluetooth: hci13: command tx timeout [ 227.935000][ T4621] Bluetooth: hci14: command tx timeout [ 247.615582][ T31] INFO: task kworker/u8:6:1068 blocked for more than 143 seconds. [ 247.623725][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.663855][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.712467][ T31] task:kworker/u8:6 state:D stack:22544 pid:1068 tgid:1068 ppid:2 flags:0x00004000 [ 247.814972][ T31] Workqueue: netns cleanup_net [ 247.819876][ T31] Call Trace: [ 247.823719][ T31] [ 247.914752][ T31] __schedule+0x1895/0x4b30 [ 247.919510][ T31] ? __pfx___schedule+0x10/0x10 [ 247.924418][ T31] ? __pfx_lock_release+0x10/0x10 [ 248.005093][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 248.010652][ T31] ? kthread_data+0x52/0xd0 [ 248.055071][ T31] ? schedule+0x90/0x320 [ 248.059406][ T31] ? wq_worker_sleeping+0x66/0x240 [ 248.064578][ T31] ? schedule+0x90/0x320 [ 248.125092][ T31] schedule+0x14b/0x320 [ 248.129345][ T31] schedule_preempt_disabled+0x13/0x30 [ 248.164986][ T31] __mutex_lock+0x6a7/0xd70 [ 248.169591][ T31] ? __mutex_lock+0x52a/0xd70 [ 248.174337][ T31] ? wg_destruct+0x25/0x2e0 [ 248.244937][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 248.250066][ T31] ? __pfx_free_percpu+0x10/0x10 [ 248.294881][ T31] ? kobject_put+0x272/0x480 [ 248.299568][ T31] ? __pfx_wg_destruct+0x10/0x10 [ 248.304567][ T31] wg_destruct+0x25/0x2e0 [ 248.351164][ T31] ? __pfx_wg_destruct+0x10/0x10 [ 248.381209][ T31] netdev_run_todo+0xe1a/0x1000 [ 248.388138][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 248.393515][ T31] ? unregister_netdevice_queue+0x26b/0x370 [ 248.482703][ T31] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 248.501976][ T31] default_device_exit_batch+0xa24/0xaa0 [ 248.521701][ T31] ? __pfx___might_resched+0x10/0x10 [ 248.545594][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 248.551855][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 248.605063][ T31] ? cfg802154_pernet_exit+0xc3/0xe0 [ 248.610449][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 248.651976][ T31] cleanup_net+0x89d/0xcc0 [ 248.661390][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 248.685148][ T31] ? process_scheduled_works+0x976/0x1850 [ 248.691062][ T31] process_scheduled_works+0xa63/0x1850 [ 248.734911][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.741097][ T31] ? assign_work+0x364/0x3d0 [ 248.759230][ T31] worker_thread+0x870/0xd30 [ 248.763940][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.790786][ T31] ? __kthread_parkme+0x169/0x1d0 [ 248.804952][ T31] ? __pfx_worker_thread+0x10/0x10 [ 248.810166][ T31] kthread+0x2f0/0x390 [ 248.814279][ T31] ? __pfx_worker_thread+0x10/0x10 [ 248.848499][ T31] ? __pfx_kthread+0x10/0x10 [ 248.853187][ T31] ret_from_fork+0x4b/0x80 [ 248.874201][ T31] ? __pfx_kthread+0x10/0x10 [ 248.892710][ T31] ret_from_fork_asm+0x1a/0x30 [ 248.903895][ T31] [ 248.919649][ T31] INFO: task kworker/u8:9:1121 blocked for more than 144 seconds. [ 248.939454][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 248.964934][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.973692][ T31] task:kworker/u8:9 state:D stack:22032 pid:1121 tgid:1121 ppid:2 flags:0x00004000 [ 249.034918][ T31] Workqueue: events_unbound linkwatch_event [ 249.041008][ T31] Call Trace: [ 249.044327][ T31] [ 249.075259][ T31] __schedule+0x1895/0x4b30 [ 249.080477][ T31] ? __pfx___schedule+0x10/0x10 [ 249.095169][ T31] ? __pfx_lock_release+0x10/0x10 [ 249.115372][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 249.120931][ T31] ? kthread_data+0x52/0xd0 [ 249.152126][ T31] ? schedule+0x90/0x320 [ 249.162924][ T31] ? wq_worker_sleeping+0x66/0x240 [ 249.168377][ T31] ? schedule+0x90/0x320 [ 249.172781][ T31] schedule+0x14b/0x320 [ 249.199265][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.218781][ T31] __mutex_lock+0x6a7/0xd70 [ 249.225022][ T31] ? __mutex_lock+0x52a/0xd70 [ 249.239580][ T31] ? linkwatch_event+0xe/0x60 [ 249.244353][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.269025][ T31] ? process_scheduled_works+0x976/0x1850 [ 249.289871][ T31] linkwatch_event+0xe/0x60 [ 249.294464][ T31] process_scheduled_works+0xa63/0x1850 [ 249.331127][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.343113][ T31] ? assign_work+0x364/0x3d0 [ 249.354949][ T31] worker_thread+0x870/0xd30 [ 249.359639][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 249.391709][ T31] ? __kthread_parkme+0x169/0x1d0 [ 249.407557][ T31] ? __pfx_worker_thread+0x10/0x10 [ 249.412866][ T31] kthread+0x2f0/0x390 [ 249.463446][ T31] ? __pfx_worker_thread+0x10/0x10 [ 249.469010][ T31] ? __pfx_kthread+0x10/0x10 [ 249.474097][ T31] ret_from_fork+0x4b/0x80 [ 249.511066][ T31] ? __pfx_kthread+0x10/0x10 [ 249.527604][ T31] ret_from_fork_asm+0x1a/0x30 [ 249.532578][ T31] [ 249.563590][ T31] INFO: task dhcpcd:4897 blocked for more than 145 seconds. [ 249.584959][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 249.612657][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.637725][ T31] task:dhcpcd state:D stack:20608 pid:4897 tgid:4897 ppid:4896 flags:0x00000002 [ 249.673459][ T31] Call Trace: [ 249.682851][ T31] [ 249.687608][ T31] __schedule+0x1895/0x4b30 [ 249.692215][ T31] ? __pfx___schedule+0x10/0x10 [ 249.708104][ T31] ? __pfx_lock_release+0x10/0x10 [ 249.713232][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 249.723744][ T31] ? schedule+0x90/0x320 [ 249.734059][ T31] schedule+0x14b/0x320 [ 249.742173][ T31] schedule_preempt_disabled+0x13/0x30 [ 249.751644][ T31] __mutex_lock+0x6a7/0xd70 [ 249.760224][ T31] ? __mutex_lock+0x52a/0xd70 [ 249.769128][ T31] ? devinet_ioctl+0x2ce/0x1aa0 [ 249.774243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 249.783317][ T31] ? apparmor_capable+0x13b/0x1b0 [ 249.794400][ T31] ? bpf_lsm_capable+0x9/0x10 [ 249.804224][ T31] devinet_ioctl+0x2ce/0x1aa0 [ 249.813464][ T31] ? get_user_ifreq+0x1bb/0x200 [ 249.823219][ T31] inet_ioctl+0x3d7/0x4f0 [ 249.831621][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 249.840428][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 249.851073][ T31] sock_do_ioctl+0x158/0x460 [ 249.859679][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 249.868767][ T31] ? __pfx_lock_release+0x10/0x10 [ 249.874164][ T31] sock_ioctl+0x626/0x8e0 [ 249.883205][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 249.892089][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.903034][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.914708][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 249.923969][ T31] __se_sys_ioctl+0xf9/0x170 [ 249.933158][ T31] do_syscall_64+0xf3/0x230 [ 249.941788][ T31] ? clear_bhb_loop+0x35/0x90 [ 249.951019][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.960881][ T31] RIP: 0033:0x7ff67bef5d49 [ 249.969318][ T31] RSP: 002b:00007ffc3209f8a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.983050][ T31] RAX: ffffffffffffffda RBX: 00007ff67be276c0 RCX: 00007ff67bef5d49 [ 249.994979][ T31] RDX: 00007ffc320afa98 RSI: 0000000000008914 RDI: 000000000000000e [ 250.010569][ T31] RBP: 00007ffc320bfc58 R08: 00007ffc320afa58 R09: 00007ffc320afa08 [ 250.020526][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.038557][ T31] R13: 00007ffc320afa98 R14: 0000000000000028 R15: 0000000000008914 [ 250.051721][ T31] [ 250.057833][ T31] INFO: task syz-executor:5245 blocked for more than 145 seconds. [ 250.073430][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 250.083950][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.097263][ T31] task:syz-executor state:D stack:19952 pid:5245 tgid:5245 ppid:1 flags:0x00004006 [ 250.130596][ T31] Call Trace: [ 250.133956][ T31] [ 250.143577][ T31] __schedule+0x1895/0x4b30 [ 250.154572][ T31] ? __pfx___schedule+0x10/0x10 [ 250.163601][ T31] ? __pfx_lock_release+0x10/0x10 [ 250.172757][ T31] ? schedule+0x90/0x320 [ 250.181415][ T31] schedule+0x14b/0x320 [ 250.189626][ T31] schedule_timeout+0xb0/0x310 [ 250.194591][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 250.204551][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.220529][ T31] ? wait_for_completion+0x2fe/0x620 [ 250.228006][ T31] ? wait_for_completion+0x2fe/0x620 [ 250.233997][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.245890][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 250.251176][ T31] ? wait_for_completion+0x2fe/0x620 [ 250.263702][ T31] wait_for_completion+0x355/0x620 [ 250.270660][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 250.284022][ T31] ? __flush_work+0xe7/0xc50 [ 250.288879][ T31] __flush_work+0xa37/0xc50 [ 250.293455][ T31] ? __flush_work+0xe7/0xc50 [ 250.304968][ T31] ? __pfx___flush_work+0x10/0x10 [ 250.311973][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 250.323645][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.332973][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 250.344975][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.350364][ T31] unregister_netdevice_many_notify+0x87b/0x1da0 [ 250.364739][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 250.372201][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.385032][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.391552][ T31] ? queue_delayed_work_on+0x1eb/0x390 [ 250.406336][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 250.412667][ T31] unregister_netdevice_queue+0x303/0x370 [ 250.428346][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 250.439225][ T31] __tun_detach+0x6b9/0x1600 [ 250.443913][ T31] tun_chr_close+0x105/0x1b0 [ 250.454565][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 250.463801][ T31] __fput+0x23f/0x880 [ 250.472203][ T31] task_work_run+0x24f/0x310 [ 250.480900][ T31] ? kasan_quarantine_put+0xdc/0x230 [ 250.490472][ T31] ? __pfx_task_work_run+0x10/0x10 [ 250.499914][ T31] ? do_exit+0xa2a/0x28e0 [ 250.504323][ T31] ? kmem_cache_free+0x1a2/0x420 [ 250.515225][ T31] ? do_exit+0xa2a/0x28e0 [ 250.519661][ T31] do_exit+0xa2f/0x28e0 [ 250.523982][ T31] ? __pfx_do_exit+0x10/0x10 [ 250.535985][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.542197][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.554560][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.562635][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 250.575641][ T31] do_group_exit+0x207/0x2c0 [ 250.580319][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.593670][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 250.599437][ T31] get_signal+0x176f/0x1810 [ 250.604015][ T31] ? do_nanosleep+0x80/0x600 [ 250.615815][ T31] ? __pfx_get_signal+0x10/0x10 [ 250.620752][ T31] ? hrtimer_nanosleep+0x331/0x3f0 [ 250.634066][ T31] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 250.640175][ T31] arch_do_signal_or_restart+0x96/0x860 [ 250.653469][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 250.660478][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.674016][ T31] ? syscall_exit_to_user_mode+0xa3/0x370 [ 250.680270][ T31] syscall_exit_to_user_mode+0xc9/0x370 [ 250.693401][ T31] do_syscall_64+0x100/0x230 [ 250.701048][ T31] ? clear_bhb_loop+0x35/0x90 [ 250.713789][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.721327][ T31] RIP: 0033:0x7f9f43daffe5 [ 250.733320][ T31] RSP: 002b:00007f9f4405fd50 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 250.743449][ T31] RAX: 0000000000000000 RBX: 0000000000000019 RCX: 00007f9f43daffe5 [ 250.760684][ T31] RDX: 00007f9f4405fd90 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.771581][ T31] RBP: 00007f9f4405fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 250.785004][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000030 [ 250.793057][ T31] R13: 00000000000165c6 R14: 0000000000014ed8 R15: 00007f9f4405fe40 [ 250.809265][ T31] [ 250.812448][ T31] INFO: task syz-executor:5246 blocked for more than 146 seconds. [ 250.829044][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 250.839233][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.853904][ T31] task:syz-executor state:D stack:20016 pid:5246 tgid:5246 ppid:1 flags:0x00004006 [ 250.867279][ T31] Call Trace: [ 250.870844][ T31] [ 250.873908][ T31] __schedule+0x1895/0x4b30 [ 250.888019][ T31] ? __pfx___schedule+0x10/0x10 [ 250.892970][ T31] ? __pfx_lock_release+0x10/0x10 [ 250.902243][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 250.912205][ T31] ? schedule+0x90/0x320 [ 250.921070][ T31] schedule+0x14b/0x320 [ 250.932366][ T31] schedule_preempt_disabled+0x13/0x30 [ 250.941912][ T31] __mutex_lock+0x6a7/0xd70 [ 250.950932][ T31] ? __mutex_lock+0x52a/0xd70 [ 250.959848][ T31] ? tun_chr_close+0x3b/0x1b0 [ 250.968821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 250.974121][ T31] ? __pfx_call_rcu+0x10/0x10 [ 250.983146][ T31] tun_chr_close+0x3b/0x1b0 [ 250.992996][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 251.002187][ T31] __fput+0x23f/0x880 [ 251.010222][ T31] task_work_run+0x24f/0x310 [ 251.019000][ T31] ? kasan_quarantine_put+0xdc/0x230 [ 251.029923][ T31] ? __pfx_task_work_run+0x10/0x10 [ 251.039075][ T31] ? do_exit+0xa2a/0x28e0 [ 251.043571][ T31] ? kmem_cache_free+0x1a2/0x420 [ 251.054415][ T31] ? do_exit+0xa2a/0x28e0 [ 251.063109][ T31] do_exit+0xa2f/0x28e0 [ 251.071263][ T31] ? __pfx_do_exit+0x10/0x10 [ 251.079875][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.089216][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.099201][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.111693][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 251.120863][ T31] do_group_exit+0x207/0x2c0 [ 251.130426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.158617][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 251.164011][ T31] get_signal+0x176f/0x1810 [ 251.176262][ T31] ? __pfx_get_signal+0x10/0x10 [ 251.181310][ T31] arch_do_signal_or_restart+0x96/0x860 [ 251.193324][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 251.201312][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.213681][ T31] ? syscall_exit_to_user_mode+0xa3/0x370 [ 251.223053][ T31] syscall_exit_to_user_mode+0xc9/0x370 [ 251.235027][ T31] do_syscall_64+0x100/0x230 [ 251.239731][ T31] ? clear_bhb_loop+0x35/0x90 [ 251.244472][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.258207][ T31] RIP: 0033:0x7f3184b7c93c [ 251.262797][ T31] RSP: 002b:00007f3184e5fd90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.276482][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f3184b7c93c [ 251.284537][ T31] RDX: 0000000000000028 RSI: 00007f3184e5fe40 RDI: 00000000000000f9 [ 251.299622][ T31] RBP: 00007f3184e5fdec R08: 0000000000000000 R09: 0079746972756365 [ 251.310542][ T31] R10: 00007f3184d087e0 R11: 0000000000000246 R12: 0000000000000062 [ 251.325239][ T31] R13: 0000000000015d43 R14: 0000000000014ac6 R15: 00007f3184e5fe40 [ 251.333965][ T31] [ 251.345125][ T31] INFO: task syz-executor:5248 blocked for more than 147 seconds. [ 251.353709][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 251.365395][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.374132][ T31] task:syz-executor state:D stack:20016 pid:5248 tgid:5248 ppid:1 flags:0x00004006 [ 251.399198][ T31] Call Trace: [ 251.402641][ T31] [ 251.411087][ T31] __schedule+0x1895/0x4b30 [ 251.418987][ T31] ? __pfx___schedule+0x10/0x10 [ 251.423920][ T31] ? __pfx_lock_release+0x10/0x10 [ 251.434467][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 251.448684][ T31] ? schedule+0x90/0x320 [ 251.453197][ T31] schedule+0x14b/0x320 [ 251.463859][ T31] schedule_preempt_disabled+0x13/0x30 [ 251.473347][ T31] __mutex_lock+0x6a7/0xd70 [ 251.482406][ T31] ? __mutex_lock+0x52a/0xd70 [ 251.491028][ T31] ? tun_chr_close+0x3b/0x1b0 [ 251.501061][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 251.510036][ T31] ? __pfx_call_rcu+0x10/0x10 [ 251.518784][ T31] tun_chr_close+0x3b/0x1b0 [ 251.523528][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 251.532901][ T31] __fput+0x23f/0x880 [ 251.542692][ T31] task_work_run+0x24f/0x310 [ 251.551337][ T31] ? kasan_quarantine_put+0xdc/0x230 [ 251.561988][ T31] ? __pfx_task_work_run+0x10/0x10 [ 251.571678][ T31] ? do_exit+0xa2a/0x28e0 [ 251.580114][ T31] ? kmem_cache_free+0x1a2/0x420 [ 251.589544][ T31] ? do_exit+0xa2a/0x28e0 [ 251.593951][ T31] do_exit+0xa2f/0x28e0 [ 251.602531][ T31] ? __pfx_do_exit+0x10/0x10 [ 251.611454][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.622207][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.632155][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.643567][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 251.652753][ T31] do_group_exit+0x207/0x2c0 [ 251.661737][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.669774][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 251.682722][ T31] get_signal+0x176f/0x1810 [ 251.688909][ T31] ? __pfx_get_signal+0x10/0x10 [ 251.694119][ T31] arch_do_signal_or_restart+0x96/0x860 [ 251.704935][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 251.711170][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.724261][ T31] ? syscall_exit_to_user_mode+0xa3/0x370 [ 251.730525][ T31] syscall_exit_to_user_mode+0xc9/0x370 [ 251.744864][ T31] do_syscall_64+0x100/0x230 [ 251.749559][ T31] ? clear_bhb_loop+0x35/0x90 [ 251.754307][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.768258][ T31] RIP: 0033:0x7fb5fcf7c93c [ 251.772758][ T31] RSP: 002b:00007fb5fd25fd90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.791156][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fb5fcf7c93c [ 251.802057][ T31] RDX: 0000000000000028 RSI: 00007fb5fd25fe40 RDI: 00000000000000f9 [ 251.814969][ T31] RBP: 00007fb5fd25fdec R08: 0000000000000000 R09: 0079746972756365 [ 251.823111][ T31] R10: 00007fb5fd1087e0 R11: 0000000000000246 R12: 0000555571044603 [ 251.839120][ T31] R13: 0000555571044590 R14: 0000000000000005 R15: 00007fb5fd25fe40 [ 251.853113][ T31] [ 251.861486][ T31] INFO: task syz-executor:5387 blocked for more than 147 seconds. [ 251.872869][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 251.888149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.900905][ T31] task:syz-executor state:D stack:21728 pid:5387 tgid:5387 ppid:1 flags:0x00004004 [ 251.920357][ T31] Call Trace: [ 251.923714][ T31] [ 251.928998][ T31] __schedule+0x1895/0x4b30 [ 251.933604][ T31] ? __pfx___schedule+0x10/0x10 [ 251.945338][ T31] ? __pfx_lock_release+0x10/0x10 [ 251.958237][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 251.963882][ T31] ? schedule+0x90/0x320 [ 251.972844][ T31] schedule+0x14b/0x320 [ 251.981694][ T31] schedule_preempt_disabled+0x13/0x30 [ 251.991249][ T31] __mutex_lock+0x6a7/0xd70 [ 252.000035][ T31] ? __mutex_lock+0x52a/0xd70 [ 252.008711][ T31] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 252.013997][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 252.023105][ T31] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 252.033232][ T31] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 252.042516][ T31] ? __lock_acquire+0x1384/0x2050 [ 252.052661][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.062130][ T31] netlink_rcv_skb+0x1e3/0x430 [ 252.070916][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.080924][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.091895][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.101777][ T31] netlink_unicast+0x7f6/0x990 [ 252.110603][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 252.119980][ T31] ? __virt_addr_valid+0x183/0x530 [ 252.129115][ T31] ? __check_object_size+0x48e/0x900 [ 252.134487][ T31] netlink_sendmsg+0x8e4/0xcb0 [ 252.143764][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.161324][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 252.170398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.193453][ T31] __sock_sendmsg+0x221/0x270 [ 252.198651][ T31] __sys_sendto+0x398/0x4f0 [ 252.203229][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 252.218318][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.224444][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.235344][ T31] __x64_sys_sendto+0xde/0x100 [ 252.240195][ T31] do_syscall_64+0xf3/0x230 [ 252.244754][ T31] ? clear_bhb_loop+0x35/0x90 [ 252.265287][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.271277][ T31] RIP: 0033:0x7f228257fd8c [ 252.286969][ T31] RSP: 002b:00007f228285f630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 252.302479][ T31] RAX: ffffffffffffffda RBX: 00007f2283264620 RCX: 00007f228257fd8c [ 252.310957][ T31] RDX: 0000000000000028 RSI: 00007f2283264670 RDI: 0000000000000003 [ 252.324934][ T31] RBP: 0000000000000000 R08: 00007f228285f684 R09: 000000000000000c [ 252.332983][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 252.350869][ T31] R13: 0000000000000000 R14: 00007f2283264670 R15: 0000000000000000 [ 252.364299][ T31] [ 252.373507][ T31] INFO: task syz-executor:5489 blocked for more than 148 seconds. [ 252.385191][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 252.392552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.408268][ T31] task:syz-executor state:D stack:26736 pid:5489 tgid:5489 ppid:1 flags:0x00004006 [ 252.433022][ T31] Call Trace: [ 252.437272][ T31] [ 252.440271][ T31] __schedule+0x1895/0x4b30 [ 252.452321][ T31] ? __pfx___schedule+0x10/0x10 [ 252.458229][ T31] ? __pfx_lock_release+0x10/0x10 [ 252.463361][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 252.477553][ T31] ? schedule+0x90/0x320 [ 252.481892][ T31] schedule+0x14b/0x320 [ 252.492317][ T31] schedule_preempt_disabled+0x13/0x30 [ 252.504021][ T31] __mutex_lock+0x6a7/0xd70 [ 252.512574][ T31] ? __mutex_lock+0x52a/0xd70 [ 252.521525][ T31] ? register_nexthop_notifier+0x84/0x290 [ 252.531351][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 252.540514][ T31] ? __asan_memset+0x23/0x50 [ 252.549306][ T31] register_nexthop_notifier+0x84/0x290 [ 252.561092][ T31] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 252.572418][ T31] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 252.581264][ T31] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 252.594992][ T31] ? __asan_memset+0x23/0x50 [ 252.599681][ T31] ops_init+0x31e/0x590 [ 252.603981][ T31] ? lockdep_init_map_type+0xa1/0x910 [ 252.618741][ T31] setup_net+0x287/0x9e0 [ 252.623180][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 252.631781][ T31] ? __pfx_setup_net+0x10/0x10 [ 252.641739][ T31] copy_net_ns+0x33f/0x570 [ 252.649071][ T31] create_new_namespaces+0x425/0x7b0 [ 252.654550][ T31] unshare_nsproxy_namespaces+0x124/0x180 [ 252.669175][ T31] ksys_unshare+0x619/0xc10 [ 252.673797][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 252.683393][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.697663][ T31] ? do_syscall_64+0x100/0x230 [ 252.702716][ T31] __x64_sys_unshare+0x38/0x40 [ 252.712057][ T31] do_syscall_64+0xf3/0x230 [ 252.720673][ T31] ? clear_bhb_loop+0x35/0x90 [ 252.730491][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.740499][ T31] RIP: 0033:0x7f6fca77f6f7 [ 252.748888][ T31] RSP: 002b:00007f6fcaa5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 252.761785][ T31] RAX: ffffffffffffffda RBX: 00007f6fca7f22ec RCX: 00007f6fca77f6f7 [ 252.775003][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 252.783325][ T31] RBP: 0000000000000000 R08: 00007f6fcb467d60 R09: 0000000000000000 [ 252.800251][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 252.811596][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 252.827414][ T31] [ 252.830603][ T31] INFO: task syz-executor:5491 blocked for more than 148 seconds. [ 252.845550][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 252.852907][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.870462][ T31] task:syz-executor state:D stack:26560 pid:5491 tgid:5491 ppid:1 flags:0x00004006 [ 252.883778][ T31] Call Trace: [ 252.892274][ T31] [ 252.899863][ T31] __schedule+0x1895/0x4b30 [ 252.904489][ T31] ? __pfx___schedule+0x10/0x10 [ 252.917746][ T31] ? __pfx_lock_release+0x10/0x10 [ 252.923051][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 252.932717][ T31] ? schedule+0x90/0x320 [ 252.941059][ T31] schedule+0x14b/0x320 [ 252.949678][ T31] schedule_preempt_disabled+0x13/0x30 [ 252.960582][ T31] __mutex_lock+0x6a7/0xd70 [ 252.969204][ T31] ? __mutex_lock+0x52a/0xd70 [ 252.979099][ T31] ? register_nexthop_notifier+0x84/0x290 [ 252.988993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 252.994144][ T31] ? __asan_memset+0x23/0x50 [ 253.003590][ T31] register_nexthop_notifier+0x84/0x290 [ 253.014297][ T31] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 253.024307][ T31] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 253.034996][ T31] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 253.041270][ T31] ? __asan_memset+0x23/0x50 [ 253.052796][ T31] ops_init+0x31e/0x590 [ 253.057623][ T31] ? lockdep_init_map_type+0xa1/0x910 [ 253.063074][ T31] setup_net+0x287/0x9e0 [ 253.075037][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 253.080777][ T31] ? __pfx_setup_net+0x10/0x10 [ 253.092840][ T31] copy_net_ns+0x33f/0x570 [ 253.098401][ T31] create_new_namespaces+0x425/0x7b0 [ 253.103803][ T31] unshare_nsproxy_namespaces+0x124/0x180 [ 253.117315][ T31] ksys_unshare+0x619/0xc10 [ 253.121937][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 253.132585][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.149766][ T31] ? do_syscall_64+0x100/0x230 [ 253.154635][ T31] __x64_sys_unshare+0x38/0x40 [ 253.162340][ T31] do_syscall_64+0xf3/0x230 [ 253.172107][ T31] ? clear_bhb_loop+0x35/0x90 [ 253.182746][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.195922][ T31] RIP: 0033:0x7fe863d7f6f7 [ 253.200414][ T31] RSP: 002b:00007fe86405ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 253.231372][ T31] RAX: ffffffffffffffda RBX: 00007fe863df22ec RCX: 00007fe863d7f6f7 [ 253.242716][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 253.258704][ T31] RBP: 0000000000000000 R08: 00007fe864a67d60 R09: 0000000000000000 [ 253.269631][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 253.283701][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 253.294589][ T31] [ 253.307496][ T31] INFO: task syz-executor:5493 blocked for more than 149 seconds. [ 253.320441][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 253.330674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.345007][ T31] task:syz-executor state:D stack:25976 pid:5493 tgid:5493 ppid:1 flags:0x00004006 [ 253.364549][ T31] Call Trace: [ 253.368587][ T31] [ 253.371577][ T31] __schedule+0x1895/0x4b30 [ 253.384996][ T31] ? __pfx___schedule+0x10/0x10 [ 253.390205][ T31] ? __pfx_lock_release+0x10/0x10 [ 253.401389][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 253.409743][ T31] ? schedule+0x90/0x320 [ 253.414063][ T31] schedule+0x14b/0x320 [ 253.424786][ T31] schedule_preempt_disabled+0x13/0x30 [ 253.430505][ T31] __mutex_lock+0x6a7/0xd70 [ 253.442607][ T31] ? __mutex_lock+0x52a/0xd70 [ 253.447823][ T31] ? register_nexthop_notifier+0x84/0x290 [ 253.453628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 253.465435][ T31] ? __asan_memset+0x23/0x50 [ 253.470141][ T31] register_nexthop_notifier+0x84/0x290 [ 253.486992][ T31] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 253.493080][ T31] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 253.504537][ T31] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 253.514196][ T31] ? __asan_memset+0x23/0x50 [ 253.524283][ T31] ops_init+0x31e/0x590 [ 253.532684][ T31] ? lockdep_init_map_type+0xa1/0x910 [ 253.545002][ T31] setup_net+0x287/0x9e0 [ 253.549338][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 253.561676][ T31] ? __pfx_setup_net+0x10/0x10 [ 253.567233][ T31] copy_net_ns+0x33f/0x570 [ 253.571997][ T31] create_new_namespaces+0x425/0x7b0 [ 253.585420][ T31] unshare_nsproxy_namespaces+0x124/0x180 [ 253.591256][ T31] ksys_unshare+0x619/0xc10 [ 253.604758][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 253.610268][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.623890][ T31] ? do_syscall_64+0x100/0x230 [ 253.629235][ T31] __x64_sys_unshare+0x38/0x40 [ 253.634221][ T31] do_syscall_64+0xf3/0x230 [ 253.644967][ T31] ? clear_bhb_loop+0x35/0x90 [ 253.649846][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.664615][ T31] RIP: 0033:0x7fddb5b7f6f7 [ 253.669559][ T31] RSP: 002b:00007fddb5e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 253.685463][ T31] RAX: ffffffffffffffda RBX: 00007fddb5bf22ec RCX: 00007fddb5b7f6f7 [ 253.701399][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 253.713391][ T31] RBP: 0000000000000000 R08: 00007fddb6867d60 R09: 0000000000000000 [ 253.727942][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 253.739974][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 253.752379][ T31] [ 253.761246][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 253.774447][ T31] INFO: task syz-executor:5494 blocked for more than 149 seconds. [ 253.789694][ T31] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 253.800389][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.818732][ T31] task:syz-executor state:D stack:26624 pid:5494 tgid:5494 ppid:1 flags:0x00004006 [ 253.832007][ T31] Call Trace: [ 253.840413][ T31] [ 253.843423][ T31] __schedule+0x1895/0x4b30 [ 253.850864][ T31] ? __pfx___schedule+0x10/0x10 [ 253.861081][ T31] ? __pfx_lock_release+0x10/0x10 [ 253.869024][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 253.874574][ T31] ? schedule+0x90/0x320 [ 253.885232][ T31] schedule+0x14b/0x320 [ 253.889483][ T31] schedule_preempt_disabled+0x13/0x30 [ 253.902570][ T31] __mutex_lock+0x6a7/0xd70 [ 253.908026][ T31] ? __mutex_lock+0x52a/0xd70 [ 253.912775][ T31] ? register_nexthop_notifier+0x84/0x290 [ 253.926918][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 253.932051][ T31] ? __asan_memset+0x23/0x50 [ 253.943523][ T31] register_nexthop_notifier+0x84/0x290 [ 253.952230][ T31] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 253.963301][ T31] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 253.972555][ T31] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 253.984034][ T31] ? __asan_memset+0x23/0x50 [ 253.993106][ T31] ops_init+0x31e/0x590 [ 254.004047][ T31] ? lockdep_init_map_type+0xa1/0x910 [ 254.012456][ T31] setup_net+0x287/0x9e0 [ 254.022378][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 254.031429][ T31] ? __pfx_setup_net+0x10/0x10 [ 254.041586][ T31] copy_net_ns+0x33f/0x570 [ 254.048938][ T31] create_new_namespaces+0x425/0x7b0 [ 254.054404][ T31] unshare_nsproxy_namespaces+0x124/0x180 [ 254.069726][ T31] ksys_unshare+0x619/0xc10 [ 254.074339][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 254.081135][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.093497][ T31] ? do_syscall_64+0x100/0x230 [ 254.101527][ T31] __x64_sys_unshare+0x38/0x40 [ 254.114066][ T31] do_syscall_64+0xf3/0x230 [ 254.121214][ T31] ? clear_bhb_loop+0x35/0x90 [ 254.131554][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.140330][ T31] RIP: 0033:0x7f7d9097f6f7 [ 254.151238][ T31] RSP: 002b:00007f7d90c5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 254.162511][ T31] RAX: ffffffffffffffda RBX: 00007f7d909f22ec RCX: 00007f7d9097f6f7 [ 254.175113][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 254.183165][ T31] RBP: 0000000000000000 R08: 00007f7d91667d60 R09: 0000000000000000 [ 254.199712][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 254.211707][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 254.229632][ T31] [ 254.232737][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 254.250339][ T31] [ 254.250339][ T31] Showing all locks held in the system: [ 254.273370][ T31] 3 locks held by kworker/u8:0/11: [ 254.283016][ T31] #0: ffff88814bb96948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 254.301650][ T31] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 254.322971][ T31] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 254.334695][ T31] 3 locks held by kworker/1:0/25: [ 254.348000][ T31] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 254.368378][ T31] #1: ffffc900001f7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 254.383652][ T31] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 254.398896][ T31] 1 lock held by khungtaskd/31: [ 254.409226][ T31] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 254.423917][ T31] 3 locks held by kworker/1:2/938: [ 254.433916][ T31] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 254.454018][ T31] #1: ffffc90003e47d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 254.474953][ T31] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 254.484367][ T31] 4 locks held by kworker/u8:6/1068: [ 254.501668][ T31] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 254.521827][ T31] #1: ffffc900042e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 254.542702][ T31] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 254.552876][ T31] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 254.569380][ T31] 3 locks held by kworker/u8:9/1121: [ 254.581331][ T31] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 254.598470][ T31] #1: ffffc90004397d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 254.614932][ T31] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 254.624194][ T31] 1 lock held by dhcpcd/4897: [ 254.636696][ T31] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 254.651177][ T31] 2 locks held by getty/4983: [ 254.658788][ T31] #0: ffff88814bfb50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 254.673993][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 254.688182][ T31] 2 locks held by syz-executor/5245: [ 254.693544][ T31] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 254.711986][ T31] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 254.725178][ T31] 1 lock held by syz-executor/5246: [ 254.730454][ T31] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 254.749701][ T31] 1 lock held by syz-executor/5248: [ 254.759124][ T31] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 254.772083][ T31] 3 locks held by kworker/0:4/5282: [ 254.781289][ T31] 1 lock held by syz-executor/5387: [ 254.790488][ T31] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 254.805391][ T31] 2 locks held by syz-executor/5489: [ 254.810744][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 254.828658][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 254.843822][ T31] 2 locks held by syz-executor/5491: [ 254.854284][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 254.867925][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 254.882336][ T31] 2 locks held by syz-executor/5493: [ 254.891561][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 254.904852][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 254.924649][ T31] 2 locks held by syz-executor/5494: [ 254.930395][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 254.947992][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 254.962115][ T31] 2 locks held by syz-executor/5513: [ 254.973418][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 254.987035][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.002427][ T31] 2 locks held by syz-executor/5522: [ 255.010630][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.031933][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.043304][ T31] 2 locks held by syz-executor/5524: [ 255.056528][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.072493][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.086013][ T31] 2 locks held by syz-executor/5525: [ 255.091372][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.108640][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.123054][ T31] 2 locks held by syz-executor/5529: [ 255.133581][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.153152][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.163830][ T31] 2 locks held by syz-executor/5534: [ 255.176764][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.191701][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.205986][ T31] 2 locks held by syz-executor/5543: [ 255.211346][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.224897][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.242493][ T31] 2 locks held by syz-executor/5547: [ 255.249590][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.266470][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.284293][ T31] 2 locks held by syz-executor/5548: [ 255.290135][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.314928][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.333282][ T31] 2 locks held by syz-executor/5550: [ 255.339076][ T31] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 255.357027][ T31] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 255.374328][ T31] [ 255.382102][ T31] ============================================= [ 255.382102][ T31] [ 255.398267][ T31] NMI backtrace for cpu 1 [ 255.402684][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 255.412903][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 255.423019][ T31] Call Trace: [ 255.426337][ T31] [ 255.429318][ T31] dump_stack_lvl+0x241/0x360 [ 255.434051][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.439311][ T31] ? __pfx__printk+0x10/0x10 [ 255.443968][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 255.448988][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 255.454501][ T31] ? _printk+0xd5/0x120 [ 255.458705][ T31] ? __pfx__printk+0x10/0x10 [ 255.463345][ T31] ? __wake_up_klogd+0xcc/0x110 [ 255.468249][ T31] ? __pfx__printk+0x10/0x10 [ 255.472894][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 255.478169][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 255.484198][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 255.490242][ T31] watchdog+0xff4/0x1040 [ 255.494536][ T31] ? watchdog+0x1ea/0x1040 [ 255.499006][ T31] ? __pfx_watchdog+0x10/0x10 [ 255.503768][ T31] kthread+0x2f0/0x390 [ 255.507885][ T31] ? __pfx_watchdog+0x10/0x10 [ 255.512609][ T31] ? __pfx_kthread+0x10/0x10 [ 255.517244][ T31] ret_from_fork+0x4b/0x80 [ 255.521720][ T31] ? __pfx_kthread+0x10/0x10 [ 255.526350][ T31] ret_from_fork_asm+0x1a/0x30 [ 255.531220][ T31] [ 255.534932][ T31] Sending NMI from CPU 1 to CPUs 0: [ 255.540202][ C0] NMI backtrace for cpu 0 [ 255.540269][ C0] CPU: 0 UID: 0 PID: 5282 Comm: kworker/0:4 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 255.540292][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 255.540304][ C0] Workqueue: events nsim_dev_trap_report_work [ 255.540335][ C0] RIP: 0010:deref_stack_reg+0x3/0x210 [ 255.540366][ C0] Code: e8 a2 21 bd 00 e9 9d fe ff ff e8 48 e7 80 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 fe [ 255.540385][ C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00000283 [ 255.540400][ C0] RAX: fffffffffffffff0 RBX: ffffffff90fb6c9e RCX: 0000000000000000 [ 255.540414][ C0] RDX: ffffc90000007700 RSI: ffffc90003e87bb0 RDI: ffffc900000076c0 [ 255.540428][ C0] RBP: dffffc0000000000 R08: ffffc9000000771f R09: 0000000000000000 [ 255.540441][ C0] R10: ffffc90000007710 R11: fffff52000000ee4 R12: ffffc90003e88000 [ 255.540454][ C0] R13: ffffc900000076c0 R14: ffffffff815e6e53 R15: ffffc90000007710 [ 255.540468][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 255.540483][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.540497][ C0] CR2: 0000000020050000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 255.540512][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.540522][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.540534][ C0] Call Trace: [ 255.540540][ C0] [ 255.540549][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 255.540577][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 255.540604][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 255.540631][ C0] ? nmi_handle+0x2a/0x5a0 [ 255.540656][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 255.540680][ C0] ? nmi_handle+0x14f/0x5a0 [ 255.540697][ C0] ? nmi_handle+0x2a/0x5a0 [ 255.540715][ C0] ? deref_stack_reg+0x3/0x210 [ 255.540741][ C0] ? default_do_nmi+0x63/0x160 [ 255.540759][ C0] ? exc_nmi+0x123/0x1f0 [ 255.540775][ C0] ? end_repeat_nmi+0xf/0x53 [ 255.540797][ C0] ? process_scheduled_works+0xa63/0x1850 [ 255.540826][ C0] ? deref_stack_reg+0x3/0x210 [ 255.540853][ C0] ? deref_stack_reg+0x3/0x210 [ 255.540880][ C0] ? deref_stack_reg+0x3/0x210 [ 255.540906][ C0] [ 255.540912][ C0] [ 255.540919][ C0] unwind_next_frame+0x1799/0x22d0 [ 255.540950][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 255.540977][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 255.540999][ C0] arch_stack_walk+0x11c/0x150 [ 255.541020][ C0] ? process_scheduled_works+0xa63/0x1850 [ 255.541052][ C0] stack_trace_save+0x118/0x1d0 [ 255.541073][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 255.541095][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.541124][ C0] kasan_save_track+0x3f/0x80 [ 255.541140][ C0] ? kasan_save_track+0x3f/0x80 [ 255.541155][ C0] ? kasan_save_free_info+0x40/0x50 [ 255.541179][ C0] ? __kasan_slab_free+0x59/0x70 [ 255.541195][ C0] ? kfree+0x1a0/0x440 [ 255.541215][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 255.541232][ C0] ? dst_destroy+0x171/0x460 [ 255.541255][ C0] ? rcu_core+0xaaa/0x17a0 [ 255.541271][ C0] ? handle_softirqs+0x2c5/0x980 [ 255.541292][ C0] ? do_softirq+0x11b/0x1e0 [ 255.541314][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 255.541336][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 255.541382][ C0] kasan_save_free_info+0x40/0x50 [ 255.541405][ C0] __kasan_slab_free+0x59/0x70 [ 255.541422][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 255.541438][ C0] kfree+0x1a0/0x440 [ 255.541458][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 255.541477][ C0] ref_tracker_free+0x4ef/0x7e0 [ 255.541495][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 255.541512][ C0] ? dst_destroy+0x171/0x460 [ 255.541534][ C0] ? rcu_core+0xaaa/0x17a0 [ 255.541549][ C0] ? handle_softirqs+0x2c5/0x980 [ 255.541571][ C0] ? do_softirq+0x11b/0x1e0 [ 255.541591][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 255.541613][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 255.541638][ C0] ? process_scheduled_works+0xa63/0x1850 [ 255.541660][ C0] ? worker_thread+0x870/0xd30 [ 255.541683][ C0] ? kthread+0x2f0/0x390 [ 255.541698][ C0] ? ret_from_fork+0x4b/0x80 [ 255.541723][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 255.541750][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.541775][ C0] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 255.541798][ C0] dst_destroy+0x171/0x460 [ 255.541822][ C0] ? rcu_core+0xa37/0x17a0 [ 255.541838][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 255.541861][ C0] rcu_core+0xaaa/0x17a0 [ 255.541884][ C0] ? __pfx_rcu_core+0x10/0x10 [ 255.541902][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.541929][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.541957][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 255.541978][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 255.542000][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 255.542020][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 255.542051][ C0] handle_softirqs+0x2c5/0x980 [ 255.542076][ C0] ? do_softirq+0x11b/0x1e0 [ 255.542099][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 255.542126][ C0] do_softirq+0x11b/0x1e0 [ 255.542148][ C0] [ 255.542153][ C0] [ 255.542160][ C0] ? __pfx_do_softirq+0x10/0x10 [ 255.542182][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 255.542210][ C0] ? rcu_is_watching+0x15/0xb0 [ 255.542229][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 255.542252][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 255.542277][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.542301][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.542324][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 255.542351][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 255.542383][ C0] ? process_scheduled_works+0x976/0x1850 [ 255.542407][ C0] process_scheduled_works+0xa63/0x1850 [ 255.542444][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.542471][ C0] ? assign_work+0x364/0x3d0 [ 255.542496][ C0] worker_thread+0x870/0xd30 [ 255.542524][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 255.542546][ C0] ? __kthread_parkme+0x169/0x1d0 [ 255.542573][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.542597][ C0] kthread+0x2f0/0x390 [ 255.542612][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.542636][ C0] ? __pfx_kthread+0x10/0x10 [ 255.542652][ C0] ret_from_fork+0x4b/0x80 [ 255.542676][ C0] ? __pfx_kthread+0x10/0x10 [ 255.542692][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.542723][ C0] [ 256.225158][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.231598][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.239152][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 256.246046][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 256.256241][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 256.266335][ T31] Call Trace: [ 256.269642][ T31] [ 256.272606][ T31] dump_stack_lvl+0x241/0x360 [ 256.277336][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.282577][ T31] ? __pfx__printk+0x10/0x10 [ 256.287205][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.293244][ T31] ? vscnprintf+0x5d/0x90 [ 256.297631][ T31] panic+0x349/0x880 [ 256.301567][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 256.307783][ T31] ? __pfx_panic+0x10/0x10 [ 256.312236][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 256.317740][ T31] ? __irq_work_queue_local+0x137/0x410 [ 256.323340][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 256.328854][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 256.335063][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 256.341272][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 256.347482][ T31] watchdog+0x1033/0x1040 [ 256.351859][ T31] ? watchdog+0x1ea/0x1040 [ 256.356327][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.361134][ T31] kthread+0x2f0/0x390 [ 256.365241][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.369985][ T31] ? __pfx_kthread+0x10/0x10 [ 256.374700][ T31] ret_from_fork+0x4b/0x80 [ 256.379208][ T31] ? __pfx_kthread+0x10/0x10 [ 256.383927][ T31] ret_from_fork_asm+0x1a/0x30 [ 256.388775][ T31] [ 256.392253][ T31] Kernel Offset: disabled [ 256.396588][ T31] Rebooting in 86400 seconds..