last executing test programs:

15.778757852s ago: executing program 1 (id=6):
r0 = syz_open_dev$I2C(0x0, 0x319, 0x8000)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0))
r2 = dup(r1)
read$dsp(r2, &(0x7f0000000100)=""/167, 0xa7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x200}, {0x5794, 0x800000}]}, 0x14, 0x3)
r3 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80800)
syz_io_uring_complete(0x0)
accept(r7, &(0x7f0000000200)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4a6}]}, &(0x7f00000002c0)=0x10)
mq_timedreceive(r5, 0x0, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e)

14.370218001s ago: executing program 1 (id=8):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc0305616, &(0x7f0000000040)={0x0, 0x0, @value})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x0, 0x7}, {0x7, 0x0, 0x8, 0x7}, {0x0, 0x0, 0xff}, {}, {}]})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x5592)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x400003, @loopback, 0x700}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255})

14.214670846s ago: executing program 4 (id=9):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000280)={0x18, 0x1, 0x0, 0x0, r2})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x63)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd600000000014068efe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4700004a7400010000e90f00000000000a80000000000000000000000800fcffab1e000108000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[], 0xffffff6a)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x497c, &(0x7f00000001c0))
openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

14.043694233s ago: executing program 0 (id=10):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000280)=""/247, 0xf7}], 0x1, 0x2, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf00f, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c0000001b0a01020000000000000000010000000900010073797a3000000000090003"], 0x22b4}}, 0x0)

13.780271236s ago: executing program 0 (id=12):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r3, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
socket$inet6_dccp(0xa, 0x6, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)

13.288885955s ago: executing program 1 (id=13):
r0 = io_uring_setup(0x7813, &(0x7f00000002c0)={0x0, 0x1000002, 0x200, 0x0, 0x101})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16f601, 0x0)
write$sequencer(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0293"], 0x9)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
getsockopt$inet_pktinfo(r3, 0x10d, 0xa5, 0xfffffffffffffffe, &(0x7f0000000000)=0x300)
r4 = socket$inet(0x2, 0x3, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0xa0c4)
setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000004b00)=ANY=[], 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="00006717adcc940145f8876ca7dc7cdfe228f11b79e9dd8c68be531b88677652f2b9b7b8c9ef52e2cbd5c68cd69f33798912dcef6e3a1e32a642d8f04fdd51b91e332ddf59c3f8745aecf4b8906b"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60080, 0x0)

13.086104932s ago: executing program 4 (id=15):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r2, 0xc0305616, &(0x7f0000000040)={0x0, 0x0, @value})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x0, 0x7}, {0x7, 0x0, 0x8, 0x7}, {0x0, 0x0, 0xff}, {}, {}]})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x5592)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x400003, @loopback, 0x700}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255})

13.023904302s ago: executing program 1 (id=16):
r0 = syz_open_dev$I2C(0x0, 0x319, 0x8000)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0))
r2 = dup(r1)
read$dsp(r2, &(0x7f0000000100)=""/167, 0xa7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x200}, {0x5794, 0x800000}]}, 0x14, 0x3)
r3 = socket(0xa, 0x40000000002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80800)
syz_io_uring_complete(0x0)
accept(r7, &(0x7f0000000200)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4a6}]}, &(0x7f00000002c0)=0x10)
mq_timedreceive(r5, 0x0, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e)

11.816100623s ago: executing program 1 (id=19):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x7}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0xbc, 0x2, [@TCA_FW_ACT={0xa4, 0x4, [@m_mirred={0xa0, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x73, 0x6, "2eb216699f54d3c2ad9a9e96269e761acd58d65225d4477c3d1f6ccde8349cec38c79f76e25df1be31ba52afaf9629ce466ef7212d6d9a3b13fdc9a74fa856899f3947f992604bf9fa54c6d4cc0fb49aca07a8c99f72ccdf0a9d3bf85260d98becd41ec6c465dffed39d9006d7f2bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e", 0xb8}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

11.755243062s ago: executing program 4 (id=20):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x80b00, @mcast2}, 0x1c, 0x0}, 0x0)

11.57842272s ago: executing program 4 (id=21):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
listen(0xffffffffffffffff, 0x80000000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x6, 0x2}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, r0, 0x100000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102503000000000000000109025c0002010000000904000001020d0041bc6baa872a7e731200000d240f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000f, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000020601010000fd091c0f00000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004c6d79e8ca5f949385165c00a4fba8865e7a906ca33be4ea1bc87368deed2fe9176edebe1e23bd216b621ce4cf1190e21c534575dcd6a1e75326f0d2447b72ebe2936e0391388e7952967293064dad04d441564774dc78bb88d4eb58ab07526532d09e7c7760000000000"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/636], 0x27c}}, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioprio_get$pid(0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x0, "6e306b3925024a000000004118f25b2040a2f0ffffff00000000000300", <r8=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000000c0)={0x0, "ce0edfe3181085c23e75a96da420cfa0c88d3f4ecf5ebc10d54e511ebdb8b8f6", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"30263524476fc10251347f3066dc0e9b4ca4ea9f23df5151913b5724eee322d1", r8, <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000440)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}]})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="041817aaaaaaaaaa10eab040243e93590b3c644b8922069b8206"], 0x1a)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sync()

11.577734412s ago: executing program 1 (id=22):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000005c0)=0x3ff, 0xffffffe1)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0}, 0x0)
r1 = socket$kcm(0x29, 0x6, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000380), 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"})
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0x89)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0000008a3f00"})
r5 = syz_open_pts(r4, 0x0)
r6 = dup(r5)
read$FUSE(r6, &(0x7f00000023c0)={0x2020}, 0x2020)
read$FUSE(r6, &(0x7f0000004540)={0x2020}, 0x4)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r7, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000680)={'vxcan0\x00', <r8=>0x0})
sendmsg$inet6(r7, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e21, 0x9, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3a21a5e023969e95f796fb2400000000000000290000a326720b00fc010000000000000000000000000001", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x40)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@ll={0x11, 0x2, r8, 0x1, 0x6, 0x6, @random="d9e8c26b1ddf"}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}, 0x0)

11.264136338s ago: executing program 0 (id=23):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f7274000500040000000000090002"], 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0019"], 0x34}}, 0xc000)

11.097468566s ago: executing program 0 (id=24):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x87, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x87, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
futex(0x0, 0x18b, 0x0, 0x0, &(0x7f0000000100), 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e00103"], 0x0) (async)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e00103"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x24) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x8, [0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x24)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000500)={r6, @in6={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}}, &(0x7f00000003c0)=0x84)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000d00)={"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"})

10.429165921s ago: executing program 2 (id=26):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
close(0x4)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000180)={0x200, 0x8, 0x2, 0x76, &(0x7f00000000c0)=""/118, 0x40, &(0x7f0000000040)=""/64, 0xaa, &(0x7f0000000240)=""/170})
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x10}]}, 0x10)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)

10.137558187s ago: executing program 2 (id=28):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 4)

9.579767378s ago: executing program 3 (id=30):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
unshare(0x680)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/reserved_size', 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e20, @local}, 0x10)

9.429523871s ago: executing program 3 (id=31):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000010080"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x68, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000012000503000000fdffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004000300"], 0x50}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x5e)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f00000001c0)={0x1, 0x8000000000000000})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000180001801400020076657468305f6d616376746170000000240003802000038010000180080001003f000000040003"], 0x50}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff0100000003"]}, 0xa9)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT, 0x4)
connect$inet6(r10, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r10, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000))
socket$inet_udplite(0x2, 0x2, 0x88)

9.419630773s ago: executing program 2 (id=32):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x14008000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f8151", 0x11}], 0x1}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0xd00)

9.300968891s ago: executing program 0 (id=33):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="23cd9f8800000000620a0c000000000087000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="23cd9f8800000000620a0c000000000087000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"])

9.189669354s ago: executing program 3 (id=34):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000000)="9a6ba79ac22b00f30fc73500f0ffff66bad004ef66b805018ee0f3adb9800000c00f3235001000000f30c4c1ad63319aa20c77f4bb00660f38809202000000c4e1305831", 0x44}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x2, 0x3, 0x6, 0xc, 0x1, 0x5, 0x3}}, {0x4}}]}]}, 0x68}}, 0x0) (fail_nth: 4)

9.188636378s ago: executing program 2 (id=35):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x121100, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x290, r4}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8.839738339s ago: executing program 3 (id=36):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8921, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3a, r2})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14)
r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x89}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0})
io_uring_enter(r3, 0x4d92, 0x0, 0x0, 0x0, 0x3c000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

8.70240892s ago: executing program 4 (id=37):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x500, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1a0e4, 0x18300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000044)

8.635773222s ago: executing program 3 (id=38):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800000f0}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6d5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}}, 0x8)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0xfd, 0x8, {r3, @empty, @empty}}}], 0x20}}], 0x1, 0x0)

8.635148864s ago: executing program 2 (id=39):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000d40), 0x0, 0x48844, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r4 = syz_open_pts(r3, 0x0)
dup3(r4, r3, 0x0)
r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xdb42)
sendfile(r1, r2, 0x0, 0x8000002b)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
writev(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="d848aa11ee80a1e8f7d33041fc", 0xd}, {&(0x7f0000000240)="fe8ba6b8618d6af85d99dffda44fb2718ec16e2d6531c85f679c95", 0x1b}], 0x2)
r9 = gettid()
process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5343}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x100, 0x0)

8.587904338s ago: executing program 3 (id=40):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

8.000288207s ago: executing program 4 (id=41):
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010020106b1d01014000010203010902930003010000000904000000010100000a24010000000201c002132406040006020000000009000000000f00000000000000000000000924050000f8431cfd0924030004030604000000"], 0x0)

8.365994ms ago: executing program 0 (id=43):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x31, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x7, 0xe, 0xbf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280), 0x10, 0x8, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f000001b480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000eeff0000000000000000002100ba54fa0ea9294c6280a803c7bf9500000000fdffffff00"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f000001b8c0)=[{&(0x7f0000002480)=""/102388, 0x18ff4}, {&(0x7f000001b500)=""/13, 0xd}, {0x0}, {0x0}], 0x4, 0x0, 0x4)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
dup3(r4, r3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0))

0s ago: executing program 2 (id=44):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002e000000350000000000ba008500000008000000950000000000000064f1c0dcf95d6806f8a1572b41a1410824581835d80532cb457f454698165b61a3cf5fc6dd8428"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r0, &(0x7f0000000280)=""/35, 0x23, 0x2001, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000077a60036520000a200209500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x110, r1, 0x544ff000) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x110, r1, 0x544ff000)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getpgid(0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000001240)={@host})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async)
preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r4 = syz_open_dev$loop(0x0, 0x2, 0x200101)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) (async)
ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0)
bpf$MAP_CREATE(0x14, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000100009ea816f8ae23a8f9ed050f827ab82052ffa16fff103ecdf887b96a669251537c108df7dd44e28eb724d434d96a6681f3b1144e8dbb77c57ef7d76284daf2ed0da19827dd0f760661ac795c8050"], 0x48) (async)
bpf$MAP_CREATE(0x14, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000100009ea816f8ae23a8f9ed050f827ab82052ffa16fff103ecdf887b96a669251537c108df7dd44e28eb724d434d96a6681f3b1144e8dbb77c57ef7d76284daf2ed0da19827dd0f760661ac795c8050"], 0x48)
r5 = getpid()
semop(0x0, &(0x7f0000000140), 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0x7, 0x2003)
syz_open_dev$sndmidi(0x0, 0x0, 0x24000)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts.
[   53.559787][ T5213] cgroup: Unknown subsys name 'net'
[   53.726659][ T5213] cgroup: Unknown subsys name 'cpuset'
[   53.734987][ T5213] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   55.011664][ T5213] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.528792][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.536234][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.536489][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.553207][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.560206][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.560488][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.560862][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.568082][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.578158][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.582612][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.604651][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.605051][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.612546][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   58.619949][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.626199][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.633739][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   58.641107][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.647853][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.654362][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.669468][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.669715][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   58.676845][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.686966][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.697777][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.717569][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.724899][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.732911][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   58.740365][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   58.740528][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.747959][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.099027][ T5239] chnl_net:caif_netlink_parms(): no params data found
[   59.186399][ T5241] chnl_net:caif_netlink_parms(): no params data found
[   59.229980][ T5243] chnl_net:caif_netlink_parms(): no params data found
[   59.277319][ T5242] chnl_net:caif_netlink_parms(): no params data found
[   59.328471][ T5240] chnl_net:caif_netlink_parms(): no params data found
[   59.359702][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.367829][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.375558][ T5239] bridge_slave_0: entered allmulticast mode
[   59.382112][ T5239] bridge_slave_0: entered promiscuous mode
[   59.436137][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.443222][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.450484][ T5239] bridge_slave_1: entered allmulticast mode
[   59.457591][ T5239] bridge_slave_1: entered promiscuous mode
[   59.492473][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.499708][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.507741][ T5243] bridge_slave_0: entered allmulticast mode
[   59.514611][ T5243] bridge_slave_0: entered promiscuous mode
[   59.529960][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.537094][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.544619][ T5241] bridge_slave_0: entered allmulticast mode
[   59.551105][ T5241] bridge_slave_0: entered promiscuous mode
[   59.559701][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.567366][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.574962][ T5241] bridge_slave_1: entered allmulticast mode
[   59.581436][ T5241] bridge_slave_1: entered promiscuous mode
[   59.599266][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.606525][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.614086][ T5243] bridge_slave_1: entered allmulticast mode
[   59.620542][ T5243] bridge_slave_1: entered promiscuous mode
[   59.638301][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.676571][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.683913][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.691005][ T5242] bridge_slave_0: entered allmulticast mode
[   59.698178][ T5242] bridge_slave_0: entered promiscuous mode
[   59.712723][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.739402][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.746574][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.753863][ T5242] bridge_slave_1: entered allmulticast mode
[   59.760322][ T5242] bridge_slave_1: entered promiscuous mode
[   59.799180][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.827265][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.838469][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.852179][ T5239] team0: Port device team_slave_0 added
[   59.859666][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.877416][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.884619][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.891713][ T5240] bridge_slave_0: entered allmulticast mode
[   59.898556][ T5240] bridge_slave_0: entered promiscuous mode
[   59.906590][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.913760][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.920883][ T5240] bridge_slave_1: entered allmulticast mode
[   59.928160][ T5240] bridge_slave_1: entered promiscuous mode
[   59.936793][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.956244][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.975273][ T5239] team0: Port device team_slave_1 added
[   60.013421][ T5243] team0: Port device team_slave_0 added
[   60.037978][ T5241] team0: Port device team_slave_0 added
[   60.044994][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.051953][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.078527][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.100364][ T5242] team0: Port device team_slave_0 added
[   60.108188][ T5243] team0: Port device team_slave_1 added
[   60.122311][ T5241] team0: Port device team_slave_1 added
[   60.134106][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.141056][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.167262][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.180325][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.193273][ T5242] team0: Port device team_slave_1 added
[   60.228438][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.260742][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.267809][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.294785][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.307982][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.315124][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.341131][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.353170][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.360245][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.386390][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.407641][ T5240] team0: Port device team_slave_0 added
[   60.414001][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.420960][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.447029][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.458797][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.466244][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.492598][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.532465][ T5240] team0: Port device team_slave_1 added
[   60.539803][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.547373][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.574644][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.596982][ T5243] hsr_slave_0: entered promiscuous mode
[   60.603108][ T5243] hsr_slave_1: entered promiscuous mode
[   60.619604][ T5239] hsr_slave_0: entered promiscuous mode
[   60.626536][ T5239] hsr_slave_1: entered promiscuous mode
[   60.633120][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.641105][ T5239] Cannot create hsr debugfs directory
[   60.674272][ T5232] Bluetooth: hci0: command tx timeout
[   60.688678][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.695809][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.722427][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.752891][ T5241] hsr_slave_0: entered promiscuous mode
[   60.754939][ T5236] Bluetooth: hci1: command tx timeout
[   60.759024][ T5232] Bluetooth: hci3: command tx timeout
[   60.769612][ T5241] hsr_slave_1: entered promiscuous mode
[   60.776407][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.784233][ T5241] Cannot create hsr debugfs directory
[   60.799020][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.806030][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.832227][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.838937][ T5232] Bluetooth: hci2: command tx timeout
[   60.848759][ T5236] Bluetooth: hci4: command tx timeout
[   60.898572][ T5240] hsr_slave_0: entered promiscuous mode
[   60.905512][ T5240] hsr_slave_1: entered promiscuous mode
[   60.911567][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.919318][ T5240] Cannot create hsr debugfs directory
[   60.950208][ T5242] hsr_slave_0: entered promiscuous mode
[   60.956814][ T5242] hsr_slave_1: entered promiscuous mode
[   60.962725][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.970419][ T5242] Cannot create hsr debugfs directory
[   61.280079][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.289772][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.299419][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.310677][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.359200][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   61.378474][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   61.394353][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   61.404508][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   61.440311][ T5243] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.457744][ T5243] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.467247][ T5243] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.477366][ T5243] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.538525][ T5240] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   61.570190][ T5240] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   61.579289][ T5240] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   61.601463][ T5240] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   61.666967][ T5242] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.679796][ T5242] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.691443][ T5242] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.701176][ T5242] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.735697][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.769435][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.813459][ T5241] 8021q: adding VLAN 0 to HW filter on device team0
[   61.852888][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.860147][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.880891][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.899091][ T5239] 8021q: adding VLAN 0 to HW filter on device team0
[   61.908615][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.915761][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.932857][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.939986][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.965783][ T5243] 8021q: adding VLAN 0 to HW filter on device team0
[   61.979635][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.986772][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.996628][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.003753][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.029792][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.036945][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.056957][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.070850][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.110727][ T5242] 8021q: adding VLAN 0 to HW filter on device team0
[   62.125707][ T5240] 8021q: adding VLAN 0 to HW filter on device team0
[   62.136369][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.143504][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.161525][  T746] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.168667][  T746] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.190710][  T746] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.197956][  T746] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.207367][  T746] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.214504][  T746] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.230181][ T5239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.240788][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.337911][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.423107][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.433480][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.453642][ T5239] veth0_vlan: entered promiscuous mode
[   62.479126][ T5239] veth1_vlan: entered promiscuous mode
[   62.496196][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.538075][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.578500][ T5239] veth0_macvtap: entered promiscuous mode
[   62.596905][ T5243] veth0_vlan: entered promiscuous mode
[   62.611254][ T5239] veth1_macvtap: entered promiscuous mode
[   62.636495][ T5241] veth0_vlan: entered promiscuous mode
[   62.645930][ T5243] veth1_vlan: entered promiscuous mode
[   62.670058][ T5240] veth0_vlan: entered promiscuous mode
[   62.687837][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.698018][ T5242] veth0_vlan: entered promiscuous mode
[   62.718103][ T5240] veth1_vlan: entered promiscuous mode
[   62.727125][ T5241] veth1_vlan: entered promiscuous mode
[   62.735666][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.746775][ T5242] veth1_vlan: entered promiscuous mode
[   62.756428][ T5236] Bluetooth: hci0: command tx timeout
[   62.764831][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.774317][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.783028][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.791963][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.835316][ T5236] Bluetooth: hci1: command tx timeout
[   62.845484][ T5236] Bluetooth: hci3: command tx timeout
[   62.881952][ T5242] veth0_macvtap: entered promiscuous mode
[   62.891465][ T5243] veth0_macvtap: entered promiscuous mode
[   62.911219][ T5241] veth0_macvtap: entered promiscuous mode
[   62.917281][ T5236] Bluetooth: hci4: command tx timeout
[   62.922741][ T5236] Bluetooth: hci2: command tx timeout
[   62.936621][ T5243] veth1_macvtap: entered promiscuous mode
[   62.970401][ T5240] veth0_macvtap: entered promiscuous mode
[   62.977723][ T5242] veth1_macvtap: entered promiscuous mode
[   63.001799][ T5241] veth1_macvtap: entered promiscuous mode
[   63.013509][ T5240] veth1_macvtap: entered promiscuous mode
[   63.024852][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.035766][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.048713][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.061850][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.072604][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.082983][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.095941][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.107184][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.117682][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.129138][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.140378][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.150798][ T5242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.160674][  T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.163016][ T5242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.176902][  T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.178270][ T5242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.193739][ T5242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.212764][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.224526][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.235617][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.246331][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.258397][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.269509][ T5243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.279123][ T5243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.288072][ T5243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.297678][ T5243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.331558][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.342491][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.353807][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.364784][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.375626][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.386503][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.400000][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.410818][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.421661][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.431901][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.442854][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.452885][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.463791][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.474244][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.484812][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.496210][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.524085][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.536364][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.546278][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.557201][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.567136][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.577588][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.588521][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.601436][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.610557][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.619785][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.630222][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.659441][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.670182][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.674197][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.691397][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.701423][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.711983][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.721955][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.732915][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.742813][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.753306][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.765580][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.775968][ T5240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.784785][ T5240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.793933][ T5240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.802631][ T5240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.889443][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.898513][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.938533][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.951136][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.965801][ T5239] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.966473][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.996341][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.027672][  T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.041384][  T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.073096][  T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.095743][  T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.147464][  T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.155536][  T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.244131][ T3989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.251998][ T3989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.288314][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.323782][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.835040][ T5236] Bluetooth: hci0: command tx timeout
[   64.931354][ T5236] Bluetooth: hci3: command tx timeout
[   64.934061][ T5232] Bluetooth: hci1: command tx timeout
[   65.001330][ T5232] Bluetooth: hci2: command tx timeout
[   65.001338][ T5236] Bluetooth: hci4: command tx timeout
[   65.033058][ T5277] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.124032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.222992][ T5292] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   65.316832][ T5277] usb 1-1: config 0 has no interfaces?
[   65.357216][ T5277] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   65.380565][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   65.393718][ T5277] usb 1-1: Product: syz
[   65.438691][ T5277] usb 1-1: Manufacturer: syz
[   65.567144][ T5277] usb 1-1: config 0 descriptor??
[   65.773766][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.782076][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.794170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   65.855707][ T4641] usb 1-1: USB disconnect, device number 2
[   66.434360][ T5320] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   66.525653][ T5322] binder: BINDER_SET_CONTEXT_MGR already set
[   66.574357][ T5322] binder: 5321:5322 ioctl 4018620d 20000100 returned -16
[   66.759377][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   66.813760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.968031][ T5232] Bluetooth: hci0: command tx timeout
[   67.001405][ T5232] Bluetooth: hci3: command tx timeout
[   67.001438][ T5236] Bluetooth: hci1: command tx timeout
[   67.064547][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.074274][ T5236] Bluetooth: hci2: command tx timeout
[   67.088457][ T5236] Bluetooth: hci4: command tx timeout
[   67.315876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.324155][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.332397][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.618042][ T5337] fuse: Unknown parameter '0x0000000000000009'
[   67.656276][ T5337] block device autoloading is deprecated and will be removed.
[   67.707971][ T5337] syz.3.14: attempt to access beyond end of device
[   67.707971][ T5337] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0
[   67.713635][ T5345] Zero length message leads to an empty skb
[   68.127525][   T29] audit: type=1326 audit(1727108874.464:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.210174][   T29] audit: type=1326 audit(1727108874.494:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.315547][   T29] audit: type=1326 audit(1727108874.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.436568][   T29] audit: type=1326 audit(1727108874.524:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.561280][   T29] audit: type=1326 audit(1727108874.524:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.676253][   T29] audit: type=1326 audit(1727108874.614:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.772145][   T29] audit: type=1326 audit(1727108874.624:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.848893][   T29] audit: type=1326 audit(1727108874.624:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   68.951665][ T5279] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   68.965910][ T5362] netlink: 'syz.4.21': attribute type 2 has an invalid length.
[   68.987058][   T29] audit: type=1326 audit(1727108874.694:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   69.053717][   T29] audit: type=1326 audit(1727108874.694:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dfd97def9 code=0x7ffc0000
[   69.180844][ T5279] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   69.190533][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.210552][ T5279] usb 4-1: Product: syz
[   69.214780][ T5280] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   69.225698][ T5279] usb 4-1: Manufacturer: syz
[   69.230581][ T5279] usb 4-1: SerialNumber: syz
[   69.244983][ T5279] usb 4-1: config 0 descriptor??
[   69.305963][ T5366] openvswitch: netlink: Actions may not be safe on all matching packets
[   69.374615][ T5280] usb 2-1: Using ep0 maxpacket: 32
[   69.383178][ T5280] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   69.393420][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.406447][ T5280] usb 2-1: config 0 descriptor??
[   69.415931][ T5280] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   69.454194][ T4641] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   69.465524][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.473732][ T5274] usb 4-1: USB disconnect, device number 2
[   69.486967][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.509164][ T5370] kvm: vcpu 0: requested 96 ns lapic timer period limited to 200000 ns
[   69.613820][ T4641] usb 5-1: Using ep0 maxpacket: 16
[   69.622152][ T4641] usb 5-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config
[   69.637569][ T4641] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   69.647073][ T4641] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   69.660346][ T4641] usb 5-1: New USB device found, idVendor=0325, idProduct=0000, bcdDevice= 0.00
[   69.683927][ T4641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.723859][ T5279] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   69.884091][ T5279] usb 1-1: Using ep0 maxpacket: 32
[   69.892019][ T5279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.902699][ T5279] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[   69.919367][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.936194][ T5279] usb 1-1: config 0 descriptor??
[   69.953074][ T5279] usb 1-1: bad CDC descriptors
[   69.975879][ T5364] netlink: 180 bytes leftover after parsing attributes in process `syz.4.21'.
[   70.151839][ T5274] usb 1-1: USB disconnect, device number 3
[   70.519409][ T5383] FAULT_INJECTION: forcing a failure.
[   70.519409][ T5383] name failslab, interval 1, probability 0, space 0, times 1
[   70.540454][ T5383] CPU: 0 UID: 0 PID: 5383 Comm: syz.2.28 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[   70.550654][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   70.560907][ T5383] Call Trace:
[   70.564199][ T5383]  <TASK>
[   70.567144][ T5383]  dump_stack_lvl+0x241/0x360
[   70.571870][ T5383]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.577088][ T5383]  ? __pfx__printk+0x10/0x10
[   70.581690][ T5383]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[   70.587325][ T5383]  ? __pfx___might_resched+0x10/0x10
[   70.592624][ T5383]  should_fail_ex+0x3b0/0x4e0
[   70.597315][ T5383]  ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0
[   70.603417][ T5383]  should_failslab+0xac/0x100
[   70.608111][ T5383]  ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0
[   70.614180][ T5383]  kmem_cache_alloc_noprof+0x6c/0x2a0
[   70.619560][ T5383]  __kvm_mmu_topup_memory_cache+0x1e3/0x6b0
[   70.625461][ T5383]  kvm_mmu_load+0x115/0x26e0
[   70.630062][ T5383]  ? __mutex_unlock_slowpath+0x21d/0x750
[   70.635699][ T5383]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   70.641680][ T5383]  ? __pfx_kvm_mmu_load+0x10/0x10
[   70.646711][ T5383]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   70.652711][ T5383]  ? __asan_memset+0x23/0x50
[   70.657314][ T5383]  ? vmx_flush_tlb_guest+0x1e5/0x310
[   70.662600][ T5383]  ? __pfx_vmx_flush_tlb_guest+0x10/0x10
[   70.668233][ T5383]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   70.674216][ T5383]  ? kvm_apic_has_interrupt+0x9d4/0xa70
[   70.679774][ T5383]  vcpu_run+0x6c3d/0x88b0
[   70.684165][ T5383]  ? __pfx_vcpu_run+0x10/0x10
[   70.688850][ T5383]  ? __local_bh_enable_ip+0x168/0x200
[   70.694217][ T5383]  ? lockdep_hardirqs_on+0x99/0x150
[   70.699413][ T5383]  ? __pfx_lock_acquire+0x10/0x10
[   70.704438][ T5383]  ? fpu_swap_kvm_fpstate+0x82/0x460
[   70.709718][ T5383]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   70.715438][ T5383]  ? xfd_validate_state+0x6e/0x150
[   70.720552][ T5383]  ? rcu_is_watching+0x15/0xb0
[   70.725322][ T5383]  ? rcu_is_watching+0x15/0xb0
[   70.730107][ T5383]  kvm_arch_vcpu_ioctl_run+0xa73/0x19d0
[   70.735658][ T5383]  ? mark_lock+0x9a/0x360
[   70.739984][ T5383]  ? kvm_arch_vcpu_ioctl_run+0x1c9/0x19d0
[   70.745702][ T5383]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   70.751693][ T5383]  ? __pfx_lock_acquire+0x10/0x10
[   70.756726][ T5383]  ? get_task_pid+0x23/0x310
[   70.761313][ T5383]  ? __pfx_lock_release+0x10/0x10
[   70.766343][ T5383]  ? kvm_vcpu_ioctl+0x1da/0xea0
[   70.771201][ T5383]  ? get_task_pid+0x23/0x310
[   70.775794][ T5383]  kvm_vcpu_ioctl+0x91a/0xea0
[   70.780471][ T5383]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   70.785677][ T5383]  ? __fget_files+0x29/0x470
[   70.790261][ T5383]  ? __fget_files+0x3f3/0x470
[   70.794947][ T5383]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[   70.800147][ T5383]  __se_sys_ioctl+0xf9/0x170
[   70.804742][ T5383]  do_syscall_64+0xf3/0x230
[   70.809248][ T5383]  ? clear_bhb_loop+0x35/0x90
[   70.813923][ T5383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.819818][ T5383] RIP: 0033:0x7f0dfd97def9
[   70.824231][ T5383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.843837][ T5383] RSP: 002b:00007f0dfe704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.852249][ T5383] RAX: ffffffffffffffda RBX: 00007f0dfdb35f80 RCX: 00007f0dfd97def9
[   70.860221][ T5383] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[   70.868197][ T5383] RBP: 00007f0dfe704090 R08: 0000000000000000 R09: 0000000000000000
[   70.876167][ T5383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.884130][ T5383] R13: 0000000000000000 R14: 00007f0dfdb35f80 R15: 00007f0dfdc5fa28
[   70.892112][ T5383]  </TASK>
[   70.928102][ T4641] usb 5-1: string descriptor 0 read error: -71
[   70.936471][ T5280] gspca_vc032x: reg_w err -110
[   70.941270][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   70.946647][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   70.951949][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   70.967180][ T4641] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   70.980546][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   70.991755][ T4641] cdc_ncm 5-1:1.0: bind() failure
[   70.997301][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.017751][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.023077][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.030753][ T4641] usb 5-1: USB disconnect, device number 2
[   71.057657][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.078713][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.087655][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.100055][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.105878][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.111296][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.117535][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.122931][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.130837][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'.
[   71.140121][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.160429][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.182108][ T5236] Bluetooth: hci2: SCO packet for unknown connection handle 0
[   71.184600][ T5280] gspca_vc032x: I2c Bus Busy Wait 00
[   71.198711][ T5391] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.210747][ T5280] gspca_vc032x: Unknown sensor...
[   71.224457][ T5280] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[   71.332687][ T5398] FAULT_INJECTION: forcing a failure.
[   71.332687][ T5398] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   71.348294][ T5398] CPU: 1 UID: 0 PID: 5398 Comm: syz.3.34 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[   71.358482][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[   71.368556][ T5398] Call Trace:
[   71.371838][ T5398]  <TASK>
[   71.374755][ T5398]  dump_stack_lvl+0x241/0x360
[   71.379498][ T5398]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.384703][ T5398]  ? __pfx__printk+0x10/0x10
[   71.389298][ T5398]  ? __pfx_lock_release+0x10/0x10
[   71.394312][ T5398]  should_fail_ex+0x3b0/0x4e0
[   71.398999][ T5398]  _copy_from_iter+0x1ed/0x1d60
[   71.403874][ T5398]  ? __virt_addr_valid+0x183/0x530
[   71.408999][ T5398]  ? __pfx_lock_release+0x10/0x10
[   71.414039][ T5398]  ? __alloc_skb+0x28f/0x440
[   71.418623][ T5398]  ? __pfx__copy_from_iter+0x10/0x10
[   71.423907][ T5398]  ? __virt_addr_valid+0x183/0x530
[   71.429020][ T5398]  ? __virt_addr_valid+0x183/0x530
[   71.434112][ T5398]  ? __virt_addr_valid+0x45f/0x530
[   71.439210][ T5398]  ? __check_object_size+0x48e/0x900
[   71.444486][ T5398]  netlink_sendmsg+0x73d/0xcb0
[   71.449262][ T5398]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.454559][ T5398]  ? aa_sock_msg_perm+0x91/0x160
[   71.459519][ T5398]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.464846][ T5398]  __sock_sendmsg+0x221/0x270
[   71.469523][ T5398]  ____sys_sendmsg+0x52a/0x7e0
[   71.474304][ T5398]  ? __pfx_____sys_sendmsg+0x10/0x10
[   71.479589][ T5398]  __sys_sendmsg+0x2aa/0x390
[   71.484168][ T5398]  ? __pfx___sys_sendmsg+0x10/0x10
[   71.489286][ T5398]  ? vfs_write+0x7bf/0xc90
[   71.493712][ T5398]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   71.500030][ T5398]  ? do_syscall_64+0x100/0x230
[   71.504805][ T5398]  ? do_syscall_64+0xb6/0x230
[   71.509497][ T5398]  do_syscall_64+0xf3/0x230
[   71.514026][ T5398]  ? clear_bhb_loop+0x35/0x90
[   71.518699][ T5398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.524578][ T5398] RIP: 0033:0x7f75a7f7def9
[   71.528980][ T5398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.548572][ T5398] RSP: 002b:00007f75a8c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.556984][ T5398] RAX: ffffffffffffffda RBX: 00007f75a8135f80 RCX: 00007f75a7f7def9
[   71.557299][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[   71.564947][ T5398] RDX: 0000000000000000 RSI: 0000000020002f00 RDI: 0000000000000003
[   71.564962][ T5398] RBP: 00007f75a8c9d090 R08: 0000000000000000 R09: 0000000000000000
[   71.564974][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.564985][ T5398] R13: 0000000000000000 R14: 00007f75a8135f80 R15: 00007f75a825fa28
[   71.565010][ T5398]  </TASK>
[   71.574176][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[   71.623705][ T5279] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   71.830036][ T5279] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[   71.843799][ T5279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.883664][ T5279] usb 1-1: config 0 has no interface number 0
[   71.889886][ T5279] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[   71.953651][ T5279] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[   72.016833][ T5279] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[   72.049030][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.063667][ T5279] usb 1-1: Product: syz
[   72.075638][ T5279] usb 1-1: Manufacturer: syz
[   72.089849][ T5279] usb 1-1: SerialNumber: syz
[   72.113266][ T5279] usb 1-1: config 0 descriptor??
[   72.140719][ T5279] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5
[   72.194020][ T5280] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   72.247997][ T5417] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   72.261814][ T5417] team0: Device ipvlan2 failed to register rx_handler
[   72.385034][ T5280] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config
[   72.420162][ T5280] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   72.466126][ T5280] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   72.502495][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.502794][ T5279] usb 1-1: USB disconnect, device number 4
[   72.754805][ T5412] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.40'.
[   72.773670][ T5412] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8
[   72.803723][ T5283] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   72.880513][ T5280] usb 4-1: string descriptor 0 read error: -71
[   72.898748][ T5280] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[   72.921030][ T5280] usb 4-1: USB disconnect, device number 3
[   72.944229][ T5283] usb 5-1: device descriptor read/64, error -71
[   76.118942][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[   79.973175][   T47] cfg80211: failed to load regulatory.db
[   81.209675][    T0] sched: DL replenish lagged too much
[   83.765076][ T5426] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  100.052976][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  100.062530][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  100.071825][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  100.082146][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  100.090972][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  100.098761][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  100.107017][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  100.114822][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  100.122255][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  100.130539][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  100.144606][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  100.152273][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  100.162836][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  100.171589][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  100.179529][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  100.189529][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  100.197339][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  100.223360][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  101.282678][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.291696][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.300281][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.309106][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.318627][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  101.326272][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.443069][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.458125][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.465993][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.478659][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.487779][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  101.496185][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  102.273992][ T5232] Bluetooth: hci6: command tx timeout
[  102.280157][ T5232] Bluetooth: hci7: command tx timeout
[  102.353829][ T5232] Bluetooth: hci5: command tx timeout
[  103.394801][ T5232] Bluetooth: hci0: command tx timeout
[  103.553888][ T5232] Bluetooth: hci1: command tx timeout
[  104.354046][ T5230] Bluetooth: hci6: command tx timeout
[  104.360809][ T5232] Bluetooth: hci7: command tx timeout
[  104.433756][ T5232] Bluetooth: hci5: command tx timeout
[  105.473752][ T5232] Bluetooth: hci0: command tx timeout
[  105.633751][ T5232] Bluetooth: hci1: command tx timeout
[  106.434119][ T5230] Bluetooth: hci6: command tx timeout
[  106.440815][ T5232] Bluetooth: hci7: command tx timeout
[  106.513784][ T5232] Bluetooth: hci5: command tx timeout
[  107.553693][ T5232] Bluetooth: hci0: command tx timeout
[  107.721466][ T5232] Bluetooth: hci1: command tx timeout
[  107.790595][ T5280] usb 2-1: USB disconnect, device number 2
[  108.513932][ T5232] Bluetooth: hci7: command tx timeout
[  108.519392][ T5232] Bluetooth: hci6: command tx timeout
[  108.593812][ T5232] Bluetooth: hci5: command tx timeout
[  109.633862][ T5232] Bluetooth: hci0: command tx timeout
[  109.793766][ T5232] Bluetooth: hci1: command tx timeout
[  132.997122][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  133.003513][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  143.380174][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.407313][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.425325][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.512630][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.568176][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  143.598799][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  144.680616][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.698213][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.707436][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.720628][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.728320][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  144.741491][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  145.874009][ T5232] Bluetooth: hci2: command tx timeout
[  146.833723][ T5232] Bluetooth: hci4: command tx timeout
[  147.954024][ T5232] Bluetooth: hci2: command tx timeout
[  148.913866][ T5232] Bluetooth: hci4: command tx timeout
[  150.039656][ T5232] Bluetooth: hci2: command tx timeout
[  150.993934][ T5232] Bluetooth: hci4: command tx timeout
[  152.114123][ T5232] Bluetooth: hci2: command tx timeout
[  153.073692][ T5232] Bluetooth: hci4: command tx timeout
[  160.436524][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  160.445103][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  160.452860][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  160.461931][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  160.469963][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  160.477381][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  161.228334][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  161.238652][ T5232] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  161.246696][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  161.256513][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  161.264907][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  161.272387][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  161.347592][ T5230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  161.356429][ T5230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  161.364852][ T5230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  161.372978][ T5230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  161.383384][ T5230] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  161.391321][ T5230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  162.514083][ T5230] Bluetooth: hci8: command tx timeout
[  163.313781][ T5230] Bluetooth: hci9: command tx timeout
[  163.473873][ T5230] Bluetooth: hci10: command tx timeout
[  164.594114][ T5230] Bluetooth: hci8: command tx timeout
[  165.393696][ T5230] Bluetooth: hci9: command tx timeout
[  165.553705][ T5230] Bluetooth: hci10: command tx timeout
[  166.673985][ T5230] Bluetooth: hci8: command tx timeout
[  167.473880][ T5230] Bluetooth: hci9: command tx timeout
[  167.633715][ T5230] Bluetooth: hci10: command tx timeout
[  168.754009][ T5230] Bluetooth: hci8: command tx timeout
[  169.553793][ T5230] Bluetooth: hci9: command tx timeout
[  169.713843][ T5230] Bluetooth: hci10: command tx timeout
[  181.158779][ T5230] Bluetooth: hci3: command 0x0406 tx timeout
[  194.442624][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  194.449119][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  203.524013][ T5230] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  203.532954][ T5230] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  203.540887][ T5230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  203.551518][ T5230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  203.561032][ T5230] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  203.569649][ T5230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  205.328400][ T5232] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  205.336990][ T5232] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  205.345388][ T5232] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  205.353472][ T5232] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  205.371122][ T5232] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  205.378803][ T5232] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  205.634490][ T5230] Bluetooth: hci11: command tx timeout
[  207.473799][ T5230] Bluetooth: hci12: command tx timeout
[  207.713690][ T5230] Bluetooth: hci11: command tx timeout
[  209.553917][ T5230] Bluetooth: hci12: command tx timeout
[  209.795080][ T5230] Bluetooth: hci11: command tx timeout
[  211.633768][ T5230] Bluetooth: hci12: command tx timeout
[  211.873812][ T5230] Bluetooth: hci11: command tx timeout
[  213.713859][ T5230] Bluetooth: hci12: command tx timeout
[  221.038278][ T5232] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  221.047562][ T5232] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  221.055772][ T5232] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  221.063795][ T5232] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  221.071570][ T5232] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  221.090013][ T5232] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  221.871838][ T5230] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  221.881188][ T5230] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  221.893780][ T5230] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  221.903238][ T5230] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  221.911390][ T5230] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  221.920284][ T5230] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  221.998088][ T5232] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  222.015003][ T5232] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  222.025856][ T5232] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  222.034979][ T5232] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  222.053139][ T5232] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  222.061380][ T5232] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  223.153789][ T5232] Bluetooth: hci13: command tx timeout
[  223.953859][ T5232] Bluetooth: hci14: command tx timeout
[  224.113923][ T5232] Bluetooth: hci15: command tx timeout
[  225.238993][ T5232] Bluetooth: hci13: command tx timeout
[  226.033923][ T5232] Bluetooth: hci14: command tx timeout
[  226.193800][ T5232] Bluetooth: hci15: command tx timeout
[  227.257550][ T5238] Bluetooth: hci6: command 0x0406 tx timeout
[  227.263737][ T4619] Bluetooth: hci7: command 0x0406 tx timeout
[  227.269772][ T4619] Bluetooth: hci5: command 0x0406 tx timeout
[  227.282865][ T5238] Bluetooth: hci0: command 0x0406 tx timeout
[  227.289029][ T5232] Bluetooth: hci1: command 0x0406 tx timeout
[  227.313821][ T5504] Bluetooth: hci13: command tx timeout
[  228.113697][ T5230] Bluetooth: hci14: command tx timeout
[  228.273704][ T5230] Bluetooth: hci15: command tx timeout
[  229.393855][ T5230] Bluetooth: hci13: command tx timeout
[  230.193799][ T5230] Bluetooth: hci14: command tx timeout
[  230.353695][ T5230] Bluetooth: hci15: command tx timeout
[  255.880507][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  255.887790][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  264.213690][   T30] INFO: task kworker/1:1:47 blocked for more than 143 seconds.
[  264.221547][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  264.323692][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  264.332432][   T30] task:kworker/1:1     state:D stack:22576 pid:47    tgid:47    ppid:2      flags:0x00004000
[  264.513891][   T30] Workqueue: events_power_efficient crda_timeout_work
[  264.520743][   T30] Call Trace:
[  264.593704][   T30]  <TASK>
[  264.623724][   T30]  __schedule+0x1895/0x4b30
[  264.628306][   T30]  ? __pfx___schedule+0x10/0x10
[  264.633184][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  264.756516][   T30]  ? __pfx_lock_release+0x10/0x10
[  264.783649][   T30]  ? kick_pool+0x45c/0x620
[  264.788134][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.793351][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  264.911330][   T30]  ? schedule+0x90/0x320
[  264.921311][   T30]  schedule+0x14b/0x320
[  264.963648][   T30]  schedule_preempt_disabled+0x13/0x30
[  264.969166][   T30]  __mutex_lock+0x6a7/0xd70
[  265.032858][   T30]  ? __mutex_lock+0x52a/0xd70
[  265.063612][   T30]  ? crda_timeout_work+0x15/0x50
[  265.068608][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  265.149899][   T30]  ? process_scheduled_works+0x976/0x1850
[  265.187710][   T30]  crda_timeout_work+0x15/0x50
[  265.192527][   T30]  process_scheduled_works+0xa63/0x1850
[  265.259086][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.303622][   T30]  ? assign_work+0x364/0x3d0
[  265.308290][   T30]  worker_thread+0x870/0xd30
[  265.312912][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  265.375309][   T30]  ? __kthread_parkme+0x169/0x1d0
[  265.380418][   T30]  ? __pfx_worker_thread+0x10/0x10
[  265.440118][   T30]  kthread+0x2f0/0x390
[  265.462776][   T30]  ? __pfx_worker_thread+0x10/0x10
[  265.483805][   T30]  ? __pfx_kthread+0x10/0x10
[  265.488447][   T30]  ret_from_fork+0x4b/0x80
[  265.492887][   T30]  ? __pfx_kthread+0x10/0x10
[  265.553665][   T30]  ret_from_fork_asm+0x1a/0x30
[  265.558507][   T30]  </TASK>
[  265.593884][   T30] INFO: task kworker/u8:6:970 blocked for more than 144 seconds.
[  265.601650][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  265.650384][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  265.673749][   T30] task:kworker/u8:6    state:D stack:22352 pid:970   tgid:970   ppid:2      flags:0x00004000
[  265.703732][   T30] Workqueue: events_unbound linkwatch_event
[  265.709685][   T30] Call Trace:
[  265.712974][   T30]  <TASK>
[  265.744038][   T30]  __schedule+0x1895/0x4b30
[  265.748992][   T30]  ? __pfx___schedule+0x10/0x10
[  265.768723][   T30]  ? __pfx_lock_release+0x10/0x10
[  265.783736][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  265.789241][   T30]  ? kthread_data+0x52/0xd0
[  265.803624][   T30]  ? schedule+0x90/0x320
[  265.807904][   T30]  ? wq_worker_sleeping+0x66/0x240
[  265.813042][   T30]  ? schedule+0x90/0x320
[  265.844470][   T30]  schedule+0x14b/0x320
[  265.848673][   T30]  schedule_preempt_disabled+0x13/0x30
[  265.869429][   T30]  __mutex_lock+0x6a7/0xd70
[  265.883638][   T30]  ? __mutex_lock+0x52a/0xd70
[  265.888364][   T30]  ? linkwatch_event+0xe/0x60
[  265.893061][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  265.918223][   T30]  ? process_scheduled_works+0x976/0x1850
[  265.939172][   T30]  linkwatch_event+0xe/0x60
[  265.947218][   T30]  process_scheduled_works+0xa63/0x1850
[  265.952831][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.981355][   T30]  ? assign_work+0x364/0x3d0
[  265.999180][   T30]  worker_thread+0x870/0xd30
[  266.003876][   T30]  ? __kthread_parkme+0x169/0x1d0
[  266.008935][   T30]  ? __pfx_worker_thread+0x10/0x10
[  266.029147][   T30]  kthread+0x2f0/0x390
[  266.050793][   T30]  ? __pfx_worker_thread+0x10/0x10
[  266.056029][   T30]  ? __pfx_kthread+0x10/0x10
[  266.060645][   T30]  ret_from_fork+0x4b/0x80
[  266.084099][   T30]  ? __pfx_kthread+0x10/0x10
[  266.088734][   T30]  ret_from_fork_asm+0x1a/0x30
[  266.093532][   T30]  </TASK>
[  266.126961][   T30] INFO: task kworker/u8:8:3989 blocked for more than 145 seconds.
[  266.150823][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  266.173806][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.182519][   T30] task:kworker/u8:8    state:D stack:24080 pid:3989  tgid:3989  ppid:2      flags:0x00004000
[  266.219153][   T30] Workqueue: netns cleanup_net
[  266.233742][   T30] Call Trace:
[  266.238211][   T30]  <TASK>
[  266.241174][   T30]  __schedule+0x1895/0x4b30
[  266.263826][   T30]  ? __pfx___schedule+0x10/0x10
[  266.268728][   T30]  ? __pfx_lock_release+0x10/0x10
[  266.283690][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  266.289197][   T30]  ? kthread_data+0x52/0xd0
[  266.309179][   T30]  ? schedule+0x90/0x320
[  266.313472][   T30]  ? wq_worker_sleeping+0x66/0x240
[  266.326552][   T30]  ? schedule+0x90/0x320
[  266.330841][   T30]  schedule+0x14b/0x320
[  266.353697][   T30]  schedule_preempt_disabled+0x13/0x30
[  266.359197][   T30]  __mutex_lock+0x6a7/0xd70
[  266.377530][   T30]  ? __mutex_lock+0x52a/0xd70
[  266.382251][   T30]  ? wg_netns_pre_exit+0x1f/0x1e0
[  266.393062][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  266.398565][   T30]  wg_netns_pre_exit+0x1f/0x1e0
[  266.403459][   T30]  cleanup_net+0x615/0xcc0
[  266.413671][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  266.418658][   T30]  ? process_scheduled_works+0x976/0x1850
[  266.429345][   T30]  process_scheduled_works+0xa63/0x1850
[  266.435759][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.449481][   T30]  ? assign_work+0x364/0x3d0
[  266.454422][   T30]  worker_thread+0x870/0xd30
[  266.459050][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  266.471242][   T30]  ? __kthread_parkme+0x169/0x1d0
[  266.476611][   T30]  ? __pfx_worker_thread+0x10/0x10
[  266.481750][   T30]  kthread+0x2f0/0x390
[  266.491936][   T30]  ? __pfx_worker_thread+0x10/0x10
[  266.497425][   T30]  ? __pfx_kthread+0x10/0x10
[  266.502101][   T30]  ret_from_fork+0x4b/0x80
[  266.512370][   T30]  ? __pfx_kthread+0x10/0x10
[  266.517490][   T30]  ret_from_fork_asm+0x1a/0x30
[  266.522303][   T30]  </TASK>
[  266.531379][   T30] INFO: task syz-executor:5239 blocked for more than 145 seconds.
[  266.539557][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  266.553857][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.562549][   T30] task:syz-executor    state:D stack:20080 pid:5239  tgid:5239  ppid:1      flags:0x00004006
[  266.578933][   T30] Call Trace:
[  266.582324][   T30]  <TASK>
[  266.585736][   T30]  __schedule+0x1895/0x4b30
[  266.590298][   T30]  ? __pfx___schedule+0x10/0x10
[  266.601235][   T30]  ? __pfx_lock_release+0x10/0x10
[  266.606664][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  266.612162][   T30]  ? schedule+0x90/0x320
[  266.622506][   T30]  schedule+0x14b/0x320
[  266.627005][   T30]  schedule_preempt_disabled+0x13/0x30
[  266.632490][   T30]  __mutex_lock+0x6a7/0xd70
[  266.642918][   T30]  ? __mutex_lock+0x52a/0xd70
[  266.650243][   T30]  ? tun_chr_close+0x3b/0x1b0
[  266.661371][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  266.667067][   T30]  ? __pfx_call_rcu+0x10/0x10
[  266.671780][   T30]  tun_chr_close+0x3b/0x1b0
[  266.682295][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  266.688013][   T30]  __fput+0x23f/0x880
[  266.692039][   T30]  task_work_run+0x24f/0x310
[  266.703136][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  266.708786][   T30]  ? __pfx_task_work_run+0x10/0x10
[  266.719701][   T30]  ? do_exit+0xa2a/0x28e0
[  266.724443][   T30]  ? kmem_cache_free+0x1a2/0x420
[  266.729420][   T30]  ? do_exit+0xa2a/0x28e0
[  266.739768][   T30]  do_exit+0xa2f/0x28e0
[  266.744282][   T30]  ? __pfx_do_exit+0x10/0x10
[  266.750839][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  266.762128][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  266.769307][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  266.781420][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  266.786963][   T30]  do_group_exit+0x207/0x2c0
[  266.791580][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.802705][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  266.808267][   T30]  get_signal+0x176f/0x1810
[  266.812812][   T30]  ? __pfx_get_signal+0x10/0x10
[  266.823543][   T30]  arch_do_signal_or_restart+0x96/0x860
[  266.829279][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  266.843680][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  266.852232][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  266.862789][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  266.869800][   T30]  do_syscall_64+0x100/0x230
[  266.879842][   T30]  ? clear_bhb_loop+0x35/0x90
[  266.886037][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.891964][   T30] RIP: 0033:0x7f722957c93c
[  266.901288][   T30] RSP: 002b:00007f722985fd90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  266.911241][   T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f722957c93c
[  266.919615][ T5230] Bluetooth: hci16: Opcode 0x0c03 failed: -110
[  266.944954][   T30] RDX: 0000000000000028 RSI: 00007f722985fe40 RDI: 00000000000000f9
[  266.960360][   T30] RBP: 00007f722985fdec R08: 0000000000000000 R09: 0079746972756365
[  266.968676][   T30] R10: 00007f72297087e0 R11: 0000000000000246 R12: 000055557f7f55eb
[  266.982793][   T30] R13: 000055557f7f5590 R14: 0000000000011b45 R15: 00007f722985fe40
[  266.991538][   T30]  </TASK>
[  267.008234][   T30] INFO: task syz-executor:5240 blocked for more than 146 seconds.
[  267.021949][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  267.029570][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.045550][   T30] task:syz-executor    state:D stack:19888 pid:5240  tgid:5240  ppid:1      flags:0x00004006
[  267.062370][   T30] Call Trace:
[  267.067199][   T30]  <TASK>
[  267.070161][   T30]  __schedule+0x1895/0x4b30
[  267.080448][   T30]  ? __pfx___schedule+0x10/0x10
[  267.087199][   T30]  ? __pfx_lock_release+0x10/0x10
[  267.092279][   T30]  ? schedule+0x90/0x320
[  267.101766][   T30]  schedule+0x14b/0x320
[  267.107348][   T30]  schedule_timeout+0xb0/0x310
[  267.112146][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  267.122545][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  267.130137][   T30]  ? wait_for_completion+0x2fe/0x620
[  267.140131][   T30]  ? wait_for_completion+0x2fe/0x620
[  267.146920][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  267.152240][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  267.163991][   T30]  ? wait_for_completion+0x2fe/0x620
[  267.169314][   T30]  wait_for_completion+0x355/0x620
[  267.181124][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  267.187133][   T30]  ? __flush_work+0xe7/0xc50
[  267.191761][   T30]  __flush_work+0xa37/0xc50
[  267.202206][   T30]  ? __flush_work+0xe7/0xc50
[  267.207512][   T30]  ? __pfx___flush_work+0x10/0x10
[  267.212571][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[  267.223618][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.229980][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  267.240596][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  267.246128][   T30]  unregister_netdevice_many_notify+0x87b/0x1da0
[  267.252582][   T30]  ? enqueue_timer+0x21b/0x570
[  267.263613][   T30]  ? __mod_timer+0xb89/0xeb0
[  267.268249][   T30]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  267.280505][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  267.286800][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.299426][   T30]  ? queue_delayed_work_on+0x1eb/0x390
[  267.304990][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  267.310221][   T30]  unregister_netdevice_queue+0x303/0x370
[  267.322545][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  267.329113][   T30]  __tun_detach+0x6b9/0x1600
[  267.339699][   T30]  tun_chr_close+0x105/0x1b0
[  267.344567][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  267.349713][   T30]  __fput+0x23f/0x880
[  267.359694][   T30]  task_work_run+0x24f/0x310
[  267.366463][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  267.372695][   T30]  ? __pfx_task_work_run+0x10/0x10
[  267.383679][   T30]  ? do_exit+0xa2a/0x28e0
[  267.388129][   T30]  ? kmem_cache_free+0x1a2/0x420
[  267.393091][   T30]  ? do_exit+0xa2a/0x28e0
[  267.403049][   T30]  do_exit+0xa2f/0x28e0
[  267.407546][   T30]  ? __pfx_do_exit+0x10/0x10
[  267.412165][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  267.423475][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  267.430155][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.442291][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  267.447774][   T30]  do_group_exit+0x207/0x2c0
[  267.452392][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  267.463606][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  267.470790][   T30]  get_signal+0x176f/0x1810
[  267.481189][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  267.487084][   T30]  ? do_sys_openat2+0x17a/0x1d0
[  267.491977][   T30]  ? __pfx_get_signal+0x10/0x10
[  267.502764][   T30]  ? do_sys_openat2+0x17a/0x1d0
[  267.507937][   T30]  arch_do_signal_or_restart+0x96/0x860
[  267.513520][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  267.523606][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  267.529637][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  267.541446][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  267.547320][   T30]  do_syscall_64+0x100/0x230
[  267.551942][   T30]  ? clear_bhb_loop+0x35/0x90
[  267.562711][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.570789][   T30] RIP: 0033:0x7f75a7f7d7f1
[  267.581085][   T30] RSP: 002b:00007f75a825ec60 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[  267.590184][   T30] RAX: 0000000000000003 RBX: 00007f75a7ff0a14 RCX: 00007f75a7f7d7f1
[  267.603857][   T30] RDX: 0000000000090800 RSI: 00007f75a825fe00 RDI: 00000000ffffff9c
[  267.612201][   T30] RBP: 00007f75a825fdec R08: 0000000000000000 R09: 7fffffffffffffff
[  267.623624][   T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f75a825fe00
[  267.631624][   T30] R13: 00007f75a7ff0a14 R14: 00000000000118df R15: 00007f75a825fe40
[  267.645560][   T30]  </TASK>
[  267.648754][   T30] INFO: task syz-executor:5243 blocked for more than 146 seconds.
[  267.660583][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  267.672269][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.684604][   T30] task:syz-executor    state:D stack:20992 pid:5243  tgid:5243  ppid:1      flags:0x00004006
[  267.700360][   T30] Call Trace:
[  267.705079][   T30]  <TASK>
[  267.708046][   T30]  __schedule+0x1895/0x4b30
[  267.712593][   T30]  ? __pfx___schedule+0x10/0x10
[  267.722570][   T30]  ? __pfx_lock_release+0x10/0x10
[  267.729018][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  267.739237][   T30]  ? schedule+0x90/0x320
[  267.743514][   T30]  schedule+0x14b/0x320
[  267.749134][   T30]  schedule_preempt_disabled+0x13/0x30
[  267.759705][   T30]  __mutex_lock+0x6a7/0xd70
[  267.765731][   T30]  ? __mutex_lock+0x52a/0xd70
[  267.770462][   T30]  ? tun_chr_close+0x3b/0x1b0
[  267.781851][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  267.793235][   T30]  ? __pfx_call_rcu+0x10/0x10
[  267.803234][   T30]  tun_chr_close+0x3b/0x1b0
[  267.809240][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  267.819268][   T30]  __fput+0x23f/0x880
[  267.823298][   T30]  task_work_run+0x24f/0x310
[  267.829383][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  267.839544][   T30]  ? __pfx_task_work_run+0x10/0x10
[  267.846130][   T30]  ? do_exit+0xa2a/0x28e0
[  267.850486][   T30]  ? kmem_cache_free+0x1a2/0x420
[  267.860272][   T30]  ? do_exit+0xa2a/0x28e0
[  267.866403][   T30]  do_exit+0xa2f/0x28e0
[  267.870597][   T30]  ? __pfx_do_exit+0x10/0x10
[  267.883975][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  267.889390][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  267.901368][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.908098][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  267.913243][   T30]  do_group_exit+0x207/0x2c0
[  267.923810][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  267.929042][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  267.940111][   T30]  get_signal+0x176f/0x1810
[  267.944944][   T30]  ? __pfx_get_signal+0x10/0x10
[  267.949822][   T30]  ? vfs_fstatat+0x14f/0x190
[  267.960590][   T30]  ? __x64_sys_newfstatat+0x145/0x1a0
[  267.966272][   T30]  arch_do_signal_or_restart+0x96/0x860
[  267.971852][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  267.983624][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  267.989660][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  268.001067][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  268.006954][   T30]  do_syscall_64+0x100/0x230
[  268.011576][   T30]  ? clear_bhb_loop+0x35/0x90
[  268.022358][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.028642][   T30] RIP: 0033:0x7f916d37c70a
[  268.033086][   T30] RSP: 002b:00007f916d65ecc8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106
[  268.050207][   T30] RAX: 0000000000000000 RBX: 00007f916d3f0a14 RCX: 00007f916d37c70a
[  268.058544][   T30] RDX: 00007f916d65ecf0 RSI: 00007f916d65ed80 RDI: 00000000ffffff9c
[  268.068991][   T30] RBP: 00007f916d65ed80 R08: 0000000000000000 R09: 0000000000000000
[  268.084317][   T30] R10: 0000000000000100 R11: 0000000000000286 R12: 00007f916d65fe00
[  268.092333][   T30] R13: 00007f916d3f0a14 R14: 0000000000013ac4 R15: 00007f916d65fe40
[  268.104052][   T30]  </TASK>
[  268.109853][   T30] INFO: task syz-executor:5448 blocked for more than 147 seconds.
[  268.121457][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  268.132484][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  268.143689][   T30] task:syz-executor    state:D stack:26256 pid:5448  tgid:5448  ppid:1      flags:0x00004004
[  268.158662][   T30] Call Trace:
[  268.161969][   T30]  <TASK>
[  268.165347][   T30]  __schedule+0x1895/0x4b30
[  268.169908][   T30]  ? __pfx___schedule+0x10/0x10
[  268.180605][   T30]  ? __pfx_lock_release+0x10/0x10
[  268.187838][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  268.193345][   T30]  ? schedule+0x90/0x320
[  268.200179][ T5230] Bluetooth: hci2: command 0x0406 tx timeout
[  268.206354][ T5227] Bluetooth: hci4: command 0x0406 tx timeout
[  268.223893][   T30]  schedule+0x14b/0x320
[  268.228092][   T30]  schedule_preempt_disabled+0x13/0x30
[  268.239537][   T30]  __mutex_lock+0x6a7/0xd70
[  268.244365][   T30]  ? __mutex_lock+0x52a/0xd70
[  268.249077][   T30]  ? register_nexthop_notifier+0x84/0x290
[  268.260844][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  268.266167][   T30]  ? __asan_memset+0x23/0x50
[  268.270795][   T30]  register_nexthop_notifier+0x84/0x290
[  268.282390][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  268.290414][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  268.302657][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  268.309505][   T30]  ? __asan_memset+0x23/0x50
[  268.320385][   T30]  ops_init+0x31e/0x590
[  268.324842][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  268.330247][   T30]  setup_net+0x287/0x9e0
[  268.340434][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  268.346309][   T30]  ? __pfx_setup_net+0x10/0x10
[  268.351115][   T30]  copy_net_ns+0x33f/0x570
[  268.361534][   T30]  create_new_namespaces+0x425/0x7b0
[  268.367201][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  268.373045][   T30]  ksys_unshare+0x619/0xc10
[  268.383471][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  268.390625][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  268.402415][   T30]  ? do_syscall_64+0x100/0x230
[  268.407512][   T30]  __x64_sys_unshare+0x38/0x40
[  268.412315][   T30]  do_syscall_64+0xf3/0x230
[  268.423067][   T30]  ? clear_bhb_loop+0x35/0x90
[  268.428489][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.440331][   T30] RIP: 0033:0x7f0a7637f6f7
[  268.445048][   T30] RSP: 002b:00007f0a7665ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  268.453516][   T30] RAX: ffffffffffffffda RBX: 00007f0a763f22ec RCX: 00007f0a7637f6f7
[  268.463635][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  268.471633][   T30] RBP: 0000000000000000 R08: 00007f0a77067d60 R09: 0000000000000000
[  268.485241][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  268.498776][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  268.509695][   T30]  </TASK>
[  268.518389][   T30] INFO: task syz-executor:5449 blocked for more than 147 seconds.
[  268.528571][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  268.541561][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  268.552827][   T30] task:syz-executor    state:D stack:25904 pid:5449  tgid:5449  ppid:1      flags:0x00004006
[  268.566714][   T30] Call Trace:
[  268.570015][   T30]  <TASK>
[  268.572961][   T30]  __schedule+0x1895/0x4b30
[  268.580347][   T30]  ? __pfx___schedule+0x10/0x10
[  268.588913][   T30]  ? __pfx_lock_release+0x10/0x10
[  268.598547][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  268.607642][   T30]  ? schedule+0x90/0x320
[  268.611914][   T30]  schedule+0x14b/0x320
[  268.619075][   T30]  schedule_preempt_disabled+0x13/0x30
[  268.628125][   T30]  __mutex_lock+0x6a7/0xd70
[  268.632666][   T30]  ? __mutex_lock+0x52a/0xd70
[  268.639946][   T30]  ? register_nexthop_notifier+0x84/0x290
[  268.649839][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  268.657660][   T30]  ? __asan_memset+0x23/0x50
[  268.662288][   T30]  register_nexthop_notifier+0x84/0x290
[  268.671562][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  268.680531][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  268.690582][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  268.701129][   T30]  ? __asan_memset+0x23/0x50
[  268.709331][   T30]  ops_init+0x31e/0x590
[  268.713524][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  268.722013][   T30]  setup_net+0x287/0x9e0
[  268.730188][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  268.738290][   T30]  ? __pfx_setup_net+0x10/0x10
[  268.743096][   T30]  copy_net_ns+0x33f/0x570
[  268.751268][   T30]  create_new_namespaces+0x425/0x7b0
[  268.759523][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  268.768819][   T30]  ksys_unshare+0x619/0xc10
[  268.773364][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  268.781056][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  268.790640][   T30]  ? do_syscall_64+0x100/0x230
[  268.799815][   T30]  __x64_sys_unshare+0x38/0x40
[  268.808201][   T30]  do_syscall_64+0xf3/0x230
[  268.812775][   T30]  ? clear_bhb_loop+0x35/0x90
[  268.820483][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.830035][   T30] RIP: 0033:0x7fafeef7f6f7
[  268.836973][   T30] RSP: 002b:00007fafef25ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  268.848979][   T30] RAX: ffffffffffffffda RBX: 00007fafeeff22ec RCX: 00007fafeef7f6f7
[  268.859486][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  268.871610][   T30] RBP: 0000000000000000 R08: 00007fafefc67d60 R09: 0000000000000000
[  268.882135][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  268.893689][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  268.908565][   T30]  </TASK>
[  268.921556][   T30] INFO: task syz-executor:5450 blocked for more than 148 seconds.
[  268.935087][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  268.942390][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  268.954985][   T30] task:syz-executor    state:D stack:26560 pid:5450  tgid:5450  ppid:1      flags:0x00004004
[  268.969900][   T30] Call Trace:
[  268.973209][   T30]  <TASK>
[  268.978002][   T30]  __schedule+0x1895/0x4b30
[  268.982557][   T30]  ? __pfx___schedule+0x10/0x10
[  268.992431][   T30]  ? __pfx_lock_release+0x10/0x10
[  268.999404][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  269.011495][   T30]  ? schedule+0x90/0x320
[  269.017220][   T30]  schedule+0x14b/0x320
[  269.021408][   T30]  schedule_preempt_disabled+0x13/0x30
[  269.032116][   T30]  __mutex_lock+0x6a7/0xd70
[  269.038025][   T30]  ? __mutex_lock+0x52a/0xd70
[  269.042741][   T30]  ? register_nexthop_notifier+0x84/0x290
[  269.053498][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  269.060097][   T30]  ? __asan_memset+0x23/0x50
[  269.069471][   T30]  register_nexthop_notifier+0x84/0x290
[  269.078384][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  269.089482][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  269.097260][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  269.110137][   T30]  ? __asan_memset+0x23/0x50
[  269.116213][   T30]  ops_init+0x31e/0x590
[  269.120405][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  269.131264][   T30]  setup_net+0x287/0x9e0
[  269.136952][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  269.142537][   T30]  ? __pfx_setup_net+0x10/0x10
[  269.152192][   T30]  copy_net_ns+0x33f/0x570
[  269.159295][   T30]  create_new_namespaces+0x425/0x7b0
[  269.169294][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  269.176615][   T30]  ksys_unshare+0x619/0xc10
[  269.181198][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  269.191016][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  269.198941][   T30]  ? do_syscall_64+0x100/0x230
[  269.210742][   T30]  __x64_sys_unshare+0x38/0x40
[  269.217061][   T30]  do_syscall_64+0xf3/0x230
[  269.221605][   T30]  ? clear_bhb_loop+0x35/0x90
[  269.231534][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.243192][   T30] RIP: 0033:0x7fef3717f6f7
[  269.252466][   T30] RSP: 002b:00007fef3745ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  269.262463][   T30] RAX: ffffffffffffffda RBX: 00007fef371f22ec RCX: 00007fef3717f6f7
[  269.273626][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  269.281636][   T30] RBP: 0000000000000000 R08: 00007fef37e67d60 R09: 0000000000000000
[  269.295251][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  269.303258][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  269.324010][   T30]  </TASK>
[  269.327505][   T30] INFO: task syz-executor:5453 blocked for more than 148 seconds.
[  269.341487][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  269.349131][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.363719][   T30] task:syz-executor    state:D stack:26584 pid:5453  tgid:5453  ppid:1      flags:0x00004006
[  269.378738][   T30] Call Trace:
[  269.382278][   T30]  <TASK>
[  269.385717][   T30]  __schedule+0x1895/0x4b30
[  269.390273][   T30]  ? __pfx___schedule+0x10/0x10
[  269.403635][   T30]  ? __pfx_lock_release+0x10/0x10
[  269.408704][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  269.421203][   T30]  ? schedule+0x90/0x320
[  269.426172][   T30]  schedule+0x14b/0x320
[  269.430843][   T30]  schedule_preempt_disabled+0x13/0x30
[  269.442220][   T30]  __mutex_lock+0x6a7/0xd70
[  269.447076][   T30]  ? __mutex_lock+0x52a/0xd70
[  269.451786][   T30]  ? register_nexthop_notifier+0x84/0x290
[  269.463419][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  269.468750][   T30]  ? __asan_memset+0x23/0x50
[  269.473375][   T30]  register_nexthop_notifier+0x84/0x290
[  269.483665][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  269.489511][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  269.500814][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  269.507300][   T30]  ? __asan_memset+0x23/0x50
[  269.519625][   T30]  ops_init+0x31e/0x590
[  269.524094][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  269.529507][   T30]  setup_net+0x287/0x9e0
[  269.540621][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  269.546490][   T30]  ? __pfx_setup_net+0x10/0x10
[  269.551290][   T30]  copy_net_ns+0x33f/0x570
[  269.563950][   T30]  create_new_namespaces+0x425/0x7b0
[  269.569286][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  269.580809][   T30]  ksys_unshare+0x619/0xc10
[  269.585666][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  269.590723][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  269.602566][   T30]  ? do_syscall_64+0x100/0x230
[  269.607649][   T30]  __x64_sys_unshare+0x38/0x40
[  269.612444][   T30]  do_syscall_64+0xf3/0x230
[  269.623636][   T30]  ? clear_bhb_loop+0x35/0x90
[  269.628353][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.640410][   T30] RIP: 0033:0x7f386897f6f7
[  269.645531][   T30] RSP: 002b:00007f3868c5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  269.659994][   T30] RAX: ffffffffffffffda RBX: 00007f38689f22ec RCX: 00007f386897f6f7
[  269.668273][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  269.682150][   T30] RBP: 0000000000000000 R08: 00007f3869667d60 R09: 0000000000000000
[  269.690554][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  269.703631][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  269.711659][   T30]  </TASK>
[  269.722517][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  269.731919][   T30] INFO: task syz-executor:5455 blocked for more than 148 seconds.
[  269.746414][   T30]       Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  269.757738][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.769064][   T30] task:syz-executor    state:D stack:25488 pid:5455  tgid:5455  ppid:1      flags:0x00004004
[  269.782851][   T30] Call Trace:
[  269.788716][   T30]  <TASK>
[  269.791677][   T30]  __schedule+0x1895/0x4b30
[  269.800124][   T30]  ? __pfx___schedule+0x10/0x10
[  269.807551][   T30]  ? __pfx_lock_release+0x10/0x10
[  269.812666][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  269.823706][   T30]  ? schedule+0x90/0x320
[  269.827989][   T30]  schedule+0x14b/0x320
[  269.832169][   T30]  schedule_preempt_disabled+0x13/0x30
[  269.842628][   T30]  __mutex_lock+0x6a7/0xd70
[  269.847954][   T30]  ? __mutex_lock+0x52a/0xd70
[  269.852669][   T30]  ? register_nexthop_notifier+0x84/0x290
[  269.864805][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  269.869889][   T30]  ? __asan_memset+0x23/0x50
[  269.879347][   T30]  register_nexthop_notifier+0x84/0x290
[  269.886435][   T30]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  269.892285][   T30]  ? __pfx_debug_check_no_locks_freed+0x10/0x10
[  269.903404][   T30]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  269.911060][   T30]  ? __asan_memset+0x23/0x50
[  269.920402][   T30]  ops_init+0x31e/0x590
[  269.927891][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  269.933308][   T30]  setup_net+0x287/0x9e0
[  269.942861][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  269.949872][   T30]  ? __pfx_setup_net+0x10/0x10
[  269.958883][   T30]  copy_net_ns+0x33f/0x570
[  269.963344][   T30]  create_new_namespaces+0x425/0x7b0
[  269.974352][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  269.980115][   T30]  ksys_unshare+0x619/0xc10
[  269.990623][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  269.996157][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  270.002178][   T30]  ? do_syscall_64+0x100/0x230
[  270.013135][   T30]  __x64_sys_unshare+0x38/0x40
[  270.018249][   T30]  do_syscall_64+0xf3/0x230
[  270.022790][   T30]  ? clear_bhb_loop+0x35/0x90
[  270.034009][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.039952][   T30] RIP: 0033:0x7f3c4f57f6f7
[  270.050141][   T30] RSP: 002b:00007f3c4f85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  270.058927][   T30] RAX: ffffffffffffffda RBX: 00007f3c4f5f22ec RCX: 00007f3c4f57f6f7
[  270.072690][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  270.081028][   T30] RBP: 0000000000000000 R08: 00007f3c50267d60 R09: 0000000000000000
[  270.093607][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  270.101615][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  270.115068][   T30]  </TASK>
[  270.118204][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  270.137091][   T30] 
[  270.137091][   T30] Showing all locks held in the system:
[  270.147477][   T30] 3 locks held by kworker/u8:1/12:
[  270.153025][   T30]  #0: ffff88814b901948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  270.170678][   T30]  #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  270.191614][   T30]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  270.202932][   T30] 1 lock held by ksoftirqd/0/16:
[  270.213731][   T30] 1 lock held by khungtaskd/30:
[  270.218607][   T30]  #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  270.233652][   T30] 3 locks held by kworker/1:1/47:
[  270.238702][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  270.257345][   T30]  #1: ffffc90000b77d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  270.270049][   T30]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50
[  270.289288][   T30] 3 locks held by kworker/u8:6/970:
[  270.294826][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  270.312778][   T30]  #1: ffffc90003b57d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  270.329653][   T30]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  270.340857][   T30] 4 locks held by kworker/u8:8/3989:
[  270.352267][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  270.369264][   T30]  #1: ffffc9000bb37d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  270.380130][   T30]  #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  270.393607][   T30]  #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0
[  270.403082][   T30] 2 locks held by getty/4988:
[  270.414256][   T30]  #0: ffff88802ece10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  270.429952][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  270.442720][   T30] 1 lock held by syz-executor/5239:
[  270.454379][   T30]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  270.463415][   T30] 2 locks held by syz-executor/5240:
[  270.473656][   T30]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  270.482689][   T30]  #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  270.498865][   T30] 1 lock held by syz-executor/5243:
[  270.504336][   T30]  #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  270.513377][   T30] 4 locks held by kworker/0:6/5279:
[  270.525024][   T30] 3 locks held by kworker/1:6/5280:
[  270.530253][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  270.550565][   T30]  #1: ffffc90004547d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  270.562360][   T30]  #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  270.577864][   T30] 2 locks held by syz-executor/5448:
[  270.583175][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.598719][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.609134][   T30] 2 locks held by syz-executor/5449:
[  270.620260][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.630520][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.648712][   T30] 2 locks held by syz-executor/5450:
[  270.655008][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.670370][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.681047][   T30] 2 locks held by syz-executor/5453:
[  270.692170][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.702021][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.717974][   T30] 2 locks held by syz-executor/5455:
[  270.723286][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.738678][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.751319][   T30] 2 locks held by syz-executor/5463:
[  270.762966][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.772730][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.789005][   T30] 2 locks held by syz-executor/5466:
[  270.794811][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.810245][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.820647][   T30] 2 locks held by syz-executor/5471:
[  270.831831][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.841743][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.859895][   T30] 2 locks held by syz-executor/5475:
[  270.865980][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.881349][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.891710][   T30] 2 locks held by syz-executor/5477:
[  270.902859][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.912624][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.928516][   T30] 2 locks held by syz-executor/5483:
[  270.934140][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.947381][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.961701][   T30] 2 locks held by syz-executor/5486:
[  270.969142][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  270.983305][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  270.995054][   T30] 2 locks held by syz-executor/5490:
[  271.000362][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  271.019941][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  271.030477][   T30] 2 locks held by syz-executor/5496:
[  271.041565][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  271.053268][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  271.069585][   T30] 2 locks held by syz-executor/5498:
[  271.075996][   T30]  #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  271.091488][   T30]  #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  271.102223][   T30] 
[  271.110433][   T30] =============================================
[  271.110433][   T30] 
[  271.119374][   T30] NMI backtrace for cpu 1
[  271.123731][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  271.133901][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  271.143978][   T30] Call Trace:
[  271.147270][   T30]  <TASK>
[  271.150211][   T30]  dump_stack_lvl+0x241/0x360
[  271.154913][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.160131][   T30]  ? __pfx__printk+0x10/0x10
[  271.164750][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  271.169716][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  271.175196][   T30]  ? _printk+0xd5/0x120
[  271.179370][   T30]  ? __pfx__printk+0x10/0x10
[  271.183982][   T30]  ? __wake_up_klogd+0xcc/0x110
[  271.188855][   T30]  ? __pfx__printk+0x10/0x10
[  271.193467][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  271.198514][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  271.204524][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  271.210544][   T30]  watchdog+0xff4/0x1040
[  271.214811][   T30]  ? watchdog+0x1ea/0x1040
[  271.219261][   T30]  ? __pfx_watchdog+0x10/0x10
[  271.223965][   T30]  kthread+0x2f0/0x390
[  271.228048][   T30]  ? __pfx_watchdog+0x10/0x10
[  271.232740][   T30]  ? __pfx_kthread+0x10/0x10
[  271.237343][   T30]  ret_from_fork+0x4b/0x80
[  271.241781][   T30]  ? __pfx_kthread+0x10/0x10
[  271.246387][   T30]  ret_from_fork_asm+0x1a/0x30
[  271.251190][   T30]  </TASK>
[  271.255509][   T30] Sending NMI from CPU 1 to CPUs 0:
[  271.260757][    C0] NMI backtrace for cpu 0
[  271.260769][    C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  271.260788][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  271.260797][    C0] RIP: 0010:kasan_check_range+0x56/0x290
[  271.260819][    C0] Code: fd fe ff 01 00 0f 86 43 02 00 00 48 89 fb 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 4d 89 c1 49 c1 e9 03 <49> be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83
[  271.260831][    C0] RSP: 0018:ffffc90000156420 EFLAGS: 00000a03
[  271.260846][    C0] RAX: ffffc90000156a01 RBX: 1ffff9200002acb2 RCX: ffffffff8141332b
[  271.260859][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000156590
[  271.260870][    C0] RBP: 000000000001ffff R08: ffffc9000015659f R09: 1ffff9200002acb3
[  271.260881][    C0] R10: dffffc0000000000 R11: fffff5200002acb2 R12: ffffc90000158000
[  271.260893][    C0] R13: ffffc90000156540 R14: 0000000000000000 R15: ffffc90000156590
[  271.260904][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  271.260918][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.260929][    C0] CR2: 000000110c39b499 CR3: 000000004b394000 CR4: 00000000003526f0
[  271.260943][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  271.260952][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  271.260962][    C0] Call Trace:
[  271.260968][    C0]  <NMI>
[  271.260974][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  271.260996][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  271.261017][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  271.261037][    C0]  ? nmi_handle+0x2a/0x5a0
[  271.261059][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  271.261077][    C0]  ? nmi_handle+0x14f/0x5a0
[  271.261091][    C0]  ? nmi_handle+0x2a/0x5a0
[  271.261107][    C0]  ? kasan_check_range+0x56/0x290
[  271.261122][    C0]  ? default_do_nmi+0x63/0x160
[  271.261138][    C0]  ? exc_nmi+0x123/0x1f0
[  271.261152][    C0]  ? end_repeat_nmi+0xf/0x53
[  271.261172][    C0]  ? unwind_next_frame+0xcfb/0x22d0
[  271.261193][    C0]  ? kasan_check_range+0x56/0x290
[  271.261209][    C0]  ? kasan_check_range+0x56/0x290
[  271.261226][    C0]  ? kasan_check_range+0x56/0x290
[  271.261243][    C0]  </NMI>
[  271.261248][    C0]  <TASK>
[  271.261255][    C0]  __asan_memset+0x23/0x50
[  271.261274][    C0]  ? ip_route_output_key_hash+0x193/0x2b0
[  271.261292][    C0]  unwind_next_frame+0xcfb/0x22d0
[  271.261315][    C0]  ? ip_route_output_key_hash_rcu+0x13cc/0x2390
[  271.261334][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  271.261352][    C0]  arch_stack_walk+0x11c/0x150
[  271.261370][    C0]  ? ip_route_output_key_hash+0x193/0x2b0
[  271.261389][    C0]  stack_trace_save+0x118/0x1d0
[  271.261405][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  271.261422][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  271.261438][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  271.261455][    C0]  ? ktime_get_with_offset+0x83/0x150
[  271.261476][    C0]  kasan_save_track+0x3f/0x80
[  271.261490][    C0]  ? kasan_save_track+0x3f/0x80
[  271.261502][    C0]  ? __kasan_slab_alloc+0x66/0x80
[  271.261517][    C0]  ? kmem_cache_alloc_noprof+0x135/0x2a0
[  271.261534][    C0]  ? dst_alloc+0x12b/0x190
[  271.261551][    C0]  ? ip_route_output_key_hash_rcu+0x13cc/0x2390
[  271.261589][    C0]  __kasan_slab_alloc+0x66/0x80
[  271.261604][    C0]  ? dst_alloc+0x12b/0x190
[  271.261620][    C0]  kmem_cache_alloc_noprof+0x135/0x2a0
[  271.261639][    C0]  dst_alloc+0x12b/0x190
[  271.261658][    C0]  ip_route_output_key_hash_rcu+0x13cc/0x2390
[  271.261681][    C0]  ip_route_output_key_hash+0x193/0x2b0
[  271.261699][    C0]  ? ip_route_output_key_hash+0xdf/0x2b0
[  271.261721][    C0]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  271.261739][    C0]  ? __pfx_lock_release+0x10/0x10
[  271.261763][    C0]  ip_route_output_flow+0x29/0x140
[  271.261779][    C0]  ip_route_me_harder+0x80d/0x1300
[  271.261800][    C0]  ? __pfx_ip_route_me_harder+0x10/0x10
[  271.261816][    C0]  ? trace_kmalloc+0x1f/0xd0
[  271.261833][    C0]  ? __kmalloc_node_track_caller_noprof+0x242/0x440
[  271.261861][    C0]  synproxy_send_tcp+0x356/0x6c0
[  271.261881][    C0]  synproxy_send_client_synack+0x8b8/0xf30
[  271.261903][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  271.261921][    C0]  ? synproxy_pernet+0x45/0x270
[  271.261940][    C0]  nft_synproxy_eval_v4+0x3ca/0x610
[  271.261959][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  271.261978][    C0]  ? nf_ip_checksum+0x13a/0x500
[  271.261998][    C0]  nft_synproxy_do_eval+0x362/0xa60
[  271.262017][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  271.262034][    C0]  ? __queue_work+0x199/0xf50
[  271.262055][    C0]  ? __pfx_validate_chain+0x10/0x10
[  271.262075][    C0]  nft_do_chain+0x4ad/0x1da0
[  271.262099][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  271.262115][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  271.262145][    C0]  ? __pfx_nf_nat_inet_fn+0x10/0x10
[  271.262166][    C0]  nft_do_chain_inet+0x418/0x6b0
[  271.262184][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  271.262200][    C0]  ? ipt_do_table+0x312/0x1860
[  271.262224][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  271.262240][    C0]  nf_hook_slow+0xc3/0x220
[  271.262256][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  271.262276][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  271.262295][    C0]  NF_HOOK+0x29e/0x450
[  271.262315][    C0]  ? NF_HOOK+0x9a/0x450
[  271.262334][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  271.262354][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  271.262376][    C0]  ? ip_rcv_finish+0x406/0x560
[  271.262396][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  271.262415][    C0]  NF_HOOK+0x3a4/0x450
[  271.262433][    C0]  ? __lock_acquire+0x1384/0x2050
[  271.262453][    C0]  ? NF_HOOK+0x9a/0x450
[  271.262471][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  271.262489][    C0]  ? ip_rcv_core+0x801/0xd10
[  271.262509][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  271.262531][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  271.262551][    C0]  __netif_receive_skb+0x2bf/0x650
[  271.262566][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  271.262585][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  271.262599][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.262618][    C0]  ? __pfx_lock_release+0x10/0x10
[  271.262637][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  271.262659][    C0]  process_backlog+0x662/0x15b0
[  271.262676][    C0]  ? process_backlog+0x33b/0x15b0
[  271.262695][    C0]  ? __pfx_process_backlog+0x10/0x10
[  271.262714][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.262734][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.262755][    C0]  __napi_poll+0xcb/0x490
[  271.262771][    C0]  net_rx_action+0x89b/0x1240
[  271.262796][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  271.262813][    C0]  ? sched_clock+0x4a/0x70
[  271.262836][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.262860][    C0]  handle_softirqs+0x2c5/0x980
[  271.262880][    C0]  ? run_ksoftirqd+0xca/0x130
[  271.262900][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  271.262917][    C0]  ? preempt_schedule+0xe1/0xf0
[  271.262937][    C0]  run_ksoftirqd+0xca/0x130
[  271.262956][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  271.262973][    C0]  ? kthread_should_stop+0x1b/0xf0
[  271.262993][    C0]  ? __pfx_ksoftirqd_should_run+0x10/0x10
[  271.263011][    C0]  ? smpboot_thread_fn+0x2d3/0xa30
[  271.263029][    C0]  ? smpboot_thread_fn+0x4fb/0xa30
[  271.263046][    C0]  ? smpboot_thread_fn+0x656/0xa30
[  271.263064][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  271.263082][    C0]  smpboot_thread_fn+0x544/0xa30
[  271.263100][    C0]  ? smpboot_thread_fn+0x4e/0xa30
[  271.263122][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  271.263140][    C0]  kthread+0x2f0/0x390
[  271.263153][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  271.263171][    C0]  ? __pfx_kthread+0x10/0x10
[  271.263186][    C0]  ret_from_fork+0x4b/0x80
[  271.263203][    C0]  ? __pfx_kthread+0x10/0x10
[  271.263217][    C0]  ret_from_fork_asm+0x1a/0x30
[  271.263242][    C0]  </TASK>
[  272.053696][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  272.060581][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0
[  272.070751][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  272.080817][   T30] Call Trace:
[  272.084109][   T30]  <TASK>
[  272.087051][   T30]  dump_stack_lvl+0x241/0x360
[  272.091755][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.096973][   T30]  ? __pfx__printk+0x10/0x10
[  272.101578][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  272.107589][   T30]  ? vscnprintf+0x5d/0x90
[  272.111947][   T30]  panic+0x349/0x880
[  272.115862][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  272.122034][   T30]  ? __pfx_panic+0x10/0x10
[  272.126475][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  272.131861][   T30]  ? __irq_work_queue_local+0x137/0x410
[  272.137426][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  272.142814][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  272.148987][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  272.155172][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  272.161347][   T30]  watchdog+0x1033/0x1040
[  272.165696][   T30]  ? watchdog+0x1ea/0x1040
[  272.170159][   T30]  ? __pfx_watchdog+0x10/0x10
[  272.174856][   T30]  kthread+0x2f0/0x390
[  272.178936][   T30]  ? __pfx_watchdog+0x10/0x10
[  272.183635][   T30]  ? __pfx_kthread+0x10/0x10
[  272.188239][   T30]  ret_from_fork+0x4b/0x80
[  272.192673][   T30]  ? __pfx_kthread+0x10/0x10
[  272.197280][   T30]  ret_from_fork_asm+0x1a/0x30
[  272.202072][   T30]  </TASK>
[  272.205340][   T30] Kernel Offset: disabled
[  272.209671][   T30] Rebooting in 86400 seconds..